Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/X6nL1F54kFAQZlMELPyGQm7cT1Q.roa
File: X6nL1F54kFAQZlMELPyGQm7cT1Q.roa (raw, json)
Hash identifier: NAWZMn17x2VgPyOQMG1p3vJKvStGMSzi803qu1ZQiAg=
Subject key identifier: 5F:A9:CB:D4:5E:78:90:50:10:66:53:04:2C:FC:86:42:6E:DC:4F:54
Certificate issuer: /CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Certificate serial: 018C2543FC80BFE12BAB3C3A9865AF742296
Authority key identifier: 59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/X6nL1F54kFAQZlMELPyGQm7cT1Q.roa
Signing time: Fri 01 Dec 2023 12:04:21 +0000
ROA not before: Fri 01 Dec 2023 12:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 194.56.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:43:fc:80:bf:e1:2b:ab:3c:3a:98:65:af:74:22:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Validity
Not Before: Dec 1 12:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fa9cbd45e789050106653042cfc86426edc4f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:33:3e:0d:5e:bb:29:66:07:bc:5d:50:70:d3:
2c:a3:57:ea:4f:f5:ba:29:f3:ed:cb:37:d3:e2:62:
1a:58:3f:52:44:15:ed:59:2c:29:db:c7:08:19:29:
44:6c:55:4a:5d:4b:c9:79:19:f2:75:c2:1c:38:95:
eb:b7:0d:18:ca:df:60:02:34:2c:c1:ad:8c:9c:24:
c8:8d:63:4a:7e:40:d5:6a:c5:cb:02:fc:23:1b:88:
51:4d:92:cb:01:15:66:54:de:e5:40:45:dc:1f:ea:
24:5b:f6:a4:4d:49:9b:ba:4b:8e:8e:28:f7:19:ed:
75:ab:e7:f4:88:98:be:d4:a0:44:b6:19:37:28:45:
40:b5:48:c6:59:42:38:f2:a6:86:39:93:ca:14:a1:
64:a7:1b:cd:4e:cc:8b:60:a5:9c:09:32:d2:0f:74:
2d:1f:0f:ed:d2:96:61:94:63:ec:fd:ba:c9:7d:31:
a1:f6:c1:c6:f5:42:6b:92:cb:33:4d:31:55:08:7e:
5a:22:ba:24:12:8b:94:9a:5d:65:87:f4:cd:f9:30:
37:30:74:47:4a:36:de:2c:8c:fb:82:3b:93:e6:95:
f5:6c:4a:41:e3:2f:02:ed:3f:9c:f6:2e:c0:0a:7c:
a8:a3:92:b1:dd:6a:e8:50:eb:f9:b0:26:28:e3:0f:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A9:CB:D4:5E:78:90:50:10:66:53:04:2C:FC:86:42:6E:DC:4F:54
X509v3 Authority Key Identifier:
keyid:59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/X6nL1F54kFAQZlMELPyGQm7cT1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.108.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:8b:87:89:21:64:e6:48:e5:97:09:aa:c0:85:8d:ae:0f:13:
9e:c0:f9:4c:5c:a0:d1:3f:ee:e8:a7:d9:32:29:f2:92:c3:ee:
73:7d:05:2d:6a:5d:a0:dd:51:7f:a8:02:4d:5f:0f:61:e8:e3:
c0:9e:6c:e9:d1:2d:b6:22:57:89:5e:05:da:2d:e3:3b:53:c1:
48:da:92:05:6a:e1:b0:69:5b:de:2b:1c:b8:b8:04:b6:d4:3a:
37:fe:42:85:d7:4a:5f:6a:07:fd:61:c1:86:03:76:3e:be:92:
8a:3d:39:69:0b:b3:e7:2a:ac:b3:d3:71:9b:31:39:40:2c:8f:
14:48:12:4c:b2:34:98:70:55:9a:9c:db:24:57:b9:f9:86:2e:
2b:18:a5:58:39:29:26:d7:58:fb:d2:7a:26:42:fa:64:de:c7:
44:3f:50:08:5e:b4:44:08:97:45:d7:3b:04:45:70:72:1b:7c:
14:10:52:29:22:a9:e1:fd:ee:69:da:94:e6:52:60:21:b6:f3:
0d:84:60:fe:f8:23:3e:4d:27:ed:94:aa:82:95:2c:1e:b7:ee:
44:d3:b9:b2:8e:d0:03:25:c4:06:75:25:58:0b:1e:eb:91:06:
17:89:13:56:62:05:31:6c:48:bb:40:e5:3d:5f:f1:8c:28:5a:
70:1d:0f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:19 2024 by rpki-client on console-ams.rpki-client.org