Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/pCGs2neoWsH_5rA91YYWLIHANhw.roa
File: pCGs2neoWsH_5rA91YYWLIHANhw.roa (raw, json)
Hash identifier: hRwYrIIJ3qSX+0B+k67/ZqpWMwyJxuQCac1ptw3S0WQ=
Subject key identifier: A4:21:AC:DA:77:A8:5A:C1:FF:E6:B0:3D:D5:86:16:2C:81:C0:36:1C
Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial: 018B5CB45C83CB29955B5C49C3409D8ADDB9
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/pCGs2neoWsH_5rA91YYWLIHANhw.roa
Signing time: Mon 23 Oct 2023 13:23:25 +0000
ROA not before: Mon 23 Oct 2023 13:23:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 195.5.104.0/24 maxlen: 24
194.176.117.0/24 maxlen: 24
2a13:14c0::/32 maxlen: 48
2a13:14c1::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:b4:5c:83:cb:29:95:5b:5c:49:c3:40:9d:8a:dd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Validity
Not Before: Oct 23 13:23:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a421acda77a85ac1ffe6b03dd586162c81c0361c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:41:8a:1c:9d:9e:c8:e8:71:83:b4:65:76:
1a:8d:9e:da:ad:72:13:00:ca:3f:f0:34:e6:8e:1c:
06:67:95:0f:76:af:ef:fe:89:f3:e7:98:a7:39:26:
21:7a:5c:2c:8c:6b:80:17:c1:75:6b:bb:11:7c:88:
74:00:d4:5d:68:fb:b6:03:d5:19:9b:98:a1:a9:7d:
5c:76:c7:ce:c3:56:4a:01:06:28:f8:9c:41:68:4d:
52:eb:ea:53:ab:59:93:2d:9e:04:5f:24:96:e8:47:
82:66:2f:aa:9d:2b:ad:52:b0:49:5d:25:36:64:3d:
38:2c:f2:28:ed:11:e6:ef:8e:6d:d6:83:40:bc:a9:
3f:03:fd:59:8c:1b:c9:6b:d5:aa:7e:1d:c0:95:79:
d9:93:53:0c:bd:96:79:ee:3e:98:33:e8:35:bb:eb:
67:17:88:e8:f6:58:3a:8c:71:6f:13:c3:4c:8c:d8:
07:6a:ff:06:1d:b5:1b:8b:8b:25:19:96:ce:61:42:
fa:fe:b4:59:b3:88:96:b9:f7:02:81:02:66:87:2c:
a0:10:bf:e7:a9:1c:bc:bf:e1:7a:c2:b5:ed:e1:f7:
75:5c:26:31:71:d7:25:63:42:09:21:8c:46:ad:63:
d2:c1:08:af:c7:32:c0:e1:06:27:ed:e7:bf:97:df:
1a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:21:AC:DA:77:A8:5A:C1:FF:E6:B0:3D:D5:86:16:2C:81:C0:36:1C
X509v3 Authority Key Identifier:
keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/pCGs2neoWsH_5rA91YYWLIHANhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.117.0/24
195.5.104.0/24
IPv6:
2a13:14c0::/31
Signature Algorithm: sha256WithRSAEncryption
15:7f:3d:8e:61:26:1a:79:3d:7c:73:c9:54:44:20:e3:52:79:
cf:d3:2f:de:52:f9:60:a7:4c:1b:99:8f:ae:24:cd:91:64:13:
df:43:bf:33:d6:67:b9:95:52:5b:1f:cc:16:af:9a:de:8d:2f:
94:9a:d9:cc:4e:09:63:79:93:59:af:6e:5d:99:68:2c:9a:3c:
48:b0:89:57:cc:06:33:39:eb:e6:c5:da:69:b2:c0:75:77:b2:
51:ea:37:e0:13:90:21:c2:65:5a:88:02:fb:7d:74:68:4c:e0:
3a:56:82:ed:39:47:0d:58:c9:cd:24:55:78:58:e7:62:28:f6:
6d:ad:44:b2:76:9e:45:b8:7f:4f:61:94:d6:95:94:77:32:76:
83:db:c2:a6:f6:bd:58:23:bc:80:2f:15:08:e5:db:ac:f0:fb:
c0:47:52:01:fe:18:be:f2:77:02:3d:ab:a3:79:fa:54:82:c2:
71:27:59:fb:b5:fc:28:d6:ea:5e:5e:77:72:4d:1c:66:ae:5f:
c9:84:d6:ce:d7:68:65:48:9d:c0:17:03:d0:06:18:2e:e0:b6:
58:63:13:44:ef:81:13:f7:11:be:b1:5f:80:e6:12:9c:36:98:
30:d0:7a:5a:08:09:ea:01:ab:0c:2d:3a:8d:7e:75:b1:29:05:
6b:a6:3b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:48 2024 by rpki-client on console-ams.rpki-client.org