Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/666LaDzwRlvaShG3rpKDiujuJrw.roa
File: 666LaDzwRlvaShG3rpKDiujuJrw.roa (raw, json)
Hash identifier: DYkcZgch6udpCd2MGycCAitSdVckGz+8plTEsrPU/qk=
Subject key identifier: EB:AE:8B:68:3C:F0:46:5B:DA:4A:11:B7:AE:92:83:8A:E8:EE:26:BC
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018B908549B6C511CACF027209DF4FE36B37
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/666LaDzwRlvaShG3rpKDiujuJrw.roa
Signing time: Thu 02 Nov 2023 14:52:16 +0000
ROA not before: Thu 02 Nov 2023 14:52:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216117
IP address blocks: 2.58.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:85:49:b6:c5:11:ca:cf:02:72:09:df:4f:e3:6b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Nov 2 14:52:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebae8b683cf0465bda4a11b7ae92838ae8ee26bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:29:29:0e:1d:d4:8a:f0:5e:32:1d:95:10:44:
ac:95:16:e9:0f:d1:05:ba:3e:6c:99:b1:20:12:90:
11:41:a4:03:c4:d7:43:9d:20:7d:16:46:ac:be:7a:
ea:1a:19:ff:51:56:4d:e4:ea:c9:c4:c0:fd:97:7a:
ed:0a:f5:12:79:0c:eb:db:b5:00:60:0b:28:ee:43:
a5:7e:f5:5b:d9:a4:ce:95:5d:69:f6:63:1a:b1:a5:
ae:4b:20:24:43:bb:67:9e:a8:e0:65:57:83:83:30:
cd:25:e1:5a:35:e2:b4:63:81:90:18:bf:5a:75:4f:
eb:51:ff:5d:9c:a3:e5:ca:f9:20:7e:1d:2b:e2:4f:
40:9d:bf:f9:fd:04:cc:1a:07:72:75:d0:76:3b:fe:
4c:05:32:e6:1c:6a:d7:fc:54:d4:69:2e:ab:57:a3:
56:8d:fc:6d:4d:ce:d2:b7:f1:3e:09:f4:6e:93:a3:
60:72:55:b5:a9:a2:23:1e:cb:f0:b0:38:9c:3a:e1:
5e:37:96:3b:9d:a1:4a:37:15:c9:55:50:79:c7:d8:
f3:96:84:de:20:6b:29:10:7d:2e:ff:f3:6c:d3:26:
a3:8e:eb:43:41:5a:63:61:1d:f3:3e:57:28:61:0f:
ca:02:2c:06:73:07:16:ca:3e:78:05:fa:8e:6f:06:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AE:8B:68:3C:F0:46:5B:DA:4A:11:B7:AE:92:83:8A:E8:EE:26:BC
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/666LaDzwRlvaShG3rpKDiujuJrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.199.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:73:77:50:62:0e:dd:2a:63:6e:d0:89:20:de:11:15:1e:b7:
e4:fe:3c:6f:38:c1:8f:17:1a:ce:15:5e:3f:16:fc:22:8c:7c:
31:75:97:d0:4c:1a:20:ed:ed:d7:f1:5f:97:2f:5b:f0:c2:7f:
09:d9:3d:f9:77:0b:54:30:73:e0:cf:c5:64:d7:bd:16:f4:07:
4d:2c:6a:67:fe:a1:10:92:48:59:0e:f2:f4:74:0b:7f:5d:1a:
a6:e1:a3:ed:96:db:2e:03:1e:35:ab:ec:ab:c7:48:4d:cf:de:
ff:78:31:ea:31:a7:51:94:ff:10:6e:47:68:7e:b5:cc:05:df:
4d:97:3e:13:b2:76:a5:b9:4a:76:20:49:31:d5:45:a9:16:54:
f0:9f:20:38:13:d7:01:ad:05:c8:87:1c:c8:e1:5e:b6:6e:d0:
91:a7:58:8d:b6:09:33:e1:4a:8a:e2:c1:a5:c1:fb:1c:e7:1f:
4e:ae:4d:cd:8c:e6:9e:03:7d:13:a5:9e:4a:a9:03:da:7c:90:
d4:55:1b:0d:e4:c3:82:b4:f5:3c:2b:c9:25:ee:0a:f1:e0:0d:
e9:68:44:5c:0c:96:b5:75:5c:0d:bc:1e:98:0a:1f:6b:3f:e4:
19:99:a4:92:bf:3c:14:58:7d:73:79:a0:b1:52:a4:40:a6:67:
24:0e:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org