Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gLL_PtSItxTOy3u-5A0SuSmjUcw.roa
File: gLL_PtSItxTOy3u-5A0SuSmjUcw.roa (raw, json)
Hash identifier: evrumlUKm9Axe3DABQlAnNtggBLfmvDJTfOTRgG1Gj8=
Subject key identifier: 80:B2:FF:3E:D4:88:B7:14:CE:CB:7B:BE:E4:0D:12:B9:29:A3:51:CC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192D6F07B62C168F4FCC15C30957F66D70E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gLL_PtSItxTOy3u-5A0SuSmjUcw.roa
Signing time: Tue 29 Oct 2024 06:22:17 +0000
ROA not before: Tue 29 Oct 2024 06:22:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215343
IP address blocks: 2.59.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d6:f0:7b:62:c1:68:f4:fc:c1:5c:30:95:7f:66:d7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 29 06:22:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80b2ff3ed488b714cecb7bbee40d12b929a351cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:8e:ff:08:5e:1c:52:4e:18:fb:ef:12:0c:
4b:7d:e0:fa:db:c0:93:63:90:0f:91:91:0c:98:5f:
31:99:30:1a:4b:ff:ee:4c:c1:df:78:47:79:ab:80:
a4:28:c5:9e:d2:80:ac:87:42:a2:96:63:75:b2:0a:
a6:48:61:a8:9b:a7:43:86:10:39:2a:05:ed:cb:93:
9a:32:a7:78:84:2e:fb:c6:98:cd:8f:a5:4b:86:de:
30:37:00:8a:f2:7d:85:72:2d:8b:6d:11:2e:dd:e6:
76:f3:fc:65:46:6f:ba:5c:9b:46:3d:0b:33:df:91:
2e:3d:14:39:f2:e5:0a:cc:55:13:01:c2:1a:95:7b:
13:cb:90:f0:63:e5:09:2f:f0:85:68:56:53:f7:5b:
55:48:72:4f:24:9c:58:1b:fc:0c:34:05:18:88:0e:
05:1e:d0:80:86:73:d5:86:d2:8f:28:b4:1b:9a:40:
1b:ca:3f:9d:77:58:05:0f:99:68:6f:c1:03:17:e8:
7e:af:c0:c4:08:c1:a2:23:77:19:7f:35:82:69:32:
6a:38:c1:37:76:b2:1a:95:59:42:e5:9b:1c:34:a3:
f7:4b:40:a5:51:6a:be:a4:b7:c4:36:3a:d7:10:d0:
fc:1a:85:96:64:18:c6:7d:61:7e:e0:07:3b:3a:a9:
3a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B2:FF:3E:D4:88:B7:14:CE:CB:7B:BE:E4:0D:12:B9:29:A3:51:CC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gLL_PtSItxTOy3u-5A0SuSmjUcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:11:a2:42:ed:86:e8:fa:61:7f:58:a4:aa:69:4b:27:ea:7c:
ad:af:bf:4e:68:2c:44:a7:59:e4:4d:fc:c8:ab:89:b0:4f:2e:
fe:ca:86:67:b4:45:1f:50:8c:22:08:e9:d9:32:ef:05:8a:8f:
5b:84:f1:80:b0:4c:02:98:c3:c0:58:bc:41:86:99:55:a9:e8:
fa:64:b7:a4:e3:df:e3:3e:17:cb:aa:d5:24:06:e2:84:0a:14:
d4:b0:04:c8:48:13:97:59:06:b7:53:4a:11:49:33:4b:c6:a5:
1b:0b:b3:63:58:cc:25:c2:73:de:44:a3:8b:fc:fb:3f:ca:6c:
3f:01:64:c5:2a:ca:29:c1:14:d5:cc:2a:57:c3:f4:3e:ca:03:
11:cd:7b:17:8c:00:c5:01:a5:de:c8:23:cd:a2:d7:ca:64:98:
69:d2:8d:7e:10:e5:aa:7f:3a:90:5a:72:07:2b:95:9f:88:93:
39:2d:80:c9:3c:98:4f:d3:cb:ce:79:63:44:2b:64:3b:9d:f9:
bf:25:52:05:fb:40:80:5c:e7:90:1d:1c:2b:9a:b7:2b:97:03:
ea:d1:c4:68:b8:a2:04:7a:66:95:a9:c3:9c:a6:1a:58:63:a4:
c9:2d:a8:2b:22:b8:37:7c:62:4b:d5:62:95:70:7d:5f:d9:7c:
94:d0:e3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:03 2025 by rpki-client