Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/F2WpWSx6CH0v3e5dDQzXFYCPPKs.roa
File: F2WpWSx6CH0v3e5dDQzXFYCPPKs.roa (raw, json)
Hash identifier: Qkb0VGFp9gEg3+0o04Qmnp1XJHVGn1SA8HjAxOdExaE=
Subject key identifier: 17:65:A9:59:2C:7A:08:7D:2F:DD:EE:5D:0D:0C:D7:15:80:8F:3C:AB
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 019423D7A29801319F2C7BFB94248C1BC614
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/F2WpWSx6CH0v3e5dDQzXFYCPPKs.roa
Signing time: Wed 01 Jan 2025 21:48:41 +0000
ROA not before: Wed 01 Jan 2025 21:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 2.59.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 12:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:a2:98:01:31:9f:2c:7b:fb:94:24:8c:1b:c6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Jan 1 21:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1765a9592c7a087d2fddee5d0d0cd715808f3cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:8b:c0:a7:30:08:8d:c6:0a:70:ed:db:98:
da:29:09:5d:c2:f7:dd:36:73:36:f4:a4:3e:7a:37:
5d:1d:ce:1f:ab:30:0a:b4:69:7d:ed:08:5b:f8:9a:
35:0d:70:e5:bf:cd:bb:11:7b:46:13:99:80:e8:57:
c8:ac:50:63:b1:60:cc:2b:b5:09:a0:f7:32:66:11:
cf:35:96:57:d1:b6:1f:95:dc:37:cb:95:0d:2d:a0:
31:3f:b1:b4:82:ba:a3:0e:14:91:c2:35:0b:06:9b:
6e:9c:3d:5d:b2:31:11:a1:8a:8e:b9:cc:4d:cd:64:
46:4b:7e:0d:a0:ea:82:f8:de:d8:fe:14:67:e2:65:
1b:fc:0c:db:a5:6e:3a:b3:89:4e:16:f2:fe:8e:f4:
33:bd:db:64:19:e9:75:a8:2a:ab:b6:fe:12:83:65:
cb:c2:9a:b3:29:9a:5f:94:98:76:01:ab:4f:35:a2:
3f:66:d5:2c:31:f9:ed:34:17:d6:66:1c:36:33:d1:
1a:c0:ac:ae:4e:69:89:9e:f6:43:6d:dd:9f:f4:cb:
0f:ca:85:55:74:ae:8b:50:68:2c:6d:a4:0f:88:14:
5f:9e:8f:93:69:16:fa:bc:cc:c8:f4:f2:d2:04:6b:
56:a9:df:23:c0:b4:70:f8:7d:30:dc:2b:93:b3:d2:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:65:A9:59:2C:7A:08:7D:2F:DD:EE:5D:0D:0C:D7:15:80:8F:3C:AB
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/F2WpWSx6CH0v3e5dDQzXFYCPPKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/24
Signature Algorithm: sha256WithRSAEncryption
99:88:b8:61:a1:a0:b1:55:ea:3a:ba:f1:7e:32:41:07:a2:ef:
d9:7f:fa:85:3f:24:e2:49:df:e0:27:1f:b2:94:49:f0:ef:a5:
fa:4f:b6:4a:07:e8:d5:0d:94:d1:c6:9d:c6:3e:40:c7:df:b8:
98:9a:c5:2d:4d:b1:bc:ec:99:5f:90:03:84:d4:09:77:c1:bd:
58:d5:d1:46:1a:aa:7d:d0:ae:aa:fe:d9:6d:76:7c:f1:46:7f:
60:9a:b8:dc:c3:f0:3b:68:ef:e8:70:31:30:42:6b:67:df:5d:
72:cf:06:ac:a4:4b:75:3c:e1:b2:1f:93:08:3a:26:2e:27:1d:
a8:18:10:f7:9b:45:98:0f:c3:58:dd:03:6b:63:94:8a:44:0d:
7a:06:dc:9c:a9:a1:bc:08:d5:a1:34:cb:ba:3a:29:bc:ee:58:
e1:fe:20:cc:5b:05:c7:cc:54:21:e7:e1:53:7e:93:93:00:e8:
4b:2e:3c:90:b4:61:e5:cb:59:91:b5:75:eb:5c:07:80:30:2f:
f9:f8:4f:40:13:66:32:02:f8:9f:1b:ea:5b:3e:d8:48:a1:c8:
bf:6c:92:a6:e3:20:d8:e4:63:e6:aa:42:d9:d3:10:68:6c:bd:
5e:9c:d0:22:d4:0a:00:58:b1:9b:cc:17:8f:5f:3f:15:c9:28:
45:93:59:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:07:39 2025 by rpki-client