Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/GciDjkcqKdGNKMKkiJS5A-1f8M4.roa
File: GciDjkcqKdGNKMKkiJS5A-1f8M4.roa (raw, json)
Hash identifier: v2qrefzGKo0xDdMO7JoNwlFSxT6ae8EFUP2rirfwJSM=
Subject key identifier: 19:C8:83:8E:47:2A:29:D1:8D:28:C2:A4:88:94:B9:03:ED:5F:F0:CE
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 018CC26CF83A9C23BC32AFE0D67D33613166
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/GciDjkcqKdGNKMKkiJS5A-1f8M4.roa
Signing time: Mon 01 Jan 2024 00:29:30 +0000
ROA not before: Mon 01 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203499
IP address blocks: 2.59.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 15:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f8:3a:9c:23:bc:32:af:e0:d6:7d:33:61:31:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19c8838e472a29d18d28c2a48894b903ed5ff0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:11:d2:92:78:a0:18:0f:dc:dc:74:02:b1:
77:d6:ca:2a:96:c5:92:a8:0c:70:6a:6c:44:d0:d8:
4e:25:d6:b5:97:72:c7:dd:f4:51:84:49:f4:7b:6f:
b6:3e:ed:b0:2e:98:8a:1d:ca:68:bf:e4:8c:5f:a6:
ca:c7:dd:a2:c3:2e:a3:ff:f8:e9:e3:d1:77:9d:a2:
e0:c6:2b:0c:dd:bb:b9:fe:79:2c:8f:30:1b:30:00:
f6:7e:36:49:78:96:92:0f:93:7b:37:14:21:cd:d3:
d0:d4:c2:54:58:46:2a:a0:10:af:14:11:a7:d9:14:
1c:9c:3b:59:d1:ec:a9:c6:7f:c3:20:ab:84:0a:6e:
2d:b7:fc:ae:d2:fc:bc:0c:4d:e7:93:9a:6a:6a:15:
94:4a:8b:25:51:65:bd:e8:d1:94:da:af:b9:3c:04:
ab:b8:1c:26:bd:2f:e8:ad:9b:c2:1f:99:5d:a3:4a:
3f:5b:11:b6:c4:49:66:22:11:75:25:2e:b2:21:1b:
d2:57:00:1a:bd:15:9a:d8:df:6e:aa:e9:43:03:37:
58:2a:7a:18:19:c7:9b:96:68:62:44:5b:ea:85:84:
ba:30:9c:b2:8f:78:ec:71:ff:66:63:08:be:83:ae:
a4:0c:62:de:1b:12:63:9b:35:95:4c:d1:51:c0:1d:
91:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C8:83:8E:47:2A:29:D1:8D:28:C2:A4:88:94:B9:03:ED:5F:F0:CE
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/GciDjkcqKdGNKMKkiJS5A-1f8M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.108.0/22
Signature Algorithm: sha256WithRSAEncryption
64:3f:d5:ae:59:80:72:23:22:ae:55:14:4b:c1:c5:7a:77:fb:
a7:21:43:38:e3:3d:fb:f1:82:1e:5a:a9:35:c5:44:1f:b8:4e:
25:3a:d9:3e:3e:9d:59:99:f9:b1:74:33:a2:35:7f:63:0c:c9:
3c:d9:12:d1:20:ab:34:47:f5:bc:08:ae:dd:ea:6f:ea:94:6f:
65:a9:30:4a:c9:a4:3d:99:0f:bb:37:2b:e3:17:a0:32:28:e6:
e1:c2:9f:33:b6:04:c5:3a:4f:b1:4e:69:84:41:70:84:9d:07:
06:14:19:1a:c5:15:6f:2b:6a:29:39:b3:dd:f0:9d:6a:3a:68:
84:61:15:1f:b5:36:46:7a:13:21:47:e1:99:f2:dc:03:ab:66:
f6:16:4f:af:46:1b:e9:90:26:20:16:aa:11:6f:9b:19:77:a4:
29:20:74:25:59:64:2d:63:f2:29:bc:a8:e8:e5:d2:4b:6d:a7:
07:89:ab:d7:d5:a7:87:6a:e2:7b:e2:fc:72:27:43:1f:92:e2:
c7:23:7f:a7:8a:0b:ae:c5:e9:c1:0a:59:97:48:4b:e5:f7:fe:
68:51:ea:8e:d6:c1:01:ff:c4:77:6f:c3:5c:f2:9f:89:ae:3e:
51:dc:0a:af:43:01:ce:f5:8b:73:c9:ad:b4:40:46:28:37:7f:
91:92:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 19:19:41 2024 by rpki-client on console-ams.rpki-client.org