Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_yyMRFHEibcovSob-izQmH1lldk.roa
File: _yyMRFHEibcovSob-izQmH1lldk.roa (raw, json)
Hash identifier: IjV4JwjTICxmvKJno6aQVmoKOeOkm4bS0MHGAwSTsHY=
Subject key identifier: FF:2C:8C:44:51:C4:89:B7:28:BD:2A:1B:FA:2C:D0:98:7D:65:95:D9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019041091E4B6286B03A1BB5AC25A7B4C93E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_yyMRFHEibcovSob-izQmH1lldk.roa
Signing time: Sat 22 Jun 2024 17:40:34 +0000
ROA not before: Sat 22 Jun 2024 17:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401195
IP address blocks: 2.59.252.128/25 maxlen: 25
Validation: Failed, certificate revoked on Tue 25 Jun 2024 03:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:09:1e:4b:62:86:b0:3a:1b:b5:ac:25:a7:b4:c9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 22 17:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff2c8c4451c489b728bd2a1bfa2cd0987d6595d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:a9:a4:2e:86:0c:f0:96:c9:f2:62:0e:ca:
7b:75:f0:59:b5:a0:76:c0:09:52:b3:46:51:36:48:
54:d3:5f:1e:05:24:d8:92:c4:60:87:f9:ae:6d:fe:
e7:cd:0d:8d:00:2d:23:70:b9:d8:ab:e7:15:65:05:
50:9e:bb:41:c1:70:56:58:cd:c2:4c:a0:00:af:81:
1c:7e:95:2f:34:a7:12:5e:3e:93:f0:e4:c5:f4:4d:
67:ae:79:08:9b:7c:ee:04:37:30:f8:b5:61:f2:b7:
68:fb:ca:6c:0d:6e:a1:a4:af:75:ef:15:4f:98:9f:
2b:92:5d:96:70:66:eb:7f:05:32:3b:51:f0:5f:df:
7e:78:25:73:cb:3c:39:e6:63:b9:4a:a9:4b:05:e1:
82:eb:c0:4f:93:8a:b8:e4:29:d6:1e:5e:c1:6b:2f:
b3:aa:a3:21:4f:b5:d6:d3:18:62:eb:d4:a1:d0:82:
33:ba:82:47:7a:ed:bb:b1:a9:58:94:13:bb:7b:8a:
15:45:35:e6:2c:d0:12:e1:b0:79:78:f8:27:31:08:
3f:23:d7:a5:e1:74:45:33:1a:fe:4e:a6:f8:5d:2c:
5b:45:5f:0b:a0:dd:9a:73:66:52:40:1d:31:97:c8:
aa:c8:cc:98:02:2e:91:d7:32:ea:5e:c3:99:4e:b7:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2C:8C:44:51:C4:89:B7:28:BD:2A:1B:FA:2C:D0:98:7D:65:95:D9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_yyMRFHEibcovSob-izQmH1lldk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.128/25
Signature Algorithm: sha256WithRSAEncryption
73:51:3b:61:b2:88:4f:dc:b6:1a:bf:7f:e5:0b:5f:46:b1:04:
c0:54:11:f9:12:19:57:e0:ba:91:a3:fa:a7:9f:76:d5:dd:73:
b4:55:c2:89:00:e3:3f:9e:5b:ff:76:2e:61:37:cb:2f:3b:87:
95:80:e4:84:bc:c5:0e:dd:72:a6:78:43:11:2c:3c:d8:6d:cf:
3b:f8:c7:67:06:e3:b2:c2:74:5b:33:84:ee:a4:52:79:08:a3:
fd:5f:6e:17:e4:6d:a2:3c:35:ec:09:cb:87:5c:eb:74:4f:9b:
ae:c3:db:c8:33:db:d8:72:91:eb:05:ac:88:8b:50:c8:ca:46:
50:ea:3f:2e:69:07:bb:50:22:f0:d0:e4:99:71:2f:1f:28:67:
92:1f:c6:6a:9b:e1:95:b5:d1:8f:6a:35:e6:a0:b9:b2:0c:14:
64:75:e3:31:a2:4c:cf:f9:7e:98:74:6c:ee:01:bb:63:28:44:
ec:7a:78:ec:f7:3a:76:52:2c:54:57:34:5f:e9:09:54:3d:81:
c8:14:db:96:08:1f:b8:10:42:fc:2d:11:ea:17:99:0f:fc:66:
b8:3a:2f:28:3f:ed:22:8f:f8:93:68:fe:1c:96:84:8e:21:0a:
1a:b0:5d:04:39:3e:46:de:4d:4b:2a:a9:0b:23:b4:dd:89:da:
1b:f3:89:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 06:41:01 2024 by rpki-client on console-ams.rpki-client.org