Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/z_W7vGvzTyp3-3boG9_sWWt3UE0.roa
File: z_W7vGvzTyp3-3boG9_sWWt3UE0.roa (raw, json)
Hash identifier: 6fU3Gvwyrk+8n88DTD2288Cc209KVFb3O16M4nSq7C4=
Subject key identifier: CF:F5:BB:BC:6B:F3:4F:2A:77:FB:76:E8:1B:DF:EC:59:6B:77:50:4D
Certificate issuer: /CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Certificate serial: 018C24B9BD4C5E452B8A4B11EFB9D928875E
Authority key identifier: 59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/z_W7vGvzTyp3-3boG9_sWWt3UE0.roa
Signing time: Fri 01 Dec 2023 09:33:21 +0000
ROA not before: Fri 01 Dec 2023 09:33:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 194.56.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 01 Dec 2023 12:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:b9:bd:4c:5e:45:2b:8a:4b:11:ef:b9:d9:28:87:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Validity
Not Before: Dec 1 09:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cff5bbbc6bf34f2a77fb76e81bdfec596b77504d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:49:69:49:3a:fd:24:b1:84:8a:fa:f1:c2:f3:
30:9b:82:97:68:b1:0b:53:a3:0f:a3:fe:71:e2:68:
51:9d:6c:4a:38:1f:a6:8c:5a:c2:9c:97:df:d0:62:
24:89:1d:8f:b3:d3:26:9c:fa:d9:db:a4:52:52:c9:
b2:46:ac:fc:21:2e:64:32:57:be:3b:94:02:2e:cf:
b7:45:1f:cb:16:2c:12:bd:2b:79:c6:9b:65:8b:fc:
24:c8:28:88:1e:13:76:61:98:ee:cc:19:ca:b0:23:
9f:5a:77:fc:e6:2d:48:31:52:44:58:5c:0b:e4:a7:
04:12:1a:28:59:d0:b8:7d:8f:1f:1a:98:0d:cd:43:
6c:b3:26:d4:a5:b0:5e:73:70:43:4c:d3:08:9b:3b:
27:73:fe:0f:7f:68:f2:60:ba:af:9f:10:d7:84:26:
59:c1:2f:ac:a5:be:cd:ed:ad:90:fd:5a:be:d6:1d:
cd:8e:c4:1c:b8:1c:c8:1d:5b:46:fc:8d:72:b8:58:
c4:f1:cc:75:74:37:5f:d9:12:62:80:05:e0:5f:98:
20:66:19:7a:3d:80:28:21:e5:66:f1:4d:f6:53:b5:
1b:1b:1c:74:44:c8:f0:b6:b0:4a:ee:10:34:4f:16:
6f:f2:71:34:ed:d5:ea:d8:6c:c1:00:2e:7d:12:3d:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F5:BB:BC:6B:F3:4F:2A:77:FB:76:E8:1B:DF:EC:59:6B:77:50:4D
X509v3 Authority Key Identifier:
keyid:59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/z_W7vGvzTyp3-3boG9_sWWt3UE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.108.0/22
Signature Algorithm: sha256WithRSAEncryption
07:44:9a:83:53:2e:5e:16:67:80:8d:d8:31:5a:69:9f:0b:5b:
b5:8e:2a:01:9b:6e:6f:ae:1b:33:80:8d:06:62:da:91:c2:94:
fe:75:d8:05:4c:cc:9a:e6:df:b1:fc:0c:ab:e2:6f:4d:fc:8b:
04:42:f5:1f:07:10:82:d5:bc:e3:51:a0:78:38:96:21:51:03:
dc:a4:31:d4:c0:a2:fe:d9:b7:9c:4a:06:cf:49:f3:f8:84:23:
0d:44:cd:8c:7a:21:54:ce:32:1c:cd:be:be:3d:fe:c2:a4:5f:
15:cd:84:8e:4f:ea:cd:3d:8b:76:72:f1:c7:c7:8c:79:3d:dc:
6a:2f:8b:14:4b:f6:4a:f7:cc:d1:8c:34:14:6b:00:da:ef:73:
6d:31:f4:e1:82:b6:28:1d:e0:f4:d6:49:7f:02:2e:49:3d:fa:
65:45:ff:b7:ac:dc:5a:c2:c9:4b:31:c3:db:c4:82:cc:df:bd:
7b:93:fd:d0:c1:72:e1:55:c4:f7:10:d6:b2:cf:6c:b9:59:60:
ce:4d:b7:25:ff:92:c0:96:c5:84:1b:cd:55:7d:c4:30:ee:d2:
c5:bf:3e:c8:61:4c:6e:d3:9f:80:aa:70:2c:93:bf:b4:97:e5:
26:45:cb:ef:ae:c3:7a:ad:96:7e:a6:bc:43:59:ae:59:f4:e8:
1f:ec:0f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:14 2024 by rpki-client on console-fra.rpki-client.org