Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/ssvs2N2b0s-H1qsjzsUYlCtVsbs.roa
File: ssvs2N2b0s-H1qsjzsUYlCtVsbs.roa (raw, json)
Hash identifier: RFfJ+YGiGg9oq7hfi+S3AfIjGJFZqVPwVAfEemJ/UlY=
Subject key identifier: B2:CB:EC:D8:DD:9B:D2:CF:87:D6:AB:23:CE:C5:18:94:2B:55:B1:BB
Certificate issuer: /CN=a8cee2f1ad419f7270a353840d0a4b83525cab5e
Certificate serial: 018571B9EFF1B992E827E9795C9C5D3A9D38
Authority key identifier: A8:CE:E2:F1:AD:41:9F:72:70:A3:53:84:0D:0A:4B:83:52:5C:AB:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/ssvs2N2b0s-H1qsjzsUYlCtVsbs.roa
Signing time: Mon 02 Jan 2023 09:04:49 +0000
ROA not before: Mon 02 Jan 2023 09:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24904
IP address blocks: 2.59.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:ef:f1:b9:92:e8:27:e9:79:5c:9c:5d:3a:9d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8cee2f1ad419f7270a353840d0a4b83525cab5e
Validity
Not Before: Jan 2 09:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2cbecd8dd9bd2cf87d6ab23cec518942b55b1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:97:4d:06:f8:ae:b1:3c:ed:5d:f0:33:de:
ac:f9:7d:ad:e2:98:cc:17:f4:4c:fc:88:57:9d:f4:
f1:81:17:72:9b:88:88:66:ca:9e:e6:72:03:69:0d:
b3:b7:22:e1:88:38:33:e1:11:c9:fa:0d:a8:4c:a0:
27:69:0c:f3:e6:b9:22:d9:66:41:11:9b:f7:75:83:
fa:8f:a8:54:f6:7f:3e:5c:ae:d2:ef:94:dd:e6:65:
70:93:5e:e8:5e:2f:18:6e:37:81:b0:a1:39:bc:fb:
18:5c:24:c8:56:32:59:6a:11:e4:7f:4b:8c:90:a0:
94:09:2f:97:87:4b:fa:f8:b3:c4:62:54:e4:c2:cc:
5b:50:8a:7f:91:20:79:4b:db:32:92:ea:2e:7b:35:
a9:b0:2e:3b:a0:32:b3:de:2c:13:2c:52:88:af:30:
f7:30:42:98:76:09:b1:83:22:85:e9:3c:f8:8a:b6:
74:be:21:ab:ca:c7:ae:f2:cc:e6:c2:83:8e:5f:9b:
54:05:dc:cf:56:76:47:c6:26:25:1d:64:04:3b:df:
4e:00:a9:76:f8:a5:b4:1e:d0:60:52:05:da:5d:f4:
62:bc:5e:ff:4c:82:1f:1f:28:fa:8c:b8:df:90:10:
59:fe:e2:69:59:42:bb:83:21:5e:4d:c4:9b:6f:09:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CB:EC:D8:DD:9B:D2:CF:87:D6:AB:23:CE:C5:18:94:2B:55:B1:BB
X509v3 Authority Key Identifier:
keyid:A8:CE:E2:F1:AD:41:9F:72:70:A3:53:84:0D:0A:4B:83:52:5C:AB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/ssvs2N2b0s-H1qsjzsUYlCtVsbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
18:fa:1d:9e:ee:79:c8:58:b6:35:07:fc:e6:c2:92:d7:a6:d7:
2d:01:41:15:82:1c:1e:29:8b:ba:c0:84:db:6b:ce:2b:9f:63:
fd:67:3a:00:bd:c0:c7:a0:1c:c4:ac:77:c8:53:73:eb:da:8b:
7e:1b:47:d9:d1:e6:81:2b:30:ed:9a:ac:5e:45:54:b1:35:26:
c3:d0:b8:6d:78:60:59:a5:60:56:84:53:4a:7f:13:c9:fa:bf:
a5:38:94:db:e2:ea:6e:ea:9c:56:a3:47:2a:23:35:03:62:fa:
5f:2f:da:99:22:ad:d5:22:60:4e:ec:c3:0b:57:88:60:46:8e:
64:49:53:fb:d6:5c:4c:99:a8:35:c4:87:35:96:17:db:08:62:
bf:61:1d:ea:21:a0:e2:a3:ad:d8:2a:ba:9e:d3:5f:5b:f6:ee:
8c:29:d2:86:6e:7a:3e:cf:c8:35:5f:84:cc:2b:a9:b3:d0:00:
74:2c:ce:31:4a:f8:98:a2:34:d4:0c:4e:0e:3d:3a:c9:63:38:
21:30:69:49:a3:84:71:95:a3:7b:74:25:e1:1e:8a:4e:76:8b:
f7:2c:4d:b6:6b:83:9f:fc:41:ce:89:b7:20:19:49:9f:35:65:
10:48:90:55:8c:05:e2:4c:e5:e6:d8:1e:86:7e:8a:da:83:45:
c7:ec:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:31 2024 by rpki-client on console-ams.rpki-client.org