Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8TR-HYNQvU-NIHGb30ksyn33YFM.roa
File: 8TR-HYNQvU-NIHGb30ksyn33YFM.roa (raw, json)
Hash identifier: ZS5xo/01CTrXjKUDjWM5izBVA10gr8wxG1OF/7oJ6P0=
Subject key identifier: F1:34:7E:1D:83:50:BD:4F:8D:20:71:9B:DF:49:2C:CA:7D:F7:60:53
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190E8599B7D337DEC66AC87F146A35A3D56
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8TR-HYNQvU-NIHGb30ksyn33YFM.roa
Signing time: Thu 25 Jul 2024 05:25:04 +0000
ROA not before: Thu 25 Jul 2024 05:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214471
IP address blocks: 2.59.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Aug 2024 15:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:59:9b:7d:33:7d:ec:66:ac:87:f1:46:a3:5a:3d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 25 05:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1347e1d8350bd4f8d20719bdf492cca7df76053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:e4:48:ff:6f:f2:4c:c1:35:52:d2:0a:cc:
42:58:a2:d5:f1:94:40:10:52:5e:6c:6f:6c:fa:cc:
65:58:bc:f0:f6:89:05:4d:83:b1:c0:bb:bd:62:7b:
da:5e:91:1b:52:48:e1:47:2d:23:35:96:79:54:0d:
d1:96:85:03:93:90:d5:05:a4:2e:4a:71:11:50:28:
a0:9a:77:4f:d3:a5:af:98:45:8f:e2:e8:40:2c:fc:
91:d1:56:f9:f9:e9:07:5c:4e:05:20:da:45:17:9a:
80:e8:7c:99:1f:43:b8:1b:4b:75:2e:ea:24:4f:10:
d2:ab:5a:95:7b:d9:d0:e9:40:f0:e1:e4:a2:2f:01:
75:65:50:df:fe:46:f6:57:92:55:eb:92:f0:72:29:
00:60:e2:3f:6e:2d:a3:eb:af:30:b7:89:d6:ed:c9:
b1:d6:9f:2f:68:73:88:39:43:ef:12:b2:cb:9b:c0:
02:09:b0:b3:f8:3e:32:ef:8e:3b:73:85:e4:03:e6:
60:f2:94:77:fd:39:fc:90:09:fd:68:79:f3:f3:7a:
a4:0e:b8:08:07:cf:24:c6:b9:92:ff:1f:5a:83:26:
cc:50:69:cb:79:bd:f1:29:9e:b4:26:7a:cf:bc:bb:
61:96:0d:0c:8f:30:34:7c:8e:eb:9d:29:00:1a:07:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:7E:1D:83:50:BD:4F:8D:20:71:9B:DF:49:2C:CA:7D:F7:60:53
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8TR-HYNQvU-NIHGb30ksyn33YFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c3:57:65:c0:46:1c:3e:9b:49:9f:d6:60:00:b1:38:50:cc:
f9:39:92:24:f5:4f:59:cf:92:8f:b5:32:55:a8:a9:d7:a9:a2:
83:46:f4:8e:c5:8e:1c:05:5f:f7:83:72:0a:fe:6a:3b:11:24:
b9:9c:d6:da:01:71:e6:c7:bb:26:5c:8a:bc:ac:cb:0f:56:7d:
4c:28:8f:93:f8:30:a0:99:a9:ce:8b:96:0d:94:16:c3:a7:d1:
6a:1b:82:b2:da:4f:95:a7:a1:f7:b2:7c:3f:0c:29:9f:9c:ed:
43:9d:1a:1f:de:96:ba:dc:0a:a3:61:f6:d3:b0:83:15:3f:e0:
f7:57:a0:c6:05:13:e6:0c:d5:7b:14:13:60:19:85:a5:d1:c8:
91:2e:5f:c1:a4:64:9f:5c:4d:97:1d:07:cb:23:74:5c:06:2a:
72:1b:84:6a:49:f7:88:ce:93:e4:4a:8d:ee:cf:d6:f0:7f:5a:
4c:69:f3:f1:ea:33:80:a1:e5:7b:16:ce:0c:25:17:86:3f:e4:
b0:11:9f:da:de:63:7e:eb:64:49:da:a1:0a:5d:44:da:79:2c:
c2:df:bb:c9:2d:09:fd:f8:2e:df:1b:e4:dd:31:d6:71:80:b4:
e3:c6:ed:6b:e0:8b:4d:90:ce:64:11:0c:93:08:5c:c2:bf:c4:
86:73:32:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 16:33:20 2024 by rpki-client on console-fra.rpki-client.org