Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/6c1W5UqJ-FpJjvTsn1UuxDV02Mo.roa
File: 6c1W5UqJ-FpJjvTsn1UuxDV02Mo.roa (raw, json)
Hash identifier: Hh4u4MWFLBgzk4HEwt/I4vMtPha0/1a/EV0p2+CJSFo=
Subject key identifier: E9:CD:56:E5:4A:89:F8:5A:49:8E:F4:EC:9F:55:2E:C4:35:74:D8:CA
Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial: 018B5CB45B719A8E47BBC81F7920C6E250B8
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/6c1W5UqJ-FpJjvTsn1UuxDV02Mo.roa
Signing time: Mon 23 Oct 2023 13:23:25 +0000
ROA not before: Mon 23 Oct 2023 13:23:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 195.5.104.0/24 maxlen: 24
194.176.117.0/24 maxlen: 24
2a13:14c0::/32 maxlen: 48
2a13:14c1::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:b4:5b:71:9a:8e:47:bb:c8:1f:79:20:c6:e2:50:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Validity
Not Before: Oct 23 13:23:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9cd56e54a89f85a498ef4ec9f552ec43574d8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:ed:ad:0c:f8:70:11:35:aa:d8:22:b4:a8:
af:77:34:1f:3e:39:d3:8e:8d:24:b7:b3:04:7f:7a:
ce:07:f8:ef:b6:1b:df:93:5e:ca:aa:e1:5a:40:52:
77:90:23:0f:1a:04:a6:e6:ce:d0:47:c5:39:f5:a1:
44:6e:5f:d5:b2:76:d2:b1:dc:6a:62:a8:b6:27:26:
4a:57:ad:ea:29:9f:a9:f5:23:13:7f:b2:82:bd:4e:
88:3a:e0:6e:9c:44:60:07:0c:9c:10:c1:6a:8a:1e:
c2:8b:2c:23:8c:66:0d:73:b1:1b:92:2f:fa:91:04:
fb:02:c8:37:25:4b:04:f9:59:81:aa:ee:a2:d4:00:
f5:1d:11:6d:8b:f2:97:da:9f:73:ab:7b:4f:2f:e2:
ca:ce:44:3f:0d:99:ba:71:ce:0d:cf:aa:68:6f:1d:
8c:84:54:c9:5b:b0:58:28:13:6e:d4:d7:fd:b6:39:
60:ad:00:3e:0d:ba:2a:43:37:19:e7:a1:4f:f0:c0:
15:a7:4c:3f:3a:3d:f2:e1:4c:b6:f2:b3:7e:b7:10:
98:19:6f:b0:08:0e:60:b7:80:39:12:be:3b:45:58:
d4:ad:c5:30:9e:03:94:c8:b3:74:55:c2:97:a5:24:
3e:a9:18:15:ad:28:28:ee:56:0d:fc:05:1e:8a:77:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CD:56:E5:4A:89:F8:5A:49:8E:F4:EC:9F:55:2E:C4:35:74:D8:CA
X509v3 Authority Key Identifier:
keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/6c1W5UqJ-FpJjvTsn1UuxDV02Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.117.0/24
195.5.104.0/24
IPv6:
2a13:14c0::/31
Signature Algorithm: sha256WithRSAEncryption
2e:5b:c9:dc:91:d6:83:00:5e:96:2f:d6:cb:29:7a:8a:2a:e8:
54:eb:bf:a7:41:61:0b:fc:c9:74:29:6b:8f:f9:09:ca:1f:79:
39:00:54:17:4b:37:dd:c8:7d:02:2a:21:4e:c6:71:fd:62:ea:
4d:2b:9c:96:28:44:05:95:5d:0c:10:82:8f:15:a9:99:6a:e4:
0e:f9:5a:b2:3b:3b:ae:b2:5f:8e:b8:ce:11:97:86:e1:9e:d5:
c1:6e:d1:f7:ff:24:ab:cb:89:f3:95:c0:83:97:1f:94:85:af:
3e:11:b3:a1:15:64:4b:18:b4:d9:54:c3:bb:37:b3:e2:e7:aa:
e2:fc:90:a1:4c:c2:6b:19:4a:2e:fc:54:c6:1d:e1:48:f6:1c:
ca:d1:89:06:85:3a:c3:f7:9f:06:29:60:82:7b:90:81:1b:6e:
b5:d8:68:3e:63:5a:79:5c:6e:3b:bf:d9:fd:3b:82:2e:3c:6b:
15:a8:70:d8:97:83:1b:d0:02:cf:4d:54:87:07:c4:dd:27:83:
a8:ba:6b:42:0f:8d:55:c9:a5:f2:38:97:13:b7:6b:3b:6c:f6:
bd:19:f0:b4:2e:e5:73:e2:7a:2f:f1:d3:72:5f:4d:7f:4d:af:
0d:c9:24:b5:83:e1:ac:09:80:7e:78:15:ff:4b:62:ab:5d:85:
e2:1e:9d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:00 2024 by rpki-client on console-fra.rpki-client.org