Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/8jtbwxFu5Nw_DYpLyfmiyMH2ucI.roa
File: 8jtbwxFu5Nw_DYpLyfmiyMH2ucI.roa (raw, json)
Hash identifier: OyuHiSu8yMEtixpInBjWtg/Es1WORvHtgU9BRqDBHL4=
Subject key identifier: F2:3B:5B:C3:11:6E:E4:DC:3F:0D:8A:4B:C9:F9:A2:C8:C1:F6:B9:C2
Certificate issuer: /CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
Certificate serial: 018BF6F603450FF0093334557398760DA3FE
Authority key identifier: 10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/8jtbwxFu5Nw_DYpLyfmiyMH2ucI.roa
Signing time: Wed 22 Nov 2023 12:16:39 +0000
ROA not before: Wed 22 Nov 2023 12:16:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215961
IP address blocks: 2.57.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:f6:03:45:0f:f0:09:33:34:55:73:98:76:0d:a3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
Validity
Not Before: Nov 22 12:16:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f23b5bc3116ee4dc3f0d8a4bc9f9a2c8c1f6b9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:46:39:1c:d5:de:3d:68:48:43:d3:54:93:
5b:d4:23:53:4a:fd:4b:76:73:63:b7:12:c3:21:67:
4d:88:dc:24:b0:32:8e:44:d7:32:a0:91:f2:de:88:
b6:c3:45:2d:31:55:11:d7:f6:54:c6:4f:70:71:b4:
a2:2b:7d:6a:de:46:78:be:56:1b:19:c2:2d:80:5f:
37:0c:6c:4c:93:d4:09:17:0c:cb:d0:2f:11:bb:eb:
fa:3a:65:9b:0c:29:be:19:70:9f:02:91:52:22:aa:
23:4d:ee:cd:cd:f0:53:95:7e:fc:46:2c:e5:9d:23:
ed:e6:68:2e:b8:c1:11:1c:ba:75:db:ba:7d:f7:cd:
fd:9e:ab:07:3d:b2:8f:63:15:82:1a:2a:bb:54:6e:
10:54:51:0b:18:af:6f:53:d1:3c:53:be:17:27:c2:
84:5d:13:54:22:64:c1:c0:6b:aa:6c:fa:14:51:62:
b7:94:f4:22:18:01:63:70:94:4c:78:dc:5e:2d:b0:
3a:bc:b4:34:3e:5a:15:ba:17:6d:30:40:45:b7:b7:
a8:9d:7b:f6:49:d4:7b:06:08:ee:01:e5:fa:ce:db:
04:52:39:92:1f:b3:3a:ae:78:46:f6:d4:a8:4f:89:
aa:0e:6a:cf:73:33:ef:55:3f:a0:6e:de:43:4c:ac:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3B:5B:C3:11:6E:E4:DC:3F:0D:8A:4B:C9:F9:A2:C8:C1:F6:B9:C2
X509v3 Authority Key Identifier:
keyid:10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/8jtbwxFu5Nw_DYpLyfmiyMH2ucI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.238.0/24
Signature Algorithm: sha256WithRSAEncryption
75:52:f2:17:0a:b4:ca:a7:cd:59:c8:a0:4c:7a:ff:2b:ff:e4:
09:27:c5:1a:f1:41:c8:3b:3c:5d:c6:2c:cf:28:aa:31:d3:d2:
22:30:28:cf:7c:46:49:6e:8a:2d:74:dc:3a:8a:7b:2b:92:e8:
03:fe:59:7a:22:3b:95:b1:85:4f:cc:f0:29:f0:ff:89:73:9b:
70:2d:6e:ac:ed:6b:0f:3d:86:56:10:0d:4b:02:52:51:53:68:
5d:02:96:13:d6:73:60:de:51:97:ca:b9:18:85:c8:64:5f:66:
51:1e:56:1d:c2:11:20:23:af:90:9c:18:e2:2f:55:18:0a:da:
a2:ca:87:a8:94:53:c0:ad:c5:63:e8:ac:c5:fd:af:a7:65:ac:
de:cb:79:c0:c2:ee:79:31:9a:59:d4:6f:dc:cf:b3:91:96:70:
bf:42:25:66:19:5b:c5:97:ae:08:dd:6c:ae:b4:8b:b5:e2:53:
ac:b7:7f:5b:77:29:2b:ac:a5:2b:48:e3:f2:9c:6b:81:fc:53:
78:e8:4b:a3:f8:bc:b6:6d:a4:7b:b9:93:b5:09:08:4b:d0:45:
3f:6c:21:54:ce:12:47:19:ed:32:28:e4:eb:d8:d7:14:ee:95:
fe:39:44:10:fd:ae:19:9f:d4:9e:e7:44:5c:c8:fc:15:36:6c:
8a:d5:df:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:47 2024 by rpki-client on console-ams.rpki-client.org