Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/ieUccJXudP2NMNcgKXDjQRRruJY.roa
File: ieUccJXudP2NMNcgKXDjQRRruJY.roa (raw, json)
Hash identifier: SPlh/T9rxbW5zyfI+DQZyQmJhcHGiyT5sVCXqH9C/ic=
Subject key identifier: 89:E5:1C:70:95:EE:74:FD:8D:30:D7:20:29:70:E3:41:14:6B:B8:96
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 01856DEF7A936908E9BEDB28E9D113D9BE8B
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/ieUccJXudP2NMNcgKXDjQRRruJY.roa
Signing time: Sun 01 Jan 2023 15:24:49 +0000
ROA not before: Sun 01 Jan 2023 15:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43309
IP address blocks: 2.56.168.0/24 maxlen: 24
2a0f:ca00::/33 maxlen: 33
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:7a:93:69:08:e9:be:db:28:e9:d1:13:d9:be:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Jan 1 15:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89e51c7095ee74fd8d30d7202970e341146bb896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a4:b7:dd:82:0b:72:48:78:b3:04:83:93:a2:
3c:bc:c3:ce:54:af:85:3d:c6:54:c8:61:6b:da:84:
62:9a:f6:be:c3:7f:c5:dc:76:71:4f:8d:e5:05:b9:
9a:7f:4b:ad:4d:97:1a:ea:f7:0e:97:d0:b2:b3:ca:
9f:15:9e:7a:44:98:e8:8d:53:66:78:ee:77:e0:dd:
06:fd:a4:6e:be:cd:ae:76:52:dc:5d:84:8d:9e:06:
e3:e0:17:67:da:b1:d7:39:be:00:21:7d:a9:6a:3a:
d5:0e:0d:72:c4:a6:83:66:63:de:ff:c8:e5:33:45:
6a:db:7a:d7:44:c2:22:a0:1f:cd:b2:1d:5d:5a:33:
e8:7f:6f:74:fa:6f:ec:5d:0d:4a:a3:c3:17:be:cf:
c6:b7:9c:4d:e5:97:0f:52:02:17:ba:e2:d9:45:75:
33:07:17:ed:92:a9:2c:f4:b6:84:21:ba:1d:ba:10:
b8:c8:d5:a1:c1:02:03:01:46:0e:7e:71:9c:d2:18:
b3:3f:22:3c:1e:77:43:86:2e:70:90:9c:6c:9d:b3:
9b:ea:9f:2e:05:87:f7:22:c9:da:b3:48:cb:15:23:
a2:9d:a4:f7:a3:af:97:7a:0e:a2:2e:ce:30:49:45:
2f:14:71:22:29:74:fa:c2:1c:a5:a3:17:6c:52:df:
0e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E5:1C:70:95:EE:74:FD:8D:30:D7:20:29:70:E3:41:14:6B:B8:96
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/ieUccJXudP2NMNcgKXDjQRRruJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.168.0/24
IPv6:
2a0f:ca00::/33
Signature Algorithm: sha256WithRSAEncryption
0f:a7:c0:9f:78:95:58:98:ac:33:47:cb:92:a4:1e:1c:38:70:
af:32:da:41:a0:0e:0d:8d:07:bf:7f:fc:80:02:27:cd:1f:7b:
49:59:7c:7c:f5:b4:80:91:ab:88:8a:e2:fb:77:31:3e:4f:0d:
b2:3e:57:58:9e:77:fe:9b:ab:0f:e9:3f:8a:ae:d1:c8:77:ee:
57:da:39:93:9b:b4:4d:cc:f5:f3:e7:82:73:94:a6:88:cc:1b:
27:8f:ba:a7:42:72:cd:9a:d0:7f:1f:63:d6:45:ac:e9:00:b2:
1c:fc:63:2d:c5:2e:35:85:f5:f0:dc:76:6c:f0:6c:02:1b:5c:
f7:78:eb:84:6f:8a:7b:5b:f6:f5:29:76:dc:4e:cd:e7:c6:04:
d6:d4:cc:a4:3b:a0:b8:40:9f:36:b1:cc:18:c9:6c:52:cf:e0:
88:13:60:06:29:3f:59:60:39:d5:52:c9:12:c3:5b:91:82:67:
ae:8d:53:60:7a:44:f7:fa:f9:22:96:f3:9f:6e:24:32:16:35:
ca:20:06:ff:d2:af:74:e1:13:52:c7:19:83:e1:3e:bc:7f:d4:
12:4a:9e:18:ca:45:72:b1:76:22:90:04:aa:f0:41:3b:2f:69:
1a:29:c9:62:c3:eb:61:ee:4f:1a:e2:27:f9:9c:a1:75:69:72:
87:27:a3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:24 2024 by rpki-client on console-fra.rpki-client.org