Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/fWvRtnfISzC40RmficImma4Je8o.roa
File: fWvRtnfISzC40RmficImma4Je8o.roa (raw, json)
Hash identifier: vwIPCaWm7jZbpIWXSFjwYNH+ybKr+pftSWKILWVreMI=
Subject key identifier: 7D:6B:D1:B6:77:C8:4B:30:B8:D1:19:9F:89:C2:26:99:AE:09:7B:CA
Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial: 01856F42A7CBF5088E4CD80BC20EC0DA47E3
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/fWvRtnfISzC40RmficImma4Je8o.roa
Signing time: Sun 01 Jan 2023 21:35:17 +0000
ROA not before: Sun 01 Jan 2023 21:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39560
IP address blocks: 2.58.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a7:cb:f5:08:8e:4c:d8:0b:c2:0e:c0:da:47:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Validity
Not Before: Jan 1 21:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d6bd1b677c84b30b8d1199f89c22699ae097bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:d9:8d:43:48:e0:c0:77:20:81:35:42:ed:
0c:0c:f8:ec:de:29:b6:ba:14:1a:64:df:30:19:5d:
5b:02:ba:32:16:65:8e:bf:a6:3e:b1:ab:7f:9b:b1:
e4:6f:4b:c5:b2:5f:d6:3c:73:fd:d3:b0:b0:a4:a2:
33:43:35:8e:d3:f0:60:da:fd:28:58:39:0b:3d:4e:
c4:7d:8e:e0:25:99:19:2f:9c:7c:cd:c3:a2:fe:af:
04:b0:a9:01:c6:bf:7a:f9:ba:cc:d9:71:de:97:7d:
4b:4a:6b:07:70:6a:f0:78:da:ea:a9:d6:6b:e2:7a:
fa:c6:3b:a9:a2:ec:28:e0:69:d0:c7:f0:95:25:dc:
f7:02:5e:7e:32:23:5f:d2:17:d6:2d:bb:fe:5d:4e:
0e:8a:63:20:9c:33:25:72:54:80:ba:40:ff:71:ef:
f5:87:dc:bc:a7:f8:8d:05:68:90:ae:47:8e:cc:ff:
e1:af:ed:d8:cb:07:4e:6a:0f:19:1a:e2:47:27:a8:
a2:8e:01:c3:b5:76:5a:ad:5d:cf:8a:46:0f:dc:86:
39:b2:57:08:53:30:ae:f2:ca:11:11:b7:e1:95:08:
b5:e6:54:4e:5f:ea:f7:e2:25:5c:ae:2c:bb:be:5f:
91:8b:ca:65:bc:82:1c:8f:7c:02:dd:c7:ca:18:7b:
b1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6B:D1:B6:77:C8:4B:30:B8:D1:19:9F:89:C2:26:99:AE:09:7B:CA
X509v3 Authority Key Identifier:
keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/fWvRtnfISzC40RmficImma4Je8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.114.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e0:8e:6a:63:35:2f:54:5d:77:2d:ad:69:c3:e6:b3:c4:03:
5a:2c:2e:f2:f6:67:6c:33:76:da:f9:7c:51:d9:8b:38:e7:0f:
47:a4:ea:11:89:80:c4:7a:00:ae:37:2c:5d:a6:de:04:19:36:
54:48:e6:1b:58:4c:bc:9d:69:85:95:f8:ca:8d:40:7b:21:72:
26:1e:be:ee:0f:87:40:d4:ea:57:38:c9:e7:52:b2:9a:8c:62:
43:4e:d9:47:a0:83:2f:17:0d:60:6e:cf:95:fd:a2:8f:f8:95:
3b:78:0c:7e:24:5a:51:2a:8f:08:e6:53:6a:29:2a:8c:d6:e7:
32:ff:a6:96:b0:8c:e4:e5:cd:53:2f:c1:d3:ee:67:cc:e1:c5:
2a:22:54:16:f4:2e:10:46:ea:c2:8b:50:ec:33:be:d1:06:37:
28:3d:53:25:17:e5:0b:b3:10:72:03:df:df:37:c1:26:57:69:
bc:72:a0:83:89:5b:dd:25:16:78:70:47:11:41:f5:27:34:ba:
60:d8:13:f4:52:11:6a:93:4e:2c:08:fd:66:bd:25:54:e5:85:
ca:4e:aa:61:29:aa:b2:9a:b0:aa:8b:a5:06:4f:ba:3d:a9:2a:
31:87:68:85:20:b3:22:c4:1b:85:5a:cc:15:6d:f0:9b:61:0f:
d2:81:03:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 16:15:06 2023 by rpki-client on console-fra.rpki-client.org