Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/xmZKjUkYGgrhV7ORgTZ2iSsf2x8.roa
File: xmZKjUkYGgrhV7ORgTZ2iSsf2x8.roa (raw, json)
Hash identifier: 5T5UTkvpGpA7kBJfzJvDvqPBpQWbPg+XdOckzn8eWWU=
Subject key identifier: C6:66:4A:8D:49:18:1A:0A:E1:57:B3:91:81:36:76:89:2B:1F:DB:1F
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 0193AECFA0050249FB09DA548BFDEE406C37
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/xmZKjUkYGgrhV7ORgTZ2iSsf2x8.roa
Signing time: Tue 10 Dec 2024 04:24:22 +0000
ROA not before: Tue 10 Dec 2024 04:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48955
IP address blocks: 2.59.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 14:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ae:cf:a0:05:02:49:fb:09:da:54:8b:fd:ee:40:6c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Dec 10 04:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6664a8d49181a0ae157b391813676892b1fdb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:f9:5a:dc:0c:d3:00:a7:3d:93:ef:f2:52:
88:12:80:b5:eb:60:2f:1b:11:a6:cf:77:b7:d8:6c:
90:f2:3c:ba:d5:28:a1:06:f3:c1:01:6a:d5:6f:8b:
d2:ff:65:57:e6:fd:81:3c:21:55:4d:ff:a4:c9:80:
5c:18:12:bc:73:2d:51:c4:aa:c9:53:2d:f0:a8:12:
d6:6d:cb:48:93:16:9e:7d:50:12:58:eb:fa:3e:e2:
6d:64:78:0e:7f:fd:1a:9f:ac:86:83:b2:15:b4:04:
21:a4:7b:cf:d3:3b:b6:06:02:09:03:a8:81:07:2b:
c6:65:de:a4:09:0c:f7:55:d2:b2:33:b5:ba:f7:41:
2f:a5:22:41:bb:6e:80:c0:36:ee:00:80:18:2d:4e:
73:36:e7:da:84:7a:17:02:a9:22:53:25:4b:95:1c:
3d:96:48:25:26:0d:a3:bb:bc:c2:30:7a:19:da:b1:
b5:e8:37:1c:0d:ef:7c:51:b4:8e:d7:e2:f2:34:45:
2a:67:a2:57:1e:54:56:c0:23:ff:b2:ca:7e:1c:b4:
e2:58:9d:34:0a:ea:8e:ee:01:5e:bd:5a:85:90:26:
5d:53:3f:fc:72:bd:c5:1e:b4:3e:f9:f2:4a:67:c0:
73:96:6e:1b:7a:af:18:f0:1d:2e:b5:3f:39:99:25:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:66:4A:8D:49:18:1A:0A:E1:57:B3:91:81:36:76:89:2B:1F:DB:1F
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/xmZKjUkYGgrhV7ORgTZ2iSsf2x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.12.0/24
Signature Algorithm: sha256WithRSAEncryption
22:fd:4b:12:f9:00:eb:e2:40:11:36:83:fb:a8:2c:b4:4f:48:
a4:62:16:5f:39:db:7c:29:5f:8a:21:28:f0:fb:1f:b7:f8:8f:
4d:5e:0e:68:0c:fd:6e:07:56:83:49:09:6a:4a:ea:32:cf:3d:
91:9a:06:ba:87:84:55:ca:c3:66:96:0b:68:5f:5c:b0:24:1c:
8d:80:1c:7a:21:3a:cf:25:60:20:96:72:57:0b:a6:77:29:e4:
0f:e0:b4:a4:a4:a6:61:f3:e7:7a:9c:1b:16:77:ed:a6:a2:c8:
8c:06:88:71:de:cc:4d:20:2e:9a:83:69:96:e5:ff:7b:4f:0d:
ea:62:67:75:df:6f:b5:7f:3c:de:47:58:1e:3a:de:04:fe:f0:
ce:ef:fc:8f:ff:25:25:d8:c2:1b:45:0b:82:e6:16:6d:cd:47:
c1:25:9a:48:22:11:28:ae:bd:ae:a9:5d:31:45:6f:97:4f:29:
c1:f6:24:8d:7b:51:f4:ff:30:02:a6:6f:8c:59:4f:be:63:13:
f5:24:75:03:cf:b9:79:cd:ae:1a:0c:37:fa:35:5d:da:b2:51:
f9:c5:0b:f7:3c:9a:0f:5e:8e:ae:f0:9f:70:ad:d4:d5:86:58:
ff:88:c3:5e:38:80:90:5a:32:a9:c3:8a:92:b1:f2:6c:f9:27:
ba:ae:35:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOuz6AFAkn7CdpUi/3uQGw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzgyMWUxYmNiZjZlMDc0ZWE0ODE0YWFhNWM2M2UzYmE4
MTNjNWYwHhcNMjQxMjEwMDQyNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjY2NGE4ZDQ5MTgxYTBhZTE1N2IzOTE4MTM2NzY4OTJiMWZkYjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RT5WtwM0wCnPZPv8lKIEoC162Av
GxGmz3e32GyQ8jy61SihBvPBAWrVb4vS/2VX5v2BPCFVTf+kyYBcGBK8cy1RxKrJ
Uy3wqBLWbctIkxaefVASWOv6PuJtZHgOf/0an6yGg7IVtAQhpHvP0zu2BgIJA6iB
ByvGZd6kCQz3VdKyM7W690EvpSJBu26AwDbuAIAYLU5zNufahHoXAqkiUyVLlRw9
lkglJg2ju7zCMHoZ2rG16DccDe98UbSO1+LyNEUqZ6JXHlRWwCP/ssp+HLTiWJ00
CuqO7gFevVqFkCZdUz/8cr3FHrQ++fJKZ8Bzlm4beq8Y8B0utT85mSXQVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMZmSo1JGBoK4VezkYE2dokrH9sfMB8GA1UdIwQY
MBaAFNx4IeG8v24HTqSBSqpcY+O6gTxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYt
ZDQ4YjQyZWYxNTliLzEveG1aS2pVa1lHZ3JoVjdPUmdUWjJpU3NmMng4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYtZDQ4YjQyZWYxNTli
LzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjsMMA0G
CSqGSIb3DQEBCwUAA4IBAQAi/UsS+QDr4kARNoP7qCy0T0ikYhZfOdt8KV+KISjw
+x+3+I9NXg5oDP1uB1aDSQlqSuoyzz2Rmga6h4RVysNmlgtoX1ywJByNgBx6ITrP
JWAglnJXC6Z3KeQP4LSkpKZh8+d6nBsWd+2mosiMBohx3sxNIC6ag2mW5f97Tw3q
Ymd132+1fzzeR1geOt4E/vDO7/yP/yUl2MIbRQuC5hZtzUfBJZpIIhEorr2uqV0x
RW+XTynB9iSNe1H0/zACpm+MWU++YxP1JHUDz7l5za4aDDf6NV3aslH5xQv3PJoP
Xo6u8J9wrdTVhlj/iMNeOICQWjKpw4qSsfJs+Se6rjVx
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:19 2025 by rpki-client