Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3jlpSU_rV05L-80NHDeULQPpZVc.roa
File: 3jlpSU_rV05L-80NHDeULQPpZVc.roa (raw, json)
Hash identifier: 7p85zLB7yNtugr2HZgcVGuoRFvEo9zGnPIcaX1xkQ4c=
Subject key identifier: DE:39:69:49:4F:EB:57:4E:4B:FB:CD:0D:1C:37:94:2D:03:E9:65:57
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BF6D78808DC60DBEE862395B99902CE3A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3jlpSU_rV05L-80NHDeULQPpZVc.roa
Signing time: Wed 22 Nov 2023 11:43:22 +0000
ROA not before: Wed 22 Nov 2023 11:43:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208885
IP address blocks: 2.59.255.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 08:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:d7:88:08:dc:60:db:ee:86:23:95:b9:99:02:ce:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 22 11:43:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de3969494feb574e4bfbcd0d1c37942d03e96557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:b3:f1:fa:a2:b4:f2:60:65:17:03:32:ee:
1d:1d:4f:6c:4e:a9:3f:01:36:cd:c8:c6:9d:a1:1e:
4c:50:1d:b4:99:86:5c:9c:9c:4c:92:9b:70:ee:75:
dd:d5:a0:76:6a:57:1e:41:c4:5d:d3:38:18:76:82:
ce:1f:f2:6c:db:4c:73:27:1f:96:fe:29:97:0e:49:
81:55:02:91:ca:90:23:68:30:82:62:c0:1f:5c:76:
79:67:b7:55:c6:d3:bc:74:33:00:c0:1f:3f:67:3d:
ac:85:91:84:e2:a1:3b:e7:fe:4a:3d:ab:07:e2:ee:
e7:2e:55:03:ef:0f:b1:77:e2:9b:ff:4e:a8:75:65:
c3:bb:b0:82:17:c6:a5:6c:e3:71:f4:b2:00:ec:15:
44:d7:88:6b:b5:7f:f1:85:af:c3:d8:da:3a:69:24:
02:a3:74:d9:f4:b6:cb:e3:a5:43:79:d8:fe:e5:fc:
e8:e1:da:f7:58:3e:12:b7:9f:bc:9a:49:b0:93:b0:
66:00:7c:d2:95:f8:64:63:9e:55:23:5c:47:e5:38:
58:32:50:46:35:cb:10:86:05:ee:f1:a6:fd:2f:c1:
0b:ea:33:b5:dc:5d:71:7e:ff:51:76:65:0d:41:30:
a5:7e:4d:e3:85:15:f9:a4:86:7d:b9:be:ef:6e:59:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:39:69:49:4F:EB:57:4E:4B:FB:CD:0D:1C:37:94:2D:03:E9:65:57
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3jlpSU_rV05L-80NHDeULQPpZVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.255.0/24
94.156.10.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b9:1a:81:f6:34:e3:44:bf:18:e5:4d:ef:45:24:f2:f0:b6:
51:e0:59:18:70:f5:12:01:f9:e3:5f:b6:d0:b0:4b:7f:5b:23:
b1:3b:45:af:c0:ca:5a:55:2d:a6:34:f1:f0:66:75:15:a6:83:
ad:29:ef:46:00:be:70:eb:ad:37:58:a9:66:dc:f3:60:ce:f1:
50:d3:03:5d:87:b5:33:b9:ff:cc:32:3c:59:31:55:18:e9:0a:
05:3c:0f:6a:c5:7e:6c:71:f1:78:19:8c:17:87:cd:fc:ab:62:
49:e8:4d:1b:32:61:57:8b:31:a8:da:a4:ce:80:9c:85:72:7f:
35:4f:72:13:f0:35:84:99:52:25:fe:32:c2:bb:f1:5c:92:08:
08:23:fa:90:9b:47:3d:63:df:f8:08:69:be:1a:64:3d:68:e2:
46:43:58:a8:9d:88:3a:cc:81:ec:c1:27:c0:d9:22:5d:07:4c:
48:ee:f7:e9:77:48:13:ff:8f:69:f2:9a:e5:19:a9:ae:10:b8:
01:85:07:2e:ab:76:80:f5:66:12:55:5e:b1:a0:e1:c4:56:43:
0c:5e:b6:dc:be:eb:26:c1:61:1c:c2:8e:7d:11:db:b1:8f:7b:
fa:6e:f5:80:33:17:ff:f0:12:a8:60:78:30:82:6c:52:6e:44:
f5:b6:d7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:57 2024 by rpki-client on console-fra.rpki-client.org