Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ueHmpAqOqdE0SEz1VIPPBVM6xbY.roa
File: ueHmpAqOqdE0SEz1VIPPBVM6xbY.roa (raw, json)
Hash identifier: JgxyN0jSoOHJ6neru0ADBV3R6eM0mE2URvjw3pxdiYw=
Subject key identifier: B9:E1:E6:A4:0A:8E:A9:D1:34:48:4C:F5:54:83:CF:05:53:3A:C5:B6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189398563EDB8F7FE291F28CF14A86662CD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ueHmpAqOqdE0SEz1VIPPBVM6xbY.roa
Signing time: Sun 09 Jul 2023 07:19:50 +0000
ROA not before: Sun 09 Jul 2023 07:19:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50580
IP address blocks: 2.58.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:39:85:63:ed:b8:f7:fe:29:1f:28:cf:14:a8:66:62:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 9 07:19:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9e1e6a40a8ea9d134484cf55483cf05533ac5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:19:a2:5c:b6:7d:09:a8:ae:14:15:02:fe:
9f:ca:37:f1:7d:e8:32:21:48:42:94:b6:03:dd:d3:
f9:cc:42:83:f3:c7:00:ab:0e:8e:f0:75:cd:1c:01:
7c:69:97:cd:58:3c:43:89:53:ec:fe:cf:50:81:f7:
f2:3d:77:9f:8a:8b:48:b4:69:c0:7f:15:5f:cd:f9:
e0:fb:90:82:2a:ff:2d:66:f0:c6:67:fc:a7:ac:3a:
c7:10:c6:03:59:9b:ae:67:47:1d:b2:5f:5c:09:42:
04:97:d4:22:58:77:19:16:c8:bf:c0:88:13:90:1c:
8a:6e:7e:eb:14:5e:37:a1:1c:e4:07:74:52:7e:e3:
a0:17:22:47:29:c3:e6:0a:99:53:0f:98:3f:8c:8e:
9d:ea:42:64:9d:23:b7:32:26:7c:e1:1e:55:51:fd:
56:5c:35:18:b0:53:5e:36:1b:43:29:7c:87:23:6b:
f6:d9:9e:4d:67:40:28:21:2b:ee:1e:a1:40:b1:a0:
5a:e1:1d:31:9d:05:f1:cf:1e:e7:28:fb:75:65:d7:
83:70:bf:d4:54:42:b7:fe:24:77:35:aa:b0:5e:91:
78:ae:1f:53:d2:23:37:00:7b:23:d1:0f:b3:87:24:
09:23:9a:f4:a8:c6:42:64:86:90:c3:c4:d5:38:65:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E1:E6:A4:0A:8E:A9:D1:34:48:4C:F5:54:83:CF:05:53:3A:C5:B6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ueHmpAqOqdE0SEz1VIPPBVM6xbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:7e:1d:a7:48:46:6c:d9:19:69:91:d8:a4:0a:02:c5:37:b7:
1d:be:2a:2b:b2:96:4b:eb:50:05:f4:f3:bc:be:3f:1b:b1:8d:
0c:bd:9d:58:7c:da:70:70:85:5f:8d:94:d2:3d:df:95:2a:2c:
1a:0a:14:c2:11:c6:c7:e6:36:e0:fe:ba:e2:80:9b:de:95:b3:
17:e6:30:37:fe:04:8c:aa:2c:1a:4a:73:f9:c3:76:ce:30:0e:
36:be:3b:d5:4a:b8:e4:86:fa:e5:42:9e:fd:58:cf:43:39:91:
94:a1:49:b9:6d:94:86:c5:e9:f4:7a:7d:46:2f:c1:e7:3e:67:
41:04:8b:a5:22:fe:c4:33:c1:29:17:e3:b6:35:5f:50:9c:3e:
8d:4c:5a:5f:97:b6:81:49:18:14:d5:4e:38:03:0f:b4:b5:0e:
c9:97:e1:0b:b7:10:03:64:87:5d:9a:7e:e0:b8:23:e6:4e:3f:
bf:43:2c:84:f1:9c:99:38:ef:ce:31:be:02:84:ea:26:89:e0:
bf:f0:11:5b:78:f3:6f:b5:35:db:50:8a:8e:85:09:8d:12:49:
72:a9:c8:e0:21:03:81:c2:a6:4c:8a:8f:c1:43:e6:9b:a3:5a:
95:c5:16:2e:fc:19:49:df:97:fe:80:3d:26:e9:17:c4:98:d1:
12:b6:1a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org