Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/_qGZb_TecJRANix3DthGXe0ho-Y.roa
File: _qGZb_TecJRANix3DthGXe0ho-Y.roa (raw, json)
Hash identifier: xWfkNMIea/qbk4vGIR3TTCoHuHa22g9JRQpoRFkayS4=
Subject key identifier: FE:A1:99:6F:F4:DE:70:94:40:36:2C:77:0E:D8:46:5D:ED:21:A3:E6
Certificate issuer: /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial: 018CCA29F5A9B6A48DFF7A6C78378141A65F
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/_qGZb_TecJRANix3DthGXe0ho-Y.roa
Signing time: Tue 02 Jan 2024 12:33:16 +0000
ROA not before: Tue 02 Jan 2024 12:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209123
IP address blocks: 2.58.88.0/22 maxlen: 24
2a09:e340::/29 maxlen: 64
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f5:a9:b6:a4:8d:ff:7a:6c:78:37:81:41:a6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Validity
Not Before: Jan 2 12:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fea1996ff4de709440362c770ed8465ded21a3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:dc:f4:20:52:91:94:e9:7f:20:1f:43:60:
6c:84:14:ed:6a:24:84:aa:b1:39:26:cd:50:78:b7:
16:b5:89:5a:3c:92:1a:45:10:f8:ff:89:77:95:f4:
a5:d1:2b:71:70:d0:96:0d:bd:d9:43:3b:fd:9c:c1:
04:b9:71:96:6b:b3:88:95:5e:d4:9c:59:c9:48:7f:
d3:cc:75:b9:92:2e:c5:aa:67:3a:db:39:6b:9c:94:
aa:63:b8:05:6a:13:cb:8d:bc:80:87:82:68:f8:ca:
49:67:91:2f:ab:e7:73:b0:da:22:a2:96:e2:a2:51:
15:b3:8f:2a:a3:8c:e8:b7:03:de:e6:f0:ba:17:68:
93:88:30:b3:3e:48:3e:5a:d3:a8:28:b5:4a:26:74:
2a:33:cb:4f:e7:33:a8:b7:e4:54:2d:8d:40:cb:63:
72:1c:a7:7c:f5:76:0c:e3:35:f6:19:ee:b2:37:b6:
6e:3c:9f:1d:a7:ff:85:d6:ca:2d:3b:d8:4f:f4:14:
c7:31:53:8c:04:17:47:9a:70:b4:ef:12:bb:a1:ae:
8a:9e:1f:b6:06:d3:0b:5a:ae:01:3b:2c:30:f7:c1:
98:c6:62:fe:2d:d4:48:4b:43:48:ad:42:35:a8:b8:
96:dc:7c:5d:da:6c:90:16:6f:23:3f:9d:96:4e:50:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A1:99:6F:F4:DE:70:94:40:36:2C:77:0E:D8:46:5D:ED:21:A3:E6
X509v3 Authority Key Identifier:
keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/_qGZb_TecJRANix3DthGXe0ho-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.88.0/22
IPv6:
2a09:e340::/29
Signature Algorithm: sha256WithRSAEncryption
88:a2:c7:48:8a:1c:f2:93:87:86:03:94:e5:2e:91:6f:1f:9f:
a9:a6:31:c3:66:bc:38:62:64:9e:ae:f0:68:aa:a9:32:ea:fa:
00:9b:d5:d3:5f:00:ab:87:7a:56:00:07:e7:63:6f:02:e6:59:
aa:4b:9d:7e:87:50:35:79:b2:d5:cf:8b:43:31:da:d8:9f:b4:
42:bb:2b:36:26:4b:e9:7d:30:f1:52:3b:4b:65:1a:24:dc:b8:
bd:be:fa:c4:28:8a:f1:09:22:06:31:30:f4:84:cc:7d:37:bc:
94:42:25:30:a4:dd:94:f2:d3:e8:aa:3e:2a:a5:ef:df:fc:b2:
0e:3f:44:cf:af:e7:4f:67:93:f6:bf:e6:d9:c5:3a:6b:27:70:
f8:2f:f3:d7:18:8c:a6:78:9e:d7:be:08:37:a9:56:f3:a4:ac:
1f:b3:04:31:82:88:25:84:1b:5a:5d:df:4a:72:46:1b:ad:69:
0c:bd:52:fc:bb:4c:e6:97:8a:ac:38:64:eb:c7:77:cf:6f:5b:
f2:5f:f3:5f:1e:dd:d8:7f:8f:f5:4b:8c:22:ae:09:e7:5f:c5:
e9:eb:7d:3c:6c:46:73:9b:4a:99:65:6e:34:bf:27:37:57:3c:
5d:7f:5b:94:4d:2d:93:ce:c2:76:25:b7:02:5c:ff:76:c5:8e:
0c:fd:93:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:05:14 2025 by rpki-client