Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/CS7YNo6D2ZoUHvokWkKW90W_Z_o.roa
File: CS7YNo6D2ZoUHvokWkKW90W_Z_o.roa (raw, json)
Hash identifier: gfcxTzpn1wMBksWr6iVP0geNmaDQAOAEUhUz5UnxPxA=
Subject key identifier: 09:2E:D8:36:8E:83:D9:9A:14:1E:FA:24:5A:42:96:F7:45:BF:67:FA
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018890D3613D15B17361C403D637D3B07115
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/CS7YNo6D2ZoUHvokWkKW90W_Z_o.roa
Signing time: Tue 06 Jun 2023 13:09:11 +0000
ROA not before: Tue 06 Jun 2023 13:09:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 2.58.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Jun 2023 09:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:d3:61:3d:15:b1:73:61:c4:03:d6:37:d3:b0:71:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 6 13:09:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=092ed8368e83d99a141efa245a4296f745bf67fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:8f:bc:83:a0:bb:f7:1f:16:f0:94:b5:ee:
8d:5d:b5:2e:0c:f4:14:d3:e2:09:96:82:ca:08:45:
88:8e:31:5f:e6:9c:a9:21:ce:2a:98:1f:96:e7:d9:
8c:19:e4:75:fc:74:9d:4e:e7:13:25:63:84:1d:c0:
0c:4f:80:08:c0:9f:dd:fa:b2:da:6b:f9:7a:60:e3:
50:a8:a8:91:f2:d3:06:89:71:05:43:d1:6c:70:ac:
85:6e:9c:0d:a0:eb:ed:f8:11:40:41:2b:ee:63:8a:
57:48:ce:ef:8f:a2:09:96:c4:73:d3:2b:59:5a:34:
4b:07:76:35:08:57:07:8c:2d:34:c7:07:0a:bc:3c:
d2:ff:8d:1b:e2:e7:98:da:53:51:66:69:9b:23:6e:
3a:23:36:a6:0c:b1:72:0e:19:93:2c:70:69:bf:b6:
0e:f7:c2:e5:cf:70:f0:de:93:83:60:98:07:f5:a7:
52:cc:f1:b0:54:3c:45:3b:b2:e6:2a:56:a8:24:8e:
e6:08:2b:9d:16:9c:6a:86:37:80:4f:fb:a2:dd:64:
c5:fe:80:8b:b7:3a:52:3a:f1:42:e4:64:43:54:92:
2c:6d:bd:59:6d:64:a5:96:bb:e0:a0:ce:b4:16:ca:
e9:65:76:0a:7a:54:e4:9f:0c:03:a2:7b:e7:eb:fa:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2E:D8:36:8E:83:D9:9A:14:1E:FA:24:5A:42:96:F7:45:BF:67:FA
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/CS7YNo6D2ZoUHvokWkKW90W_Z_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:36:2d:2c:40:35:b6:94:7b:b4:94:ca:e2:32:09:04:f4:96:
bb:e8:cf:51:f6:ff:a1:3d:e8:47:d6:9d:7c:4b:c4:6e:01:31:
a9:6c:6e:04:a6:78:7f:6e:9d:d2:90:97:1e:92:37:fb:54:1f:
2c:ec:5a:38:af:1f:5f:a7:94:91:87:cd:9c:48:9f:73:36:71:
a7:e1:4c:0a:48:38:80:6c:49:dd:32:15:07:90:56:f5:30:1d:
6d:6b:ad:aa:f7:75:33:7e:d4:7d:bf:a0:cf:8b:ab:5e:44:92:
4a:71:54:8e:71:54:2b:f4:ef:48:c4:1f:71:ad:ff:1d:b5:e8:
bb:38:8c:37:4c:c0:3a:ec:95:7a:a6:f6:bf:28:b5:8b:0a:66:
a1:1b:d9:b9:75:ba:15:62:0e:9c:44:b6:ee:19:bf:17:9e:da:
e4:e8:ee:83:35:6f:fd:dc:23:6f:5a:f9:9b:e1:32:59:96:1a:
b6:e7:cf:26:cc:c0:b4:e2:e0:5f:f3:f2:91:9e:4c:44:9b:10:
9e:74:ed:e7:14:00:83:f6:37:4b:75:bb:17:04:2a:d4:21:6f:
8a:11:05:9d:7c:1c:a9:c9:75:eb:22:bd:e8:8b:f8:38:1a:65:
12:9b:3b:71:2f:dc:d6:4d:50:24:6c:2b:11:cd:19:77:c3:94:
13:f6:f8:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiQ02E9FbFzYcQD1jfTsHEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwNjA2MTMwOTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTJlZDgzNjhlODNkOTlhMTQxZWZhMjQ1YTQyOTZmNzQ1YmY2N2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AuPvIOgu/cfFvCUte6NXbUuDPQU
0+IJloLKCEWIjjFf5pypIc4qmB+W59mMGeR1/HSdTucTJWOEHcAMT4AIwJ/d+rLa
a/l6YONQqKiR8tMGiXEFQ9FscKyFbpwNoOvt+BFAQSvuY4pXSM7vj6IJlsRz0ytZ
WjRLB3Y1CFcHjC00xwcKvDzS/40b4ueY2lNRZmmbI246IzamDLFyDhmTLHBpv7YO
98Llz3Dw3pODYJgH9adSzPGwVDxFO7LmKlaoJI7mCCudFpxqhjeAT/ui3WTF/oCL
tzpSOvFC5GRDVJIsbb1ZbWSllrvgoM60FsrpZXYKelTknwwDonvn6/qqnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAku2DaOg9maFB76JFpClvdFv2f6MB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvQ1M3WU5vNkQyWm9VSHZva1drS1c5MFdfWl9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjqoMA0G
CSqGSIb3DQEBCwUAA4IBAQB+Ni0sQDW2lHu0lMriMgkE9Ja76M9R9v+hPehH1p18
S8RuATGpbG4Epnh/bp3SkJcekjf7VB8s7Fo4rx9fp5SRh82cSJ9zNnGn4UwKSDiA
bEndMhUHkFb1MB1ta62q93UzftR9v6DPi6teRJJKcVSOcVQr9O9IxB9xrf8dtei7
OIw3TMA67JV6pva/KLWLCmahG9m5dboVYg6cRLbuGb8Xntrk6O6DNW/93CNvWvmb
4TJZlhq2588mzMC04uBf8/KRnkxEmxCedO3nFACD9jdLdbsXBCrUIW+KEQWdfByp
yXXrIr3oi/g4GmUSmztxL9zWTVAkbCsRzRl3w5QT9vgg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org