Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/4kT9Iw593LM0Bxf8Pmqbps6Agk4.roa
File: 4kT9Iw593LM0Bxf8Pmqbps6Agk4.roa (raw, json)
Hash identifier: K/Py/kPJm6Yo2Pb1pqMe8GpGrGx7G6pXefS5bYHaw1c=
Subject key identifier: E2:44:FD:23:0E:7D:DC:B3:34:07:17:FC:3E:6A:9B:A6:CE:80:82:4E
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018B90854957E1FF250BD173BB3CD4467908
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/4kT9Iw593LM0Bxf8Pmqbps6Agk4.roa
Signing time: Thu 02 Nov 2023 14:52:16 +0000
ROA not before: Thu 02 Nov 2023 14:52:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52073
IP address blocks: 2.58.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:85:49:57:e1:ff:25:0b:d1:73:bb:3c:d4:46:79:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Nov 2 14:52:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e244fd230e7ddcb3340717fc3e6a9ba6ce80824e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c3:ea:7e:2e:2e:ba:e0:b5:95:eb:2d:4c:bf:
5c:5c:e0:53:e8:77:01:1a:f5:db:f6:eb:f3:3b:bb:
80:6f:78:ad:fd:fd:8c:cc:62:ee:cd:8f:c6:32:ce:
86:7c:5d:46:e9:bc:61:40:0b:da:a1:27:68:22:2a:
c7:d2:14:5a:25:35:c3:f2:6b:6f:cd:fd:14:6f:c2:
ac:66:31:77:85:98:66:7a:ac:1a:17:6a:12:2d:1e:
e4:26:32:1a:f1:a1:d9:dd:f2:ae:f1:67:c0:36:6c:
e2:73:2b:49:69:5a:fb:f8:6c:0c:52:7a:4c:01:45:
b9:47:36:f8:7d:80:88:c7:dd:aa:dc:0e:94:16:95:
64:f8:05:16:1c:8f:89:22:e7:ea:cb:99:89:fc:3c:
c4:f2:08:bd:0d:2a:38:3d:ef:20:ea:6d:76:56:f1:
6f:06:ec:7f:4d:e0:87:04:09:32:56:0b:be:93:9c:
cc:59:b1:15:98:7a:f9:7e:f5:75:2d:c0:d7:1d:43:
cd:3a:b8:e3:8c:66:34:c2:0b:f7:6f:63:b6:7e:f7:
f4:95:05:c5:47:b2:93:e0:e1:06:91:39:8e:11:17:
b8:d7:bc:a0:70:5f:0a:d0:0a:ed:4b:01:3d:c1:88:
26:66:d6:80:ce:a7:b0:d9:96:9f:95:70:31:e7:6b:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:44:FD:23:0E:7D:DC:B3:34:07:17:FC:3E:6A:9B:A6:CE:80:82:4E
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/4kT9Iw593LM0Bxf8Pmqbps6Agk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:da:2f:44:62:a1:3e:97:8f:a2:13:18:95:c8:75:30:94:7b:
13:05:e1:24:d9:b0:37:33:e2:54:94:d1:c0:eb:38:b9:08:ea:
4e:1b:49:32:d8:24:2d:0a:9a:64:88:ec:ed:fe:d6:eb:fe:fc:
4c:7c:9b:e9:3a:7b:38:06:87:7a:f5:40:cd:99:5e:0e:d8:45:
b6:4c:51:87:8a:65:7b:9c:e8:fd:83:65:04:b2:2d:6a:ec:ce:
b9:a4:d3:7c:87:f7:37:76:a2:9c:a4:91:ad:29:57:36:19:ab:
e8:c4:51:f5:c7:db:0a:80:31:8b:e1:10:8c:ff:80:dd:c0:88:
ef:db:2e:d0:f1:27:5d:61:d6:0a:7b:b7:d7:e4:c4:58:e5:b7:
9c:f9:ee:c3:66:f5:d2:b0:43:a1:17:b4:ba:7f:bd:25:9c:ce:
5b:da:aa:1b:51:64:b3:24:1f:0b:de:7a:98:61:4b:c0:87:f5:
cd:dc:9c:37:9a:5f:50:4b:c0:75:7a:f6:b9:7d:2f:4a:76:90:
70:92:e6:7e:9c:cf:48:26:e2:e2:f8:8a:e1:56:03:29:de:84:
2a:f2:dc:2c:77:17:63:30:8d:f7:65:aa:ff:35:dc:51:63:3f:
e2:b4:6f:82:0a:6e:8f:57:6e:77:b9:5e:15:44:3e:7f:c5:ae:
41:41:69:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org