Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/fRHuP6Z4RLGePcXQSF86xffvVvk.roa
File: fRHuP6Z4RLGePcXQSF86xffvVvk.roa (raw, json)
Hash identifier: ilv5YGFWqE3IhwQn48B6sEUfDDQ/iONhkHashvVThzI=
Subject key identifier: 7D:11:EE:3F:A6:78:44:B1:9E:3D:C5:D0:48:5F:3A:C5:F7:EF:56:F9
Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial: 0189D491DE43F1711F6BDE29FC8DCBFB192C
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/fRHuP6Z4RLGePcXQSF86xffvVvk.roa
Signing time: Tue 08 Aug 2023 09:54:36 +0000
ROA not before: Tue 08 Aug 2023 09:54:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61424
IP address blocks: 2.56.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:91:de:43:f1:71:1f:6b:de:29:fc:8d:cb:fb:19:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
Validity
Not Before: Aug 8 09:54:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d11ee3fa67844b19e3dc5d0485f3ac5f7ef56f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:81:18:43:d1:e0:85:70:10:4b:34:72:fe:
7b:d8:43:e2:50:8c:8a:7b:46:bb:1d:46:b5:5d:a3:
3f:08:3c:db:a5:1b:03:b9:6f:61:b9:40:05:5d:6b:
73:3e:dd:85:42:66:5b:99:b3:de:1b:6a:53:c4:af:
87:48:a5:9e:c3:9c:65:20:67:3a:b9:6f:11:dd:09:
81:e9:1b:7d:88:6a:06:26:ff:e5:99:81:21:14:b3:
11:1e:2d:5c:3b:5d:c2:67:fb:fc:63:ae:c5:e7:bf:
9b:54:d6:0a:53:61:ad:4b:05:ab:7e:58:33:ad:56:
ce:e7:e1:9e:79:59:68:8c:43:b1:e3:68:4a:6c:41:
59:fd:e2:9d:0a:7a:a3:1f:c2:5b:02:54:0d:b6:f3:
65:82:c0:d6:5d:ea:75:8a:de:0c:3c:25:03:07:5f:
ed:80:da:cf:af:fa:62:ec:4b:0c:10:f1:25:57:5f:
b2:43:de:81:9a:66:82:db:1d:b4:49:64:ba:23:98:
99:a3:1e:50:8d:3c:fc:81:ae:67:29:4e:6d:ba:fe:
2d:c4:63:af:d9:b0:5a:22:f9:ba:ee:9b:65:30:3c:
ad:85:db:0d:9a:a1:7b:9d:bf:a8:15:7e:42:c3:df:
b6:15:0c:67:91:85:75:19:00:e2:ee:ce:00:d0:5c:
97:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:11:EE:3F:A6:78:44:B1:9E:3D:C5:D0:48:5F:3A:C5:F7:EF:56:F9
X509v3 Authority Key Identifier:
keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/fRHuP6Z4RLGePcXQSF86xffvVvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.89.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ef:a7:9c:4a:63:ff:4c:ce:c8:78:46:f9:2d:5e:d2:f1:2a:
c5:ec:28:8e:30:92:76:70:6e:a1:9b:64:29:dc:d9:15:59:b9:
c0:f9:7a:30:ed:25:ea:a4:d6:7d:46:76:ae:18:60:b8:7c:03:
a1:21:03:d6:b2:36:18:8c:a0:69:c5:86:4f:21:ef:53:d9:32:
f4:dc:a6:c0:ce:61:4d:5b:08:04:51:d3:f7:93:ae:ef:93:5a:
eb:52:98:9f:d5:25:cb:26:c6:e1:b6:c0:aa:b5:78:48:3b:d4:
f7:91:4a:27:38:85:83:c7:13:dd:d6:41:81:40:2e:9c:d5:59:
2b:63:01:91:71:bf:92:db:6a:aa:73:e9:05:aa:fb:43:5e:02:
70:be:bf:cc:01:fe:c3:62:ef:a4:32:60:bf:9e:0a:c6:1f:6b:
58:c8:40:eb:35:c8:7a:ea:12:fd:1c:f3:47:e5:c5:1e:8a:34:
d8:ee:a6:3f:ab:0e:39:88:08:75:7b:a0:c3:0b:a4:17:aa:b6:
c0:8c:46:bf:bf:1b:e6:7d:91:eb:c0:6b:f9:49:f1:8d:40:57:
fd:c1:4f:cb:64:9d:16:ee:5d:9f:b8:5f:01:6d:26:df:5e:22:
d8:f6:cc:17:a4:74:97:2e:58:f9:47:12:45:42:ab:7f:ef:78:
7f:61:3b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:20 2024 by rpki-client on console-ams.rpki-client.org