Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/O3sWUjUFKNABpfcxHm8aw-PptTY.roa
File: O3sWUjUFKNABpfcxHm8aw-PptTY.roa (raw, json)
Hash identifier: UsaT/ZRnzAzkDIvDY0Y2A3I7LhPDYqJfmh3zpzCrNSc=
Subject key identifier: 3B:7B:16:52:35:05:28:D0:01:A5:F7:31:1E:6F:1A:C3:E3:E9:B5:36
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188C8BD881A08F6B1D0FDBEF68FF05C5581
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/O3sWUjUFKNABpfcxHm8aw-PptTY.roa
Signing time: Sat 17 Jun 2023 09:44:04 +0000
ROA not before: Sat 17 Jun 2023 09:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 2.58.168.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c8:bd:88:1a:08:f6:b1:d0:fd:be:f6:8f:f0:5c:55:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 17 09:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b7b1652350528d001a5f7311e6f1ac3e3e9b536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:10:56:1b:09:a7:02:10:ff:06:da:32:9c:
be:8e:d9:e1:80:34:91:1e:03:99:8f:36:e5:2f:93:
ec:ce:0c:b7:ff:95:09:9e:94:41:32:77:e0:f1:5c:
06:d9:d0:f5:92:5a:55:56:43:ea:4c:73:cc:2a:08:
97:ef:90:65:fe:5a:25:ba:09:96:d5:49:53:9f:68:
ca:3b:8a:f9:df:1c:e0:e7:81:2b:a3:10:82:74:91:
4a:07:f0:88:06:20:93:0d:7a:41:32:51:6a:48:98:
df:72:f9:c4:56:5a:6c:f2:63:69:df:a4:8f:3b:78:
be:11:3c:87:7c:48:28:05:50:97:87:55:9e:c4:8c:
e1:04:51:84:e7:a5:c0:70:88:57:bf:48:4d:5d:63:
55:ec:a2:6c:5c:5d:f8:80:db:41:00:fa:96:94:63:
4b:eb:82:78:f6:8b:47:a5:d1:cf:ca:11:32:de:d5:
7b:fd:cf:a0:a9:83:1b:de:3e:6c:9a:9a:cd:c1:c3:
e2:06:62:c2:b7:d4:34:3e:22:f2:1b:95:6a:3b:91:
3d:dd:8f:85:84:8d:43:c9:9a:f2:c4:cd:7b:4f:ee:
89:59:da:3d:23:f7:48:52:bf:8d:bc:ac:2b:c5:28:
64:ed:4f:81:48:1e:a9:e3:aa:ec:1c:0a:20:1e:3e:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7B:16:52:35:05:28:D0:01:A5:F7:31:1E:6F:1A:C3:E3:E9:B5:36
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/O3sWUjUFKNABpfcxHm8aw-PptTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/24
88.209.217.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:40:8d:b5:73:69:42:a1:5b:c3:cc:62:1f:36:fc:ca:1b:2a:
1d:39:9e:08:1a:4e:9c:f9:59:3e:3d:a7:61:39:3e:2d:89:aa:
bf:83:cc:0a:49:61:e0:5c:59:5a:76:4f:8c:3d:13:7b:58:c5:
9a:2e:0d:fc:28:15:c3:5c:5f:92:52:41:f6:a7:c9:9f:4e:3c:
02:27:a8:c4:f7:23:b8:2d:a3:bc:be:7e:85:c6:ca:f5:80:20:
d3:1a:3e:fd:5c:00:ee:03:4a:b0:92:a6:b5:ab:3f:db:40:da:
df:4d:7a:3f:84:1d:f7:28:2b:49:b1:e6:35:1b:01:15:25:5b:
98:f9:53:ae:e1:13:fb:a4:1b:cf:9a:13:c8:23:9a:1f:e5:22:
d5:47:9c:d2:c3:b9:12:e8:71:87:a9:da:2a:34:48:eb:18:46:
11:7c:e3:0d:d4:51:ac:9b:77:e2:93:2c:70:03:ab:ab:a2:f4:
a5:1a:8a:1f:72:bf:ff:8f:06:7d:50:b7:46:bb:62:1d:79:7e:
f1:49:3d:f2:1e:6b:80:23:7d:f3:93:06:0d:cb:cb:c4:60:cd:
8e:65:ea:01:68:e9:fc:a5:c2:d9:90:35:5c:21:cb:ec:59:07:
f2:1c:c6:d9:d2:13:0f:6b:1a:83:d7:95:3c:ae:a4:cd:c8:ff:
2c:a9:1e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:01 2023 by rpki-client on console-fra.rpki-client.org