Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/wNqy3itglaRmTn-x-92TO2JOMjc.roa
File: wNqy3itglaRmTn-x-92TO2JOMjc.roa (raw, json)
Hash identifier: KbYhOz0kEHq39NqEjQYiSeT9WnbmQ1MyYF3IRhs7sOg=
Subject key identifier: C0:DA:B2:DE:2B:60:95:A4:66:4E:7F:B1:FB:DD:93:3B:62:4E:32:37
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A7F6704538C7D4D937AFF98CDFA9C9D89
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/wNqy3itglaRmTn-x-92TO2JOMjc.roa
Signing time: Sun 10 Sep 2023 14:02:52 +0000
ROA not before: Sun 10 Sep 2023 14:02:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44901
IP address blocks: 2.56.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7f:67:04:53:8c:7d:4d:93:7a:ff:98:cd:fa:9c:9d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 10 14:02:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0dab2de2b6095a4664e7fb1fbdd933b624e3237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3d:1d:9f:26:2e:e2:ff:5b:9e:31:04:5d:76:
81:47:d9:b5:37:51:db:3f:19:d4:11:ea:53:25:76:
e9:98:2b:f2:e3:20:ad:b8:27:04:45:48:74:7a:e5:
bc:e9:66:b3:af:d8:0d:e5:0b:51:7c:90:32:f6:5d:
f7:26:b8:14:7f:88:98:7d:b2:0a:47:60:f8:02:67:
0d:b3:3c:85:cc:b7:65:b0:eb:bc:a3:dc:eb:26:f8:
33:6e:ac:9a:95:33:dd:b1:bc:79:a2:93:4e:df:2b:
a1:4d:a6:11:d0:24:81:9b:ed:b0:b0:1b:28:0c:bd:
38:e8:21:53:9b:3d:8b:22:f4:d1:8d:19:8f:fe:f4:
43:2b:a7:f1:3e:7b:08:14:d0:97:24:c1:a7:e0:10:
92:e3:de:ef:b9:c6:ee:6c:c5:2f:bb:51:71:20:da:
61:0a:76:ed:b2:cd:8e:48:4f:4e:8b:1f:1d:65:61:
f8:67:a1:fc:53:d4:30:ef:04:a2:57:0a:30:e2:07:
a2:81:78:8c:c7:d2:3c:4d:54:e9:f2:e9:7d:02:a2:
cb:5f:3a:2d:ac:a3:2d:e1:2f:7a:7c:b1:55:28:c1:
55:ca:28:d1:1c:2e:c5:8b:a1:c6:6c:63:11:f5:ce:
3b:49:8c:09:c5:29:93:41:0e:e4:e2:c7:ef:0e:a9:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DA:B2:DE:2B:60:95:A4:66:4E:7F:B1:FB:DD:93:3B:62:4E:32:37
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/wNqy3itglaRmTn-x-92TO2JOMjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:48:68:e9:e9:3b:70:b5:8b:ac:fe:68:bd:84:10:72:4f:9e:
19:74:27:4f:85:12:5c:49:f9:b1:6a:ef:ed:00:09:76:ea:61:
d8:95:0b:ed:a5:15:35:ba:24:f3:26:25:3e:a5:b2:ee:fb:ff:
17:9f:0a:ad:80:b8:87:cf:94:d7:89:ac:52:c9:9b:09:8d:75:
c3:1e:e4:14:27:7a:4b:5f:78:48:66:6d:1a:e7:df:9e:e4:26:
71:92:bb:13:66:2e:91:3e:c5:79:56:b7:08:76:8d:cc:99:44:
c6:ff:ce:9f:9f:11:4a:c2:9e:e0:7f:5b:35:31:c6:06:1d:44:
71:b5:94:9e:59:ea:73:56:59:37:5b:25:80:2d:37:a3:a6:58:
4f:7e:09:aa:9c:17:31:91:0f:d8:64:bd:78:7a:93:ee:0d:39:
18:bc:1c:f1:36:11:fd:b0:df:10:f8:69:03:2f:e5:90:ba:6b:
89:04:16:a7:d7:dc:92:bb:9b:df:cf:f7:14:13:99:b3:6f:fc:
0d:44:fd:42:cf:5f:17:4f:99:46:6f:42:ff:ca:f9:85:fc:be:
91:a0:16:c0:63:73:f1:1a:4d:2c:77:a5:68:47:f6:31:77:7d:
f2:01:0e:82:5e:2b:08:24:cc:e4:c1:ac:20:9b:70:db:27:eb:
37:54:12:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 14:14:27 2023 by rpki-client on console-fra.rpki-client.org