Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TIBOSE5XoNgxCHHJwHXVSBj3DII.roa
File: TIBOSE5XoNgxCHHJwHXVSBj3DII.roa (raw, json)
Hash identifier: cb9fuu/vv9YkQPkVws830cmsrHtyga97ozdaAY2raWE=
Subject key identifier: 4C:80:4E:48:4E:57:A0:D8:31:08:71:C9:C0:75:D5:48:18:F7:0C:82
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FEB39D943FF06F279AB1EEC5AC230D70E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TIBOSE5XoNgxCHHJwHXVSBj3DII.roa
Signing time: Thu 06 Jun 2024 01:46:27 +0000
ROA not before: Thu 06 Jun 2024 01:46:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214783
IP address blocks: 2.59.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Jun 2024 17:39:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:eb:39:d9:43:ff:06:f2:79:ab:1e:ec:5a:c2:30:d7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 6 01:46:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c804e484e57a0d8310871c9c075d54818f70c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7e:d4:a4:0d:d9:c0:c9:39:a1:46:67:c8:44:
1d:2d:a2:63:f6:0a:4f:39:79:a0:ad:85:a7:51:8a:
43:6a:c4:f1:46:b7:fa:e6:25:df:8d:18:fd:31:e6:
11:96:e1:5e:ab:f8:e2:24:be:6e:01:f8:c5:a1:e4:
2e:33:a3:07:7b:b7:b9:f7:57:99:8d:a0:85:45:59:
13:a6:ca:71:1b:b5:16:2e:86:e7:06:d8:4f:2d:8a:
65:8e:85:4b:03:b2:e1:c6:a5:e3:f8:fa:de:a3:89:
27:88:f7:6a:1b:12:aa:88:14:3c:5c:54:45:15:f2:
a5:a6:8f:39:97:67:a5:0c:1e:5f:e1:63:ca:76:b8:
2b:a5:0e:cd:51:a7:d7:89:a8:f8:a8:0b:5f:25:2e:
3c:c3:1f:47:c0:02:c6:d7:eb:69:eb:1a:f1:e7:3d:
dd:5f:ff:ee:01:6a:42:df:43:44:40:e8:8e:43:56:
a2:39:fd:6d:ba:15:79:98:de:54:a6:94:e6:d4:52:
af:92:5e:4c:fd:cd:c0:f6:63:06:d6:af:93:61:25:
3e:ca:21:cc:4e:97:07:53:52:ea:7c:8d:ad:b9:64:
a8:51:80:2d:d8:5e:15:96:50:35:03:65:fe:d1:10:
2d:30:a7:f2:a0:6e:3b:5a:fa:fb:c6:29:71:ec:f1:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:80:4E:48:4E:57:A0:D8:31:08:71:C9:C0:75:D5:48:18:F7:0C:82
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TIBOSE5XoNgxCHHJwHXVSBj3DII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1a:9b:1a:1e:07:a9:ca:52:21:9b:33:8a:b5:10:7c:1d:a2:
fd:6b:f7:9f:63:1d:56:21:ac:6e:b2:19:17:0a:1d:bf:7d:b5:
46:83:fa:13:16:a5:33:11:b0:9b:d6:7e:9f:c1:c7:a0:09:f0:
59:c6:40:07:69:9e:04:23:eb:f6:1f:64:64:c7:44:7b:94:d4:
79:4a:71:ce:ef:2c:29:d8:db:29:63:87:4f:8c:76:44:70:84:
6f:17:44:54:e9:ea:35:b3:63:44:26:de:a5:7c:3a:cc:c2:34:
7c:90:33:44:06:0c:d5:8d:97:d3:39:d3:b3:a1:bb:3b:28:a6:
df:b1:b7:c1:84:f2:a7:60:b3:9e:16:70:28:16:8f:65:70:83:
20:d5:15:7e:2a:32:65:33:aa:d7:c4:67:86:44:51:c4:98:e7:
e6:a0:26:40:c2:99:51:ae:74:75:e5:b4:2b:5c:b7:e5:d7:71:
ff:c7:06:35:4c:2a:23:21:40:b6:70:f0:dd:93:0f:04:7f:73:
68:bd:2e:b8:46:cc:2e:5b:53:3c:94:6d:f2:71:ab:b5:bb:ec:
d8:dc:11:6d:39:28:03:a3:f7:d1:b7:13:5c:1a:35:2c:d1:71:
3a:36:03:95:d8:e9:72:19:1b:a5:b4:24:4b:81:64:de:9e:33:
19:bf:b8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 18:54:42 2024 by rpki-client on console-fra.rpki-client.org