Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/AM9f6M6V8bHvxagL2Bwf8Xbaemk.roa
File: AM9f6M6V8bHvxagL2Bwf8Xbaemk.roa (raw, json)
Hash identifier: z0rpgkBeAP7qRU7PZjT3sbSfotqTDW5wVMKyLUAcBZI=
Subject key identifier: 00:CF:5F:E8:CE:95:F1:B1:EF:C5:A8:0B:D8:1C:1F:F1:76:DA:7A:69
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 018570150C59277C81952FC26FF186FB1CE5
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/AM9f6M6V8bHvxagL2Bwf8Xbaemk.roa
Signing time: Mon 02 Jan 2023 01:25:05 +0000
ROA not before: Mon 02 Jan 2023 01:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211274
IP address blocks: 193.56.11.0/24 maxlen: 24
2a0b:4740::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:0c:59:27:7c:81:95:2f:c2:6f:f1:86:fb:1c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Jan 2 01:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00cf5fe8ce95f1b1efc5a80bd81c1ff176da7a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:a6:bf:e9:0c:f8:bd:93:fb:94:84:2d:a2:
22:d2:af:89:da:0e:7a:7b:a9:30:5a:e2:1c:d0:84:
63:4c:75:40:4c:b6:53:74:99:25:50:4d:82:9f:a2:
4e:60:9a:5e:c0:8b:30:04:f5:a1:5b:42:fc:f9:04:
33:76:d1:e4:13:13:c7:6a:af:27:6f:4a:4b:5f:00:
bd:e9:19:b8:bd:4a:f0:34:8e:7c:a8:20:ff:44:11:
14:a8:3e:0c:5f:84:be:9a:56:e3:22:61:9a:f3:dc:
4e:b9:e3:74:64:0d:61:bd:e4:61:ac:05:e3:09:9e:
78:e0:db:d1:e2:6a:b7:72:51:0d:2f:d2:10:b2:88:
5f:2b:31:1e:44:b1:14:43:c2:d6:4d:55:6c:db:87:
1e:eb:b7:9e:c2:11:82:cc:4b:8e:b0:f6:76:d6:d6:
3f:8d:11:d3:e7:87:87:0b:fa:67:a6:a0:00:78:ae:
2c:19:c4:70:ba:79:ca:a5:56:55:d5:36:23:0a:83:
c8:a0:5a:e8:01:37:32:10:d4:47:ad:3c:ec:04:ec:
71:62:8a:f2:40:94:f8:33:82:df:cd:df:59:bf:2a:
cf:51:29:62:f5:6e:7b:25:6a:ba:bd:e5:f4:84:49:
23:27:0a:69:63:26:c2:ae:ea:3f:7e:2c:16:a2:89:
1c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CF:5F:E8:CE:95:F1:B1:EF:C5:A8:0B:D8:1C:1F:F1:76:DA:7A:69
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/AM9f6M6V8bHvxagL2Bwf8Xbaemk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.11.0/24
IPv6:
2a0b:4740::/29
Signature Algorithm: sha256WithRSAEncryption
33:8a:1c:74:08:7c:b7:93:ae:29:e9:7f:df:47:49:67:29:89:
79:64:34:e3:e7:06:3b:c5:44:af:a0:04:9d:6f:98:47:34:22:
0c:dd:41:49:23:4d:0b:c9:57:51:6d:4a:73:0f:cf:a1:8b:8e:
0e:15:76:71:e5:9e:74:12:5a:26:79:62:3c:60:ee:80:08:38:
2d:22:61:ca:7d:4f:ed:19:b5:91:ed:4c:b6:bb:66:f6:1d:77:
81:1d:31:8a:a0:da:17:1e:13:81:fe:e4:cd:46:66:0a:54:2d:
75:ab:5f:ee:72:f4:8e:54:5d:f7:09:49:50:b4:a6:77:ae:b4:
62:f2:42:52:ba:0d:28:4a:5b:eb:ca:38:33:ec:9e:b4:5f:11:
af:54:fe:65:2f:8a:85:d9:c6:42:77:41:e7:97:e0:39:7b:15:
da:e4:63:ed:e9:ea:71:4b:1b:87:13:46:5d:ea:3a:5d:48:9f:
ed:0b:cb:c3:a7:7d:37:bc:bb:84:33:c4:5d:5c:52:82:0b:f8:
c2:8f:e3:7f:57:ac:17:8a:bd:9f:54:0e:6a:66:ca:88:50:e1:
a8:c2:fb:81:f1:2c:74:8c:d0:78:86:80:34:cc:1d:62:92:36:
b1:bd:d4:c6:19:1a:f6:d9:89:ce:e7:24:5f:b0:a4:e4:be:d6:
5b:9b:76:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:33 2024 by rpki-client on console-ams.rpki-client.org