Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IDeFhTfQ-hqb8WZw-kAsA08fKAs.roa
File: IDeFhTfQ-hqb8WZw-kAsA08fKAs.roa (raw, json)
Hash identifier: 86sjeJb8wsYBuLhYbZvqRogM5AHsYHUWtjSQx/zExn0=
Subject key identifier: 20:37:85:85:37:D0:FA:1A:9B:F1:66:70:FA:40:2C:03:4F:1F:28:0B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018967630ECC95CE32D9552F4C1976CF4F61
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IDeFhTfQ-hqb8WZw-kAsA08fKAs.roa
Signing time: Tue 18 Jul 2023 05:04:52 +0000
ROA not before: Tue 18 Jul 2023 05:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50580
IP address blocks: 2.58.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:63:0e:cc:95:ce:32:d9:55:2f:4c:19:76:cf:4f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 18 05:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2037858537d0fa1a9bf16670fa402c034f1f280b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:10:a2:df:c2:71:07:49:2f:6d:77:29:62:c0:
75:32:cf:18:c8:99:98:97:83:c6:15:42:8c:b7:b7:
05:e7:6c:60:f2:95:0a:f5:93:a7:b7:ad:7a:73:51:
d7:d0:f5:89:57:df:87:7b:18:50:b5:d6:46:1e:c0:
45:e4:a4:b6:24:a1:7d:cd:8b:11:01:6b:82:88:c0:
7b:81:2c:49:63:47:60:f9:c3:80:da:7e:a6:67:f8:
75:f9:f8:a0:04:c7:20:b5:cd:5f:36:77:f9:22:a4:
4f:5f:f5:61:31:ad:74:4a:a6:d2:cf:6d:58:8c:4d:
8f:4a:d8:7b:a3:ba:4c:6b:3e:dc:a2:21:c7:bf:2e:
38:ff:82:d7:d8:60:03:2d:2d:72:e6:7d:a1:d8:33:
53:a5:b6:0a:61:52:c6:06:ca:2f:06:68:b7:ec:40:
78:36:69:9b:6e:ae:7d:d4:e4:7d:fb:86:65:ec:b2:
d0:cd:77:6a:8e:cc:47:ab:59:0c:aa:51:d0:19:35:
58:9c:7d:08:f5:a0:36:3a:70:d5:ea:cf:46:ad:64:
17:cd:57:94:a3:f8:26:9b:ac:69:23:cc:54:1c:85:
6b:8b:0b:20:62:68:4e:a9:a3:5a:bf:3c:d1:16:36:
62:65:ae:7d:b3:f8:c5:90:85:e8:ab:91:a4:d5:b0:
e4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:37:85:85:37:D0:FA:1A:9B:F1:66:70:FA:40:2C:03:4F:1F:28:0B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IDeFhTfQ-hqb8WZw-kAsA08fKAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e8:da:88:bd:56:cf:00:09:f3:18:05:e9:80:5b:62:dc:96:
0a:b1:ac:b2:8b:a9:a1:d2:b4:8c:73:c5:28:5f:cb:ac:44:bc:
92:07:e5:5e:e7:fe:97:f8:b8:ba:a4:7d:f5:0e:2d:06:dc:06:
ab:60:48:b3:39:20:7c:25:24:7c:69:76:3d:f9:5c:57:dd:34:
9d:37:63:85:15:9d:b4:69:96:6b:41:fa:b8:ce:5a:99:e8:9b:
da:01:69:78:97:fd:f0:db:c3:b3:e4:a5:27:eb:92:42:2e:8e:
76:1f:7f:a8:b3:42:93:6a:93:79:4e:14:62:e8:cd:2b:3e:27:
3d:3e:2a:7b:44:72:8a:50:e4:9a:73:af:c0:d5:04:a2:b7:99:
f0:26:cf:b1:1e:83:97:7f:8d:17:e6:81:b3:56:17:12:99:d8:
13:c2:3c:f9:26:d9:b3:15:0f:f5:dc:2f:cd:b3:b9:01:7f:8c:
c7:db:0b:20:4d:96:ad:a7:43:54:ff:bf:67:9e:1e:32:a2:33:
09:48:c5:66:c2:e7:ac:92:1a:72:6a:7e:5b:12:5a:4f:80:f9:
36:44:27:c6:d8:08:75:55:57:5e:23:bd:c2:af:e3:0c:7e:f5:
cc:0e:87:4b:4e:f4:60:2b:ae:55:37:9d:ad:e1:7c:22:e5:18:
f6:19:fd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:10 2024 by rpki-client on console-ams.rpki-client.org