Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/nph28Mw7Cea8B76XOHJTIJr_eZ4.roa
File: nph28Mw7Cea8B76XOHJTIJr_eZ4.roa (raw, json)
Hash identifier: szu6mnbSHrC4PHU7eH/TYfbNziDVDTm7S3h9CjLLW9Q=
Subject key identifier: 9E:98:76:F0:CC:3B:09:E6:BC:07:BE:97:38:72:53:20:9A:FF:79:9E
Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial: 01863167BF83E9BAEEB592AA0D075B76B7BF
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/nph28Mw7Cea8B76XOHJTIJr_eZ4.roa
Signing time: Wed 08 Feb 2023 14:22:08 +0000
ROA not before: Wed 08 Feb 2023 14:22:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142113
IP address blocks: 2.56.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:31:67:bf:83:e9:ba:ee:b5:92:aa:0d:07:5b:76:b7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
Validity
Not Before: Feb 8 14:22:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e9876f0cc3b09e6bc07be97387253209aff799e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:83:7d:cd:19:3b:f3:d1:36:a1:74:f2:2b:
fe:06:f7:ed:12:48:85:4f:e5:d5:a0:b5:c4:e4:50:
94:84:28:74:01:e7:12:62:76:bf:07:c1:a3:e0:aa:
64:dc:96:12:66:cf:ca:f9:5b:4a:df:6d:7f:3c:ca:
64:ef:59:2c:06:ca:ef:58:07:8f:e7:3e:bb:86:71:
f4:2d:ef:d9:c3:c3:35:34:f4:b7:17:dd:d3:3d:06:
5f:e9:10:aa:2b:0a:79:4b:be:07:6a:6c:93:b1:03:
1a:57:32:5a:c8:7a:69:f3:7e:9a:24:98:f1:c6:54:
a7:2b:1d:76:14:87:3b:50:58:3b:fa:cd:c8:d2:d8:
06:b7:cc:25:94:5e:3d:18:14:e8:68:1b:c0:ef:40:
82:bc:c3:4a:c5:55:fb:47:6e:94:c2:7a:b4:38:68:
a9:f6:21:1a:9b:32:33:f1:c7:f5:7c:ee:03:06:38:
3f:c5:c1:48:53:09:8a:a1:7b:fc:9b:01:f5:32:a8:
be:64:d5:04:12:7a:e3:cc:e5:78:ef:c0:79:02:30:
1a:c6:0e:4f:7e:4e:23:b7:07:6b:ff:8b:44:85:19:
88:48:c6:9f:d8:42:1b:92:cc:f2:68:c5:fe:a4:b4:
5a:69:9f:61:45:81:86:79:12:c1:84:01:90:40:38:
3d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:98:76:F0:CC:3B:09:E6:BC:07:BE:97:38:72:53:20:9A:FF:79:9E
X509v3 Authority Key Identifier:
keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/nph28Mw7Cea8B76XOHJTIJr_eZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5d:95:1b:83:b7:e2:ca:80:ad:04:3e:b3:ae:cb:fb:01:43:
d3:82:32:04:db:a4:fc:7d:ab:01:0f:69:6a:bb:9b:bc:2e:d2:
0d:e5:b0:61:58:5d:f7:52:83:4d:2f:55:9f:f3:1f:b9:b9:a0:
ad:6f:04:a5:c7:ef:a2:15:6c:85:64:76:af:c9:2e:a0:88:4f:
f9:da:94:c3:83:fc:46:91:68:19:22:08:32:51:3e:27:5e:74:
4c:33:90:71:bc:a2:30:fc:69:32:40:22:60:23:f6:fa:03:9b:
e1:2e:a9:04:75:ba:46:79:35:21:62:74:6b:cb:c2:85:98:e7:
f6:b1:0b:ae:0b:f0:09:02:16:9b:84:59:28:b8:15:a1:a3:55:
95:bb:f2:66:8a:d5:50:7c:09:39:87:ff:79:08:8c:81:fc:84:
ad:36:d1:e2:78:6d:55:89:93:9b:2e:1e:52:92:d7:34:3b:a5:
c7:f3:ea:54:35:43:58:21:bb:77:ec:83:28:c8:25:87:c3:09:
28:51:c1:b5:46:b4:c1:06:36:04:1b:68:13:75:35:0f:95:e2:
65:1f:fb:6e:42:e4:66:3f:a7:c3:d0:e0:91:ff:c7:50:6d:a4:
49:06:bb:bb:93:7c:53:a6:02:93:b4:c5:21:38:b3:f7:45:8f:
6f:8a:11:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:20 2024 by rpki-client on console-fra.rpki-client.org