Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/59LPX8L7Y4qkqvTDqdAkrlpZIOk.roa
File: 59LPX8L7Y4qkqvTDqdAkrlpZIOk.roa (raw, json)
Hash identifier: 9P3UCyXGcxCX1zghjawpO20AZuHQ3vbUdKLLBdsJ7Lc=
Subject key identifier: E7:D2:CF:5F:C2:FB:63:8A:A4:AA:F4:C3:A9:D0:24:AE:5A:59:20:E9
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018F0940211A7888A242E3D1FF4CFFE90624
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/59LPX8L7Y4qkqvTDqdAkrlpZIOk.roa
Signing time: Tue 23 Apr 2024 04:39:08 +0000
ROA not before: Tue 23 Apr 2024 04:39:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 89.251.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 08:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:09:40:21:1a:78:88:a2:42:e3:d1:ff:4c:ff:e9:06:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 23 04:39:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7d2cf5fc2fb638aa4aaf4c3a9d024ae5a5920e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:d8:69:5e:be:23:ae:76:56:c3:a3:cf:ae:
60:e8:bd:9e:e1:46:66:1e:40:35:1e:42:ff:8e:51:
02:47:80:af:94:99:d6:82:a9:8d:7e:08:da:de:74:
42:36:35:4f:a6:f4:67:d7:5e:e3:8b:60:0c:f8:09:
87:59:af:8c:e6:7d:32:42:21:7b:f1:39:74:f4:dd:
10:e4:b2:a2:4c:ce:8b:70:f0:08:28:de:b5:f3:b3:
b3:2b:bd:e9:cb:85:45:73:51:96:33:46:88:4d:87:
fc:5d:3b:15:a6:78:18:4c:5e:17:cb:c3:95:ab:41:
b4:7d:fd:80:06:a4:e5:09:25:14:07:3a:64:60:25:
7a:26:76:c5:d8:1b:0a:58:81:a4:e7:29:3d:c4:08:
49:f4:b6:bb:59:1a:26:21:0c:d7:24:dc:82:d1:ee:
7c:30:8d:51:7a:13:19:c8:1f:c3:67:fc:b8:b9:1c:
fb:fa:fd:46:1d:ee:79:ea:4f:c2:ba:56:36:73:5e:
8e:dd:bd:40:16:d6:6d:ce:d9:97:85:8b:e9:d4:2e:
5e:83:91:8c:61:fc:6e:f1:4f:b7:f9:db:c9:af:38:
5b:73:70:12:e7:91:a1:48:3f:af:d9:9f:0d:57:e5:
19:77:46:e3:5f:7b:c8:0e:a8:b4:6d:ae:64:4c:38:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D2:CF:5F:C2:FB:63:8A:A4:AA:F4:C3:A9:D0:24:AE:5A:59:20:E9
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/59LPX8L7Y4qkqvTDqdAkrlpZIOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.10.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e6:7e:00:fe:0e:26:bc:71:ea:e2:08:65:9c:0f:12:cd:74:
a7:9f:92:20:58:e1:d9:1c:94:0d:5a:a4:66:34:d0:b1:2f:8f:
95:fc:df:f6:dd:da:1c:27:d9:ac:e3:7d:3e:59:cd:c1:79:60:
73:e4:53:1e:4c:13:a0:6f:ac:10:4d:6c:60:88:0b:78:25:43:
5b:10:69:70:d2:27:2b:2a:4c:ed:17:39:92:33:6b:b2:87:83:
24:ec:4e:d3:09:5f:4d:9f:1b:ee:10:14:e6:ba:e9:a7:ac:85:
45:2a:3b:3d:06:72:0d:f9:64:4e:e4:23:51:a6:25:84:b3:f4:
d4:5f:00:db:7c:54:8d:ce:88:e3:15:82:a8:eb:e8:6a:76:a8:
94:2b:6c:be:77:b2:32:0a:ff:5c:94:1d:ca:08:6d:9d:99:50:
b5:cd:6a:67:18:52:a8:f3:a1:b5:95:89:54:50:c6:d2:5a:8c:
77:8a:c3:23:6c:eb:0c:49:e3:ad:c0:29:65:c2:a8:f8:30:01:
6a:2a:14:c9:67:0a:91:2e:15:2e:c4:7e:2e:bc:2c:63:1c:86:
68:4d:83:8d:09:14:61:5a:35:80:60:52:8a:8b:9d:2e:c1:42:
f2:00:81:c1:20:db:ab:74:c1:97:15:6d:04:a1:0e:c0:ba:4c:
8c:14:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 11:54:28 2024 by rpki-client on console-fra.rpki-client.org