Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/1-JOy-iViIbYbjTwaJJhl5wS93d4.roa
File: 1-JOy-iViIbYbjTwaJJhl5wS93d4.roa (raw, json)
Hash identifier: zjmST2ccFvzLd1koNWBdIMYNyJsVsVRFCDsblxio5d8=
Subject key identifier: F8:93:B2:FA:25:62:21:B6:1B:8D:3C:1A:24:98:65:E7:04:BD:DD:DE
Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial: 018CC3B746E3E588D84F5C1CF0CBD7634FEF
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/1-JOy-iViIbYbjTwaJJhl5wS93d4.roa
Signing time: Mon 01 Jan 2024 06:30:17 +0000
ROA not before: Mon 01 Jan 2024 06:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 195.5.104.0/24 maxlen: 24
194.176.117.0/24 maxlen: 24
2a13:14c0::/32 maxlen: 48
2a13:14c1::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Feb 2024 12:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:46:e3:e5:88:d8:4f:5c:1c:f0:cb:d7:63:4f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Validity
Not Before: Jan 1 06:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f893b2fa256221b61b8d3c1a249865e704bdddde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f6:3a:75:48:d0:65:5c:0f:a0:d6:d8:b6:e7:
95:cd:28:b7:6b:8f:77:4b:ec:25:a1:b1:ee:5d:09:
ff:e0:3b:de:34:ff:0f:29:4b:6f:5f:0a:15:90:64:
ed:7a:95:4b:3b:c3:5a:a6:0b:22:a8:32:f2:89:11:
17:a9:cd:c4:f7:2d:84:6f:f3:ac:a5:3a:5f:6f:f6:
4d:7d:94:46:5f:a3:5c:91:68:60:1f:0c:90:83:3d:
a2:ba:7c:c5:d7:f7:0f:d9:29:28:43:b6:a7:f1:0e:
9f:7d:cd:9a:b5:1e:5f:bd:3a:0e:8a:c3:39:b9:95:
1e:69:74:cd:61:54:1c:86:79:2a:71:49:7d:9b:e1:
10:8e:51:3c:10:6e:7a:53:52:52:fc:30:18:19:6c:
0c:fc:04:c9:68:df:88:04:ae:46:56:4f:f1:74:7f:
71:37:bd:17:d4:ac:eb:23:e9:6f:dc:80:4b:09:76:
60:0f:de:84:fa:c1:e9:a1:5a:9a:10:2d:64:df:ee:
56:a8:67:8d:05:70:8b:9b:c3:7c:d5:7f:8a:fd:74:
57:4f:08:c1:79:17:9f:c3:4f:65:22:08:fd:cc:93:
73:54:ac:fa:1c:5c:58:7b:f2:23:98:9b:3a:77:9e:
a5:c4:88:12:21:3e:f8:c2:23:86:1f:dc:db:ed:cd:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:93:B2:FA:25:62:21:B6:1B:8D:3C:1A:24:98:65:E7:04:BD:DD:DE
X509v3 Authority Key Identifier:
keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/1-JOy-iViIbYbjTwaJJhl5wS93d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.117.0/24
195.5.104.0/24
IPv6:
2a13:14c0::/31
Signature Algorithm: sha256WithRSAEncryption
3b:86:e3:b1:b2:0d:ab:72:25:99:ff:94:3b:cc:cf:86:a0:80:
cd:d1:c2:02:3f:05:99:0f:5e:4b:48:97:c2:0a:c7:a6:2e:cf:
be:63:84:fd:a1:f0:98:08:21:96:3a:a3:a6:a5:64:cd:d4:9e:
68:74:35:0e:92:0f:e0:dd:a0:f9:1c:23:da:b8:f6:41:e4:45:
1e:d4:3f:38:2e:dc:d4:39:c8:2a:00:cd:9a:7f:3f:db:b2:b2:
18:f4:cd:90:3d:dc:41:43:55:93:f0:b3:5a:9b:28:1a:c0:e7:
e0:19:c1:11:68:c9:b8:47:b3:85:e4:10:7a:82:aa:c3:0b:74:
45:e2:6f:fa:76:2f:0f:dd:c4:19:e9:b7:d8:77:a5:4e:69:b7:
11:97:a1:42:ab:cd:7c:b8:ab:49:0b:dc:e7:4f:46:68:fc:23:
e2:07:8a:56:d1:91:b1:26:9a:8e:b6:fd:c3:59:08:4d:eb:4e:
af:ac:e9:e8:45:a1:f0:69:ba:0e:d0:92:b8:18:b8:1c:43:b5:
08:7c:70:46:5b:1c:29:2e:56:2d:83:6e:f5:73:5f:87:8c:60:
27:16:be:a5:f6:f7:91:25:89:95:97:b1:86:cf:3b:21:18:c6:
03:00:a6:4f:b2:7a:1e:1f:05:6a:da:ea:7b:51:38:e8:af:a3:
27:93:ff:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:00 2024 by rpki-client on console-fra.rpki-client.org