Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/56X-VzHj7879O35dJ6z7gaUMoRE.roa
File: 56X-VzHj7879O35dJ6z7gaUMoRE.roa (raw, json)
Hash identifier: pt8fnGL2Z1PQavbNu4nPeYKKYQjGukbv34NKGvzRuCA=
Subject key identifier: E7:A5:FE:57:31:E3:EF:CE:FD:3B:7E:5D:27:AC:FB:81:A5:0C:A1:11
Certificate issuer: /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial: 018CC56DF80C929600C83D9084791B7D40D3
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/56X-VzHj7879O35dJ6z7gaUMoRE.roa
Signing time: Mon 01 Jan 2024 14:29:27 +0000
ROA not before: Mon 01 Jan 2024 14:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 192.115.208.0/24 maxlen: 24
192.115.210.0/23 maxlen: 23
192.115.0.0/22 maxlen: 24
192.115.4.0/24 maxlen: 24
192.115.7.0/24 maxlen: 24
2a01:4280:7::/48 maxlen: 64
2a01:4280:2::/48 maxlen: 64
Validation: Failed, certificate revoked on Thu 07 Mar 2024 10:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f8:0c:92:96:00:c8:3d:90:84:79:1b:7d:40:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7a5fe5731e3efcefd3b7e5d27acfb81a50ca111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ad:b3:b2:ef:db:22:1a:ce:cc:75:d5:cb:f3:
ca:88:59:09:12:78:6c:d5:c7:44:33:94:e7:41:82:
71:6d:de:6a:6e:fe:81:1b:cf:db:88:ab:83:b5:cc:
0c:eb:db:b0:32:08:70:d7:c4:68:7e:a2:40:b3:24:
a8:1e:36:16:47:02:c5:10:87:18:15:fd:b8:c0:b4:
fc:18:8c:7c:6e:18:76:c2:26:1c:e5:83:77:e0:84:
d9:a7:3d:79:f6:0d:16:9b:a8:49:fc:3f:54:cb:a7:
4f:c2:1c:96:36:4a:a2:22:be:1b:b7:2c:28:1a:58:
c6:5d:91:9a:fa:34:b9:b6:c7:11:0c:40:f7:fa:fe:
12:44:84:cd:9a:b8:4a:e3:a2:77:fd:e8:ac:6c:c3:
70:de:a3:a4:09:05:d3:c9:4c:07:e4:ee:12:28:3f:
92:ab:f4:98:82:ca:3b:df:52:ca:f5:3e:f1:8b:03:
57:29:f6:7e:59:b0:59:4e:9f:cb:2a:56:77:f9:4e:
d8:f2:36:55:c3:27:e1:8e:b3:1e:c3:65:7a:a0:6b:
d3:44:10:05:f6:d2:dd:83:9e:d5:ec:0d:f0:28:9b:
29:34:01:bc:88:03:7a:69:2a:de:7b:86:7e:5d:9c:
21:7c:d7:0e:a4:a3:58:ad:a6:46:b9:8b:9f:b2:cd:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A5:FE:57:31:E3:EF:CE:FD:3B:7E:5D:27:AC:FB:81:A5:0C:A1:11
X509v3 Authority Key Identifier:
keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/56X-VzHj7879O35dJ6z7gaUMoRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.115.0.0-192.115.4.255
192.115.7.0/24
192.115.208.0/24
192.115.210.0/23
IPv6:
2a01:4280:2::/48
2a01:4280:7::/48
Signature Algorithm: sha256WithRSAEncryption
0d:f2:73:17:be:f1:6c:1d:e9:d8:32:0b:e3:cf:ed:a6:74:ed:
45:08:be:66:cb:82:0a:2b:c7:d7:81:36:ea:4f:6b:79:e3:02:
de:f1:62:09:dd:c5:1c:62:6b:91:5c:66:a9:0f:c1:74:97:a4:
25:8f:13:9d:9e:22:15:f0:9f:eb:79:5a:71:24:b7:22:9d:4b:
47:12:c0:4c:12:52:66:5d:86:bc:30:72:e3:d9:56:b7:31:90:
87:c0:c7:62:1f:66:09:66:a0:00:e4:66:ff:55:08:ea:4c:bf:
06:50:bb:c6:8f:a7:79:2c:e4:c5:60:39:10:91:eb:49:32:1e:
c3:db:dc:be:52:7e:9c:3e:b5:5b:59:a0:ca:2e:ef:77:8e:fc:
3f:33:ab:89:e4:b3:7d:07:c3:fa:cd:5c:3f:59:f3:36:be:29:
3a:24:01:c6:60:6e:05:e4:cd:d6:ab:98:9f:63:2d:b0:46:5d:
73:8f:32:5d:e6:27:7d:67:5f:7d:94:80:7b:71:bb:11:61:34:
63:4e:4e:f5:17:5a:dc:90:8f:84:f4:06:5e:82:57:c0:68:2a:
8c:e9:29:90:f0:cd:8d:eb:01:81:b3:0b:ff:b6:58:b1:7b:7d:
9e:bd:79:09:f1:9f:4d:21:a3:30:a8:7e:57:a5:45:b7:10:07:
23:c1:ad:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 14:01:47 2024 by rpki-client on console-ams.rpki-client.org