Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/JD2vc_mfKhf9wDM-ylf943tMXgk.roa
File: JD2vc_mfKhf9wDM-ylf943tMXgk.roa (raw, json)
Hash identifier: dZeRw39PP9YTgYheq/R8LX3HFxP/J13I8qQeS29zebM=
Subject key identifier: 24:3D:AF:73:F9:9F:2A:17:FD:C0:33:3E:CA:57:FD:E3:7B:4C:5E:09
Certificate issuer: /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial: 018974E673BDC3843D94D72D7B0C0956069B
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/JD2vc_mfKhf9wDM-ylf943tMXgk.roa
Signing time: Thu 20 Jul 2023 20:03:27 +0000
ROA not before: Thu 20 Jul 2023 20:03:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 2.58.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:74:e6:73:bd:c3:84:3d:94:d7:2d:7b:0c:09:56:06:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
Validity
Not Before: Jul 20 20:03:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=243daf73f99f2a17fdc0333eca57fde37b4c5e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:f7:5f:23:0d:b1:0f:42:00:6e:f6:f7:71:
d7:4a:da:0b:6f:09:c9:ab:ac:91:ac:32:f2:76:ec:
ad:eb:e0:bd:00:cc:1e:08:64:f7:b6:28:1e:e7:42:
97:e7:c3:5b:7c:47:90:a4:39:4a:ef:09:1a:bf:5d:
1d:47:71:55:d9:49:af:12:31:bf:b5:37:66:fe:d7:
ab:a0:fd:4d:c9:b7:c8:1f:40:f1:be:b3:7e:b2:58:
56:fd:81:ec:50:49:97:4b:94:d1:f0:1d:7f:34:a9:
8e:09:d4:d4:42:f5:27:46:73:95:79:26:8b:88:4a:
2c:21:f0:f9:7c:a5:d4:97:57:59:32:f2:14:eb:36:
08:fa:bd:83:7e:5e:bf:8d:6a:3f:2b:0d:af:7d:67:
a9:ca:f8:ce:08:ed:e5:92:6c:c9:a3:68:5f:67:02:
23:ca:64:5e:dc:f4:ce:70:b0:79:07:21:32:75:25:
a3:f6:cd:45:8e:76:8c:42:0b:24:57:b0:fb:81:f6:
75:fa:1b:e2:67:57:ce:af:05:aa:46:ca:d2:ca:ab:
ae:c2:b5:a4:3a:b8:fc:cb:3b:28:e2:ec:51:4a:cd:
ad:a9:8a:2e:68:07:54:43:87:60:73:ad:07:a4:9d:
4c:8a:98:bb:b9:34:d3:b8:7b:11:1c:e7:3c:10:23:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3D:AF:73:F9:9F:2A:17:FD:C0:33:3E:CA:57:FD:E3:7B:4C:5E:09
X509v3 Authority Key Identifier:
keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/JD2vc_mfKhf9wDM-ylf943tMXgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ca:17:a5:d6:b4:1f:ac:52:ff:6f:c9:3a:d7:12:4c:83:6d:
76:33:a9:b9:bd:d8:28:93:e7:63:c0:7b:2c:68:81:ec:ba:a1:
b7:75:99:e9:af:62:84:c3:8a:7e:3e:28:37:29:41:51:a6:ad:
c4:02:25:d8:86:60:5e:6a:e6:f4:74:bf:de:29:7d:cb:47:a1:
47:29:2f:f5:96:42:82:14:61:e4:26:6e:d8:24:4b:6e:65:84:
1c:22:d7:a4:8f:5f:a2:1a:d2:7f:ca:a2:3f:f7:1f:3f:5e:1f:
8a:4f:b6:32:64:16:0b:f0:ec:c4:9d:67:6b:9c:92:34:fd:a9:
9d:e3:1b:34:c8:01:b0:c3:0b:bc:d2:12:21:79:f1:1a:a1:ee:
a8:5f:88:f1:b3:7f:61:e8:6a:16:e5:9a:42:0a:6c:ce:3a:84:
a0:86:42:18:f2:51:26:0d:3c:84:fd:04:10:76:49:52:1b:8d:
6f:ab:52:44:3f:d0:90:a8:2f:8a:03:d4:09:37:f4:c6:ee:54:
54:83:56:24:8c:f8:a3:0f:d2:29:6c:c0:61:de:77:dd:5b:15:
f6:4d:27:45:34:58:b3:0f:37:a2:2a:17:57:59:77:d3:5a:cd:
14:73:30:68:14:8d:1d:d9:ca:f6:24:2e:57:91:30:7d:d0:b5:
d1:7b:ee:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:46 2024 by rpki-client on console-fra.rpki-client.org