Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ciNgbWqThcrkEmBrOJzK-bUSeM0.roa
File: ciNgbWqThcrkEmBrOJzK-bUSeM0.roa (raw, json)
Hash identifier: Jmp68XCjxhLdPAigo8KwdcmxTEEGM1DhN5ajya/ZBnk=
Subject key identifier: 72:23:60:6D:6A:93:85:CA:E4:12:60:6B:38:9C:CA:F9:B5:12:78:CD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E14CECF799446259E6469DC484805449E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ciNgbWqThcrkEmBrOJzK-bUSeM0.roa
Signing time: Wed 06 Mar 2024 17:28:01 +0000
ROA not before: Wed 06 Mar 2024 17:28:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208885
IP address blocks: 2.59.255.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 14:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:ce:cf:79:94:46:25:9e:64:69:dc:48:48:05:44:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 6 17:28:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7223606d6a9385cae412606b389ccaf9b51278cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5a:45:12:33:e7:87:ac:dd:9d:13:40:4e:85:
89:94:6b:6a:c5:d7:26:a9:f4:74:e3:59:a6:06:80:
b5:ba:c4:8a:45:97:bd:7c:5e:b5:8a:7f:ea:df:bc:
79:20:c0:26:d6:31:c3:05:4b:27:2d:6b:7b:95:ac:
c7:94:c2:89:11:ee:17:87:57:e6:9c:c7:5d:ac:ee:
ee:42:b9:49:72:c7:78:dc:c2:b9:a8:ee:91:8b:53:
90:16:a2:2e:64:fb:3e:fa:1f:b6:c0:f8:3d:14:0e:
8f:64:c7:5e:99:d1:56:44:fe:68:ac:05:fa:e4:f9:
1c:83:3c:72:c4:a3:04:11:a9:1d:6f:d6:82:8a:e4:
77:ae:d1:3e:a4:1b:7b:07:1f:7b:fc:a8:40:26:54:
8e:9e:06:71:e9:2d:38:a9:16:fa:42:cd:6a:65:e6:
85:0e:d4:6c:42:cb:54:5b:83:6a:f2:ff:3b:71:dd:
eb:83:08:5f:46:4b:d2:0f:07:c7:58:22:6d:bc:f7:
06:a1:d4:67:90:53:a6:14:f9:fd:05:3b:18:01:5a:
e8:09:75:d9:8e:1d:8a:e1:76:c7:71:cd:b0:c3:35:
48:e9:e3:b4:94:4b:b9:74:a1:ab:bf:3f:a1:9c:7a:
95:14:ee:0a:1b:ff:36:d5:6f:9e:c6:75:72:42:08:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:23:60:6D:6A:93:85:CA:E4:12:60:6B:38:9C:CA:F9:B5:12:78:CD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ciNgbWqThcrkEmBrOJzK-bUSeM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.255.0/24
94.156.10.0/24
Signature Algorithm: sha256WithRSAEncryption
85:64:55:cc:cf:cd:38:1f:69:80:df:34:00:e1:b8:68:18:b5:
7f:78:bb:18:00:74:5f:01:bf:36:07:24:99:de:ef:8a:eb:00:
46:01:2b:af:e3:82:14:ac:b8:f2:2b:79:79:73:01:8b:77:71:
6c:75:ba:0d:6b:bb:2a:b8:7b:e1:e3:fa:bf:85:c4:71:f6:30:
2b:ce:d5:8b:44:7c:56:a0:7f:d7:d7:f3:81:91:af:99:f6:be:
18:6a:52:79:e9:e5:bc:d8:3a:63:a7:01:8d:0e:54:c5:ae:cc:
aa:d4:61:9b:21:81:81:94:85:0b:9d:67:09:7b:1f:f9:4a:0c:
96:ab:0e:f8:79:b1:f9:f8:b7:f5:f9:9c:4a:65:92:1e:18:d6:
4b:d5:d7:89:58:4a:bc:34:86:38:3c:2c:1f:b5:98:13:1d:ed:
af:6b:c7:94:bc:3e:43:9a:38:e7:ce:a5:c9:ab:44:97:8c:3f:
00:e0:f3:12:48:9a:99:cd:6d:4e:4e:e6:68:34:5b:92:94:23:
90:09:a4:2a:24:89:76:55:4f:4c:fc:b6:a5:50:0a:fb:0e:fc:
3c:3c:da:5c:b7:19:18:ea:83:0e:29:69:48:ff:f2:2d:d6:28:
97:cf:b1:70:cb:02:a1:f3:2f:6d:33:f6:9a:64:ec:83:48:7e:
35:31:7a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 18:17:00 2024 by rpki-client on console-ams.rpki-client.org