Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/Brqp1FvP-81zswyQXNlqljUE1HE.roa
File: Brqp1FvP-81zswyQXNlqljUE1HE.roa (raw, json)
Hash identifier: gwY8rvcUh2HVEm7gjpZHtpN4RrqPTmY7wgGzicFln5Y=
Subject key identifier: 06:BA:A9:D4:5B:CF:FB:CD:73:B3:0C:90:5C:D9:6A:96:35:04:D4:71
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 0193BB2E6E79284A76A562400F56DE651926
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/Brqp1FvP-81zswyQXNlqljUE1HE.roa
Signing time: Thu 12 Dec 2024 14:03:22 +0000
ROA not before: Thu 12 Dec 2024 14:03:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48955
IP address blocks: 2.59.12.0/24 maxlen: 24
2.59.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 19:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:2e:6e:79:28:4a:76:a5:62:40:0f:56:de:65:19:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Dec 12 14:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06baa9d45bcffbcd73b30c905cd96a963504d471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:06:a6:63:09:27:69:a3:ea:d4:61:dd:d2:0f:
4d:e1:5a:2b:e6:8a:53:a7:59:d7:2a:ab:1f:dc:7b:
db:d5:ed:e7:70:2c:8e:2a:f6:a8:2d:b8:73:60:d6:
67:80:04:92:d1:39:fb:a7:e2:0c:6b:73:7c:8a:56:
77:11:a4:8e:39:46:63:07:60:55:81:5d:29:c4:0b:
61:9b:16:fb:48:1c:a2:01:60:7d:ac:24:5c:73:78:
b0:1a:ec:12:e9:c5:78:2d:b7:da:ea:f7:a3:ba:43:
30:9b:69:e1:d4:9f:d3:50:1f:46:77:19:6b:51:e7:
5d:72:89:d5:b2:fe:46:e5:03:0b:bf:35:0b:9a:ce:
d3:9b:70:7b:f0:3c:51:75:31:a6:1a:96:13:20:6f:
cb:78:69:cd:7b:46:a3:f4:fb:a7:d5:d0:ed:76:84:
49:30:22:bf:5f:85:61:fb:cd:71:83:70:72:42:ab:
a9:bf:93:b1:3a:b3:7f:9e:81:1b:13:19:61:3c:d7:
24:25:0f:62:53:2f:88:fa:f0:bc:6f:60:5f:e2:d1:
2a:ce:9d:9e:35:f7:55:22:a3:b8:38:22:a9:41:99:
69:3d:66:3e:a6:5f:8a:6f:c9:b6:16:69:a5:a7:21:
bf:d7:01:dd:ee:bc:25:ff:56:d2:37:cb:cc:c8:4b:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BA:A9:D4:5B:CF:FB:CD:73:B3:0C:90:5C:D9:6A:96:35:04:D4:71
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/Brqp1FvP-81zswyQXNlqljUE1HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.12.0/24
2.59.15.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b0:8d:52:b3:14:f8:2b:ad:3e:61:65:34:3d:bc:dc:3a:83:
c0:6c:0c:8c:36:43:31:90:e0:5a:7b:80:1c:c5:2a:77:c7:32:
af:11:e3:92:ad:b8:0b:43:e7:a6:4e:9a:70:a2:5a:80:0f:a7:
38:7d:73:df:d8:21:5d:a7:25:2f:aa:74:2a:44:db:f6:c0:81:
a4:b6:36:ec:c8:07:6e:ce:4f:6f:ed:db:06:01:56:db:17:e2:
76:56:9d:3d:e0:d1:69:48:9d:5c:05:7d:f1:97:38:5a:26:84:
11:25:34:72:21:29:b2:e9:10:ab:59:48:04:b8:5e:cc:f4:d5:
4b:72:60:b7:fc:25:75:4e:90:ee:35:8d:bd:6d:96:10:27:08:
27:e7:3f:ff:62:c6:fd:fd:ce:ea:9e:ea:de:99:a3:bb:f2:b9:
cf:d9:26:c1:01:4e:37:bb:ff:fd:af:94:d2:cb:81:9f:c5:6a:
ae:1d:6f:46:30:97:6a:72:4b:51:b0:10:35:0c:34:4a:fe:69:
d4:27:98:ed:1d:45:81:7f:44:77:bc:c8:50:b5:8d:e1:c3:cb:
6b:47:3a:9d:c4:c7:c7:b4:02:d8:23:45:4c:84:61:db:ea:65:
e6:2c:f3:55:f4:c3:7e:3d:c0:10:9e:fd:ea:4f:85:5b:d3:a2:
2a:91:ac:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:14 2025 by rpki-client