Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-3lizWLsiA2OBWrzkyI62rxY5o8.roa
File: 1-3lizWLsiA2OBWrzkyI62rxY5o8.roa (raw, json)
Hash identifier: kfP1Jte1DaLmKP2l9ywF15x0H5zWjgb5hQis0K/Giy8=
Subject key identifier: FB:79:62:CD:62:EC:88:0D:8E:05:6A:F3:93:22:3A:DA:BC:58:E6:8F
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE60C16D9ACE0BD60A911B574BAA9A9
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-3lizWLsiA2OBWrzkyI62rxY5o8.roa
Signing time: Sun 01 Jan 2023 10:34:53 +0000
ROA not before: Sun 01 Jan 2023 10:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14315
IP address blocks: 2.58.202.0/24 maxlen: 24
2.58.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Dec 2023 13:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:0c:16:d9:ac:e0:bd:60:a9:11:b5:74:ba:a9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb7962cd62ec880d8e056af393223adabc58e68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8e:d9:6d:b6:83:69:27:12:aa:df:71:39:22:
57:b3:8c:ca:d8:50:11:80:f8:63:2b:51:91:0c:00:
7f:95:2a:61:b0:9b:85:b7:8b:6a:46:bf:12:6b:45:
04:1f:0f:20:92:2c:d8:82:ce:37:a0:03:5b:c9:07:
70:04:14:88:9d:d2:f2:e6:7f:67:12:58:32:2d:d1:
65:ab:2f:fd:e8:6e:71:c5:a2:24:a7:81:02:77:63:
34:5e:ff:86:3a:60:c4:18:03:d1:b5:3c:0d:0b:f6:
a0:f9:b3:78:ba:d6:e9:aa:cc:a9:3b:e9:0a:01:ee:
60:a4:ff:3a:a9:bf:60:e2:77:b6:4a:46:3f:20:67:
0c:c7:08:23:22:7f:a4:78:3b:80:1c:de:79:90:7f:
0c:9a:af:23:da:ea:53:fe:17:06:2c:4c:56:fe:4a:
0e:a9:bd:a0:b0:d9:ac:87:59:14:1d:22:57:49:21:
c6:0d:6e:4c:4e:d9:20:e6:9a:27:5b:34:ab:4e:1c:
04:b5:e4:d8:19:f4:2e:f6:26:d7:6a:31:59:47:92:
ba:da:38:ba:cb:6a:9e:02:ab:d4:92:8e:71:6c:eb:
5f:58:29:1c:2a:d9:4b:26:a8:23:08:67:bb:ab:fe:
ec:da:54:f1:d4:a4:f7:45:d9:e8:b5:f7:b7:76:27:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:79:62:CD:62:EC:88:0D:8E:05:6A:F3:93:22:3A:DA:BC:58:E6:8F
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-3lizWLsiA2OBWrzkyI62rxY5o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.200.0/24
2.58.202.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:31:8e:17:d4:41:39:d2:e6:05:0a:48:10:98:d2:93:ed:86:
04:7f:ca:4e:28:a9:45:e0:38:f3:82:b1:53:b8:14:3a:9a:a6:
a3:5f:91:ed:8d:4a:c6:ea:f6:69:6c:a1:b0:c4:51:7b:bc:a4:
ed:ef:19:b3:ab:7c:01:9e:c0:b4:60:f4:03:3d:5f:e8:75:b3:
d1:86:d8:ad:45:4d:83:18:51:d5:0d:e7:fc:00:0c:5a:08:13:
61:74:f5:ce:4f:79:0f:49:9e:4d:86:15:61:03:a6:4b:40:8e:
e8:64:9c:9d:f2:26:d0:3e:9f:f1:cd:f5:b3:48:74:57:29:a1:
20:f3:06:7e:e8:b5:d3:01:7b:4e:a2:56:e2:ed:5e:2e:43:b6:
0e:01:e9:28:7e:76:6a:92:2f:a1:e7:72:3f:75:2b:7c:a1:d0:
3a:5e:3d:f9:c6:f3:e7:97:91:87:49:10:c7:46:21:ea:77:c2:
b0:88:95:99:93:14:d4:ec:8b:34:31:40:a1:d9:2a:4a:0b:43:
6a:95:9a:d5:61:8a:ca:1e:b4:4a:73:15:15:28:1d:98:04:95:
4d:47:f9:5a:ac:13:22:37:84:bf:7d:9f:3c:c9:13:06:91:ae:
e9:4b:66:bf:ad:bd:ff:4a:4d:50:be:3e:e7:d6:e2:9f:d1:27:
b3:8a:d1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:27 2024 by rpki-client on console-fra.rpki-client.org