Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/irXAWOuZOs3lwzFbB6i7VMRAonA.roa
File: irXAWOuZOs3lwzFbB6i7VMRAonA.roa (raw, json)
Hash identifier: r2MvE3EwkYU1QUUds1fnoflYRyQRU7V2n/tgnnCKn9k=
Subject key identifier: 8A:B5:C0:58:EB:99:3A:CD:E5:C3:31:5B:07:A8:BB:54:C4:40:A2:70
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188AF5E2F685EB0B6548935F2757C52803A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/irXAWOuZOs3lwzFbB6i7VMRAonA.roa
Signing time: Mon 12 Jun 2023 11:29:25 +0000
ROA not before: Mon 12 Jun 2023 11:29:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 2.59.254.0/24 maxlen: 24
93.123.118.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:5e:2f:68:5e:b0:b6:54:89:35:f2:75:7c:52:80:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 12 11:29:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ab5c058eb993acde5c3315b07a8bb54c440a270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:65:39:76:c2:75:0c:4c:bd:73:41:e5:93:
00:a2:be:40:20:9b:28:e3:ad:b8:0b:35:24:f7:1e:
ba:5f:d8:2a:2e:f6:b1:dd:b1:eb:96:6a:62:f7:ed:
26:97:79:b6:af:cf:dd:ef:6e:da:2a:e9:2d:ba:65:
eb:dd:1e:63:99:bf:af:5b:a7:1b:10:ba:94:f4:d2:
15:94:c7:63:6f:ce:82:ca:f3:a9:6f:27:96:ef:a2:
9e:b4:57:ed:e4:d4:54:72:94:35:be:53:c7:c6:fd:
e0:01:24:e9:4b:82:26:2e:4c:cd:0e:05:a5:3b:34:
4e:a1:34:e1:e7:47:e1:31:f2:3d:2e:3a:84:7a:2d:
a0:13:19:06:70:be:22:2e:9b:2f:7d:0c:9c:5d:87:
88:80:c8:4c:de:b9:bc:95:fc:c9:fb:42:c6:2a:08:
9c:4b:c1:ba:4e:63:7d:95:bc:36:20:0f:bd:2f:70:
db:26:e8:32:8b:b2:0c:b0:26:f2:53:fe:6c:d3:f6:
1a:cf:5d:2d:63:a6:b0:b7:dd:5c:87:59:48:b7:e6:
01:3a:9f:e9:18:2f:bc:06:9c:43:b4:a9:e9:cd:ec:
f8:de:86:c4:7e:ce:2f:d6:da:18:30:83:42:ba:06:
35:0b:b8:e8:72:24:ac:75:1d:92:a6:d3:89:db:6b:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B5:C0:58:EB:99:3A:CD:E5:C3:31:5B:07:A8:BB:54:C4:40:A2:70
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/irXAWOuZOs3lwzFbB6i7VMRAonA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.254.0/24
93.123.118.0/24
94.156.102.0/24
185.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e1:98:1d:56:c7:e2:45:cf:c6:8e:bc:06:e7:65:6d:8d:44:
13:cd:e3:17:31:f6:50:63:b1:80:bd:92:c0:21:69:32:34:3c:
03:f8:9b:e6:b8:bf:11:cb:ff:c6:29:de:c7:d4:d6:e7:d1:f2:
4a:37:e9:94:93:83:5c:a6:ef:1f:b9:33:b1:7a:c2:e5:ac:92:
96:b8:ab:80:29:14:50:24:16:06:89:1e:fd:54:91:78:0b:ec:
69:9d:19:3d:4b:c9:b6:a6:6f:00:5e:55:8f:2e:f7:1a:78:0c:
4c:ea:4c:3d:1d:75:16:12:e1:dd:3b:5f:f3:22:2c:ba:cc:55:
b7:e4:61:8c:a3:ac:37:86:14:17:62:cf:97:7b:5f:4e:46:66:
8d:a8:05:c0:8c:33:ad:fa:51:5c:72:b1:ee:a5:68:24:b2:0d:
85:8b:05:4a:85:50:0c:aa:69:b3:f9:fe:c0:a7:5c:7e:13:0e:
81:e7:d5:ed:fd:d2:25:f8:7c:55:72:75:37:09:e4:05:aa:26:
8b:78:57:14:1e:b5:60:80:a0:b8:e1:ea:5c:77:cd:b9:89:cc:
30:1c:86:51:80:44:92:64:80:98:6d:f4:43:23:8b:f8:e8:80:
de:7c:1b:34:7a:0d:10:04:08:b7:51:fd:3b:94:c2:80:1e:d3:
33:c5:e3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org