Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/udNpHJKXx65MM_MnMSwLC1jMAig.roa
File: udNpHJKXx65MM_MnMSwLC1jMAig.roa (raw, json)
Hash identifier: 1NQRzMAdnyRdU0290YWCUmwm5Nb6WpeHnjd09zzhL98=
Subject key identifier: B9:D3:69:1C:92:97:C7:AE:4C:33:F3:27:31:2C:0B:0B:58:CC:02:28
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D692B0C80FE34677F9A689048B526ED5B
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/udNpHJKXx65MM_MnMSwLC1jMAig.roa
Signing time: Fri 02 Feb 2024 09:34:05 +0000
ROA not before: Fri 02 Feb 2024 09:34:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397373
IP address blocks: 2.56.114.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 22 Feb 2024 17:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:2b:0c:80:fe:34:67:7f:9a:68:90:48:b5:26:ed:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 2 09:34:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9d3691c9297c7ae4c33f327312c0b0b58cc0228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:61:5f:2b:89:44:6c:5f:99:a2:d7:9c:be:
a0:ff:27:4c:1f:4e:7c:fa:8b:9e:f7:83:ca:db:b6:
d3:da:db:a9:f3:e0:4f:68:68:9f:2e:75:3b:86:fa:
4a:8e:9b:40:b5:c7:5f:e5:ec:f4:2b:78:ff:2b:b5:
e2:99:b3:bc:ea:5c:61:70:bb:8e:64:c1:10:ee:c1:
19:8d:df:6c:c3:70:b9:21:4b:28:fd:ae:67:2b:a5:
c9:0a:09:03:e2:77:40:bf:88:28:a9:76:eb:0c:b8:
30:a9:a1:2a:ee:96:92:21:6b:e6:4c:23:bd:81:e8:
1e:c7:70:3d:7a:49:7f:48:5e:47:b4:e7:80:7c:df:
61:b1:d7:24:f5:41:70:0b:b9:66:b9:46:73:c4:bb:
10:c9:d7:89:01:b3:c9:99:8c:83:57:52:13:fa:13:
d6:92:5a:65:d5:05:41:b6:d4:e5:b2:8a:df:a8:9b:
45:79:88:06:b6:f8:6d:52:47:78:c1:64:75:55:ca:
2e:c8:16:4d:f3:51:55:f0:2d:dc:43:5b:7f:3f:87:
f3:01:50:56:9e:89:1b:78:ff:a6:d4:7a:99:2e:5f:
09:51:74:cc:78:5f:2a:69:03:5d:8e:fa:27:eb:c9:
d0:30:8f:66:17:43:be:f7:0e:84:f0:73:b4:16:25:
82:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D3:69:1C:92:97:C7:AE:4C:33:F3:27:31:2C:0B:0B:58:CC:02:28
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/udNpHJKXx65MM_MnMSwLC1jMAig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.114.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:45:cb:e1:7c:6f:6a:2a:7b:5f:08:4c:f4:99:e3:f9:ae:d2:
59:05:30:de:c9:4e:98:a9:ee:96:1e:e8:ca:e0:32:4e:ad:00:
1a:83:d8:66:10:07:5b:3d:04:87:a4:c4:d6:3f:09:3e:a1:37:
2a:c2:81:fb:6e:da:d8:a9:0f:8d:18:6f:31:34:7b:b5:f0:d2:
b0:3b:87:90:bb:4e:f4:71:c8:94:67:f0:be:3a:d9:e5:83:23:
d1:b6:b5:27:66:d1:27:d9:d8:7c:b3:b0:53:64:ae:bc:5e:b8:
d8:1a:a2:97:0b:c8:fd:7c:80:b3:37:9b:5b:01:9e:65:d4:c8:
7b:77:44:e6:33:f7:f4:24:b1:bb:71:97:4c:9c:83:5f:da:2c:
c3:8c:81:60:4d:c5:ed:64:46:c1:42:fb:d3:9a:c8:7e:c0:4a:
f7:40:7c:8a:d8:53:d3:d2:3f:91:b8:cd:11:8c:9f:78:20:30:
78:7a:cc:47:e1:69:1e:e6:f1:3c:fd:7d:03:0d:e9:15:76:d6:
08:16:d9:2e:30:eb:78:8a:16:63:f3:ea:39:38:9b:7f:ef:f4:
b2:9b:72:f9:33:cc:98:1b:98:6e:e4:83:c4:e9:31:16:8e:60:
e0:a5:ba:7e:fb:ee:30:ee:ba:4e:12:9f:3c:7c:1a:bc:60:63:
ee:50:6f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:23 2024 by rpki-client on console-fra.rpki-client.org