Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ni6jlbqhdVBAy0VH0mcVJ3ZfHlg.roa
File: Ni6jlbqhdVBAy0VH0mcVJ3ZfHlg.roa (raw, json)
Hash identifier: +qzix2j6p+HFxagqfRJR+OmbKw+Yyx3FT5K3L4G6Xbc=
Subject key identifier: 36:2E:A3:95:BA:A1:75:50:40:CB:45:47:D2:67:15:27:76:5F:1E:58
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C7CF390DAC8903F060804A8D384AA30FB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ni6jlbqhdVBAy0VH0mcVJ3ZfHlg.roa
Signing time: Mon 18 Dec 2023 12:43:06 +0000
ROA not before: Mon 18 Dec 2023 12:43:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207083
IP address blocks: 2.59.254.0/24 maxlen: 24
192.145.28.0/22 maxlen: 24
85.31.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:f3:90:da:c8:90:3f:06:08:04:a8:d3:84:aa:30:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 18 12:43:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=362ea395baa1755040cb4547d2671527765f1e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:f9:a9:d1:40:33:46:9a:70:48:93:84:42:
b7:05:b8:4c:69:85:10:03:8a:b3:40:c2:1a:a0:ee:
d8:32:94:c5:d3:92:39:e3:34:c9:28:cd:aa:de:4d:
f1:94:39:e4:cc:a0:60:1e:57:f2:e3:a4:74:28:53:
02:13:b4:30:0c:3d:a4:7a:24:56:8b:d8:0b:c2:8d:
21:cf:46:68:40:a6:9c:06:83:b9:1d:76:a9:71:c9:
33:8e:64:7b:a0:cd:49:97:96:ca:79:fd:9f:6c:d1:
3e:5c:88:77:cf:3e:1d:de:e7:b0:11:d7:0f:1f:31:
98:a3:b8:26:49:af:0b:21:91:05:5e:20:7c:23:e8:
fd:26:ca:2d:ab:cf:a5:fe:c6:3c:a1:96:f7:f8:b5:
47:b4:29:cc:76:fd:5e:77:20:7c:f6:db:d4:76:3d:
c3:59:21:e3:e7:ec:65:f8:7b:cc:df:42:36:4c:4c:
d0:aa:e3:d5:d9:4a:09:e3:05:b2:ec:e3:26:ba:91:
b3:1c:e5:53:ca:b1:2a:6c:51:49:64:ce:78:e4:44:
8f:1e:7f:1f:45:58:ab:cb:0b:3a:72:b7:31:09:99:
d4:c6:93:23:12:59:49:cc:4c:29:f6:2d:73:79:8e:
e4:8b:d6:4a:d1:1b:54:c3:ec:ce:a6:8d:44:b1:2d:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2E:A3:95:BA:A1:75:50:40:CB:45:47:D2:67:15:27:76:5F:1E:58
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ni6jlbqhdVBAy0VH0mcVJ3ZfHlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.254.0/24
85.31.45.0/24
192.145.28.0/22
Signature Algorithm: sha256WithRSAEncryption
84:f4:0c:2f:f9:22:37:78:63:50:37:f1:af:32:81:bc:36:f7:
40:93:73:d7:5c:ad:e1:54:75:1e:fb:d2:b1:4f:b8:e1:3a:6b:
93:a8:ee:30:42:f8:45:ac:ef:b9:67:cc:84:63:c2:63:f7:15:
e7:7c:79:68:09:31:34:c9:64:0b:e5:17:19:c5:34:5e:02:ca:
2a:1c:c6:9f:85:59:14:71:e5:6c:12:3e:6c:82:73:21:03:85:
20:f3:37:26:96:97:9b:4d:85:b2:75:0d:f3:1f:0c:06:de:9e:
94:29:a7:9f:b1:03:40:92:12:8f:18:eb:8a:fd:13:11:46:d4:
a0:40:6d:a0:62:e9:fa:ef:21:2a:d2:b5:b1:2f:29:07:c6:b8:
24:15:6d:ed:50:c5:be:60:34:18:3c:12:8e:36:f5:e0:db:63:
8e:fb:80:2a:7b:86:b6:6d:78:39:62:8d:b8:fe:35:30:31:78:
65:a0:03:39:37:1a:dc:97:c0:9e:56:42:a0:f2:5f:4d:95:93:
ab:c5:12:86:04:e5:ce:af:48:f9:8a:56:95:c6:78:dc:d4:df:
38:a3:c9:46:1e:f2:56:3e:8a:45:ec:6c:8c:7e:7e:93:da:97:
8c:a4:a7:bf:9e:ba:cc:63:ef:a8:f5:7a:13:6f:fe:bd:4c:3e:
c7:0f:8e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:31 2024 by rpki-client on console-ams.rpki-client.org