Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yWJHSPBe_QFRBHKQ4AG4zrAp5wg.roa
File: yWJHSPBe_QFRBHKQ4AG4zrAp5wg.roa (raw, json)
Hash identifier: 6X8dzGAF7w6fGB18c1lS7dHZntRwZZALHZkBRmHj+Cs=
Subject key identifier: C9:62:47:48:F0:5E:FD:01:51:04:72:90:E0:01:B8:CE:B0:29:E7:08
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD08492D773793E7CE6BEFB28F3E76
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yWJHSPBe_QFRBHKQ4AG4zrAp5wg.roa
Signing time: Tue 02 Jan 2024 06:29:37 +0000
ROA not before: Tue 02 Jan 2024 06:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208885
IP address blocks: 2.59.255.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 09:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:08:49:2d:77:37:93:e7:ce:6b:ef:b2:8f:3e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9624748f05efd0151047290e001b8ceb029e708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:55:bb:da:c9:08:15:cf:18:5d:50:83:f7:
e8:ed:bd:ae:e8:dd:c9:ed:5a:e7:6f:77:c1:c4:ed:
bf:34:f7:dd:31:d9:4c:b4:42:6f:07:e8:e7:00:79:
f3:25:b8:b0:05:9a:56:86:cf:48:57:4b:00:a0:ac:
a5:46:d3:67:3c:eb:7a:18:eb:5f:79:81:33:b1:bc:
b2:a9:dc:e7:82:85:fb:1e:26:86:b0:9b:6c:ec:0b:
db:e3:91:a6:e6:2e:6c:f7:10:44:20:eb:05:58:f6:
be:e8:f5:9a:45:49:4a:fb:66:3f:cd:9a:b1:ac:96:
48:5c:14:fb:97:4a:e9:5b:f9:5e:c7:8a:f6:c3:d0:
e5:ec:4e:ca:f7:1b:a1:bc:03:58:49:03:e1:ce:cb:
f2:02:a7:6b:7f:7f:1a:ba:b8:54:35:a9:e3:dd:95:
86:f4:93:8a:d4:a9:8d:96:a0:3e:4c:32:94:98:53:
28:b8:eb:f0:8a:a5:74:dd:6b:37:ba:71:f5:51:f4:
fc:5e:67:16:1d:cd:a0:2a:68:f5:34:28:1d:4c:27:
22:d4:35:99:2c:a9:59:32:fc:a3:68:0b:88:19:7d:
c1:ce:08:73:e7:7d:dd:79:c8:98:ed:4f:25:c1:1d:
8e:11:f2:ee:c7:e6:ba:c8:3e:52:22:20:ee:a6:fd:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:62:47:48:F0:5E:FD:01:51:04:72:90:E0:01:B8:CE:B0:29:E7:08
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yWJHSPBe_QFRBHKQ4AG4zrAp5wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.255.0/24
94.156.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:aa:e0:45:5f:ec:7d:22:fd:1a:bd:8d:63:a8:5c:42:0b:71:
37:97:b8:3d:56:4b:2b:e5:da:5a:9a:1b:9d:f0:71:94:7d:7e:
bf:85:98:9b:2d:2c:36:32:cd:65:ef:88:e5:b3:54:b7:af:fb:
51:62:f0:16:88:b6:9a:93:2d:4c:35:c8:05:f0:62:90:24:48:
7d:32:62:e3:b9:4d:ea:02:8c:71:7a:48:a2:ae:30:48:f8:07:
44:c7:74:f8:b6:95:53:29:96:e0:73:b9:ca:75:77:dc:35:57:
66:51:c8:d3:15:d3:3d:86:30:03:36:07:40:1e:e4:21:01:34:
41:b4:03:ac:97:29:86:3b:31:f8:20:bf:ce:74:65:27:31:41:
80:b8:9a:99:95:95:65:97:ae:2d:40:63:6e:cb:88:0d:28:02:
ff:5a:5f:bb:74:8c:04:89:f5:2d:1f:89:cc:59:ca:f8:93:5a:
f5:eb:46:8f:f1:2c:17:4e:de:76:82:f9:ad:65:cb:01:4c:7d:
a3:5a:39:0c:2e:8c:cc:a8:dd:9c:de:2a:2b:dd:23:80:c4:2b:
02:3d:bf:e9:13:e5:69:c3:94:5e:c1:b4:54:bc:f2:95:5a:55:
44:d0:e1:90:d3:69:f2:04:2b:4a:f7:d8:d3:49:6d:4e:05:d0:
a0:42:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 11:57:12 2024 by rpki-client on console-fra.rpki-client.org