Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PqwXdgGECmOBFvllnT43YZhRp0I.roa
File: PqwXdgGECmOBFvllnT43YZhRp0I.roa (raw, json)
Hash identifier: fmhtvYy60rbADPD8gQiZsuDwuFPcQwc4dvI3oq7xK10=
Subject key identifier: 3E:AC:17:76:01:84:0A:63:81:16:F9:65:9D:3E:37:61:98:51:A7:42
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FBDFD93A3D7900E15472EFEA37B0718D3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PqwXdgGECmOBFvllnT43YZhRp0I.roa
Signing time: Tue 28 May 2024 06:57:43 +0000
ROA not before: Tue 28 May 2024 06:57:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215343
IP address blocks: 2.59.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 01:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bd:fd:93:a3:d7:90:0e:15:47:2e:fe:a3:7b:07:18:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 28 06:57:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3eac177601840a638116f9659d3e37619851a742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:6d:2e:58:96:4b:e2:d9:46:50:4e:73:ec:
55:ea:ab:90:70:1b:58:e5:b8:cf:80:ec:97:70:d6:
89:61:59:b2:2d:7a:a4:11:a4:c1:ad:d0:59:da:19:
55:58:48:5c:07:62:7a:1c:19:55:f1:39:5b:26:b3:
38:39:a4:71:cd:7b:cb:ee:4a:52:91:9f:c9:4d:20:
9d:dc:4e:eb:eb:be:30:e9:6b:e8:6e:c0:ad:fa:ba:
e2:f5:02:8f:83:62:d0:7a:4a:b3:a2:fd:2c:50:50:
25:fe:8d:fe:b4:4b:c0:fb:7b:86:e7:cd:9b:be:68:
a0:6b:85:44:10:98:46:76:98:f9:95:5f:c2:ec:01:
98:3c:36:a8:e1:0b:b5:89:f5:4a:b2:4f:72:f6:a1:
43:21:0b:c8:32:26:9f:b1:4d:a7:28:1e:95:45:40:
02:c5:f5:9f:34:df:bd:5a:6e:16:4e:95:7d:22:c7:
a0:92:50:85:bb:63:ed:5d:78:94:a3:75:5d:d7:44:
10:2b:4c:b8:7c:95:13:1d:ef:70:25:af:3b:28:07:
57:6a:6a:32:f6:a7:dc:dc:0f:41:e2:55:0b:73:21:
6f:d8:a5:b9:0e:d8:3f:38:dc:24:57:16:48:65:9e:
a8:21:11:b0:ae:66:9d:b2:0a:41:ee:49:4d:e0:47:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AC:17:76:01:84:0A:63:81:16:F9:65:9D:3E:37:61:98:51:A7:42
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PqwXdgGECmOBFvllnT43YZhRp0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:65:05:0b:ed:85:42:d1:43:a3:e9:9e:0b:5a:3d:68:66:a8:
46:c5:29:4b:a4:d9:74:86:df:e2:8d:97:ec:91:55:30:27:35:
a8:c6:d9:cd:c6:02:c4:bf:d6:d3:35:b1:39:af:0f:a3:f0:2c:
06:c2:5d:2b:3a:ac:d7:b6:cc:39:f7:00:46:5a:83:e4:23:d8:
68:e7:9c:15:d6:1e:db:90:b9:39:12:20:bc:0d:40:91:f7:44:
b5:7c:35:e9:71:74:ec:be:25:86:d0:ca:3c:08:02:99:7b:d8:
cf:f0:e6:49:22:ca:5c:77:82:ed:f3:f0:59:51:09:33:08:90:
92:ea:e7:8f:2e:02:d3:08:fd:e4:2d:73:0f:74:64:80:cb:f8:
21:d6:7c:01:d1:02:10:3b:9f:d0:db:c6:1b:1c:36:73:bf:99:
7e:02:8e:cd:fa:13:30:a5:42:53:16:eb:8a:2b:a2:86:79:4c:
4a:6e:25:9e:83:cf:ca:02:8c:00:52:c3:38:fe:49:22:3d:e5:
31:8a:bf:4f:f9:b2:1f:6f:96:8f:77:c1:e6:3f:e3:0f:06:b0:
7d:48:3d:91:87:b2:46:7d:4d:33:eb:72:e3:fa:34:7f:81:d4:
44:a9:24:e3:8c:ea:18:f3:3c:7b:0b:37:e1:b9:6c:a4:72:02:
cb:59:0b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:06 2024 by rpki-client on console-fra.rpki-client.org