Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/5m3l7ozwMyCRq1qJ-0hFUESdxsw.roa
File: 5m3l7ozwMyCRq1qJ-0hFUESdxsw.roa (raw, json)
Hash identifier: l4EcdpEWZ1C+QNmBJ9fRPKNg0eyNfZjByJ0vd8y1Erc=
Subject key identifier: E6:6D:E5:EE:8C:F0:33:20:91:AB:5A:89:FB:48:45:50:44:9D:C6:CC
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 01875058DEF5717738AFB3EB9BBB62825552
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/5m3l7ozwMyCRq1qJ-0hFUESdxsw.roa
Signing time: Wed 05 Apr 2023 07:36:54 +0000
ROA not before: Wed 05 Apr 2023 07:36:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207843
IP address blocks: 2.58.164.0/24 maxlen: 24
2.58.165.0/24 maxlen: 24
2a0f:91c0::/48 maxlen: 48
2a0f:91c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:58:de:f5:71:77:38:af:b3:eb:9b:bb:62:82:55:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: Apr 5 07:36:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e66de5ee8cf0332091ab5a89fb484550449dc6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:35:da:8e:07:9c:e0:0d:00:9a:fb:52:9b:
bd:bd:f7:0b:51:20:a7:23:29:56:4b:db:72:de:a7:
18:d1:ad:4e:1e:2e:71:5f:10:8e:50:f8:d3:4a:a8:
93:72:21:8d:54:d6:65:b2:06:10:3a:ca:bd:b6:e9:
3e:21:50:97:a5:62:bd:66:60:9c:c6:33:9c:c6:20:
8a:7d:ec:1c:60:53:b1:76:aa:35:bd:5b:c2:98:bc:
f2:16:85:6e:47:3e:90:fe:d8:43:f5:fe:a8:ba:7a:
22:77:21:ad:e3:5d:04:e5:82:59:82:ac:eb:9c:37:
19:c8:68:b8:a6:c2:8e:4f:05:cd:95:8d:28:52:14:
4f:33:a7:1f:6f:63:02:bc:c2:36:25:ea:78:7a:d3:
16:4e:42:b9:59:3e:a7:80:20:f2:f7:de:cb:6b:f3:
a4:95:b2:a0:20:21:23:47:03:de:6f:b0:38:16:b8:
03:b3:9e:3f:96:c5:8c:2a:8b:42:94:e8:e3:47:af:
3d:1a:54:68:b4:1d:ee:9e:72:09:f5:e5:4f:90:fc:
50:71:8a:a8:af:bb:86:d2:8c:18:c7:58:d4:81:35:
41:1f:66:08:c1:64:8d:d0:32:fc:81:f0:01:a9:35:
c1:dd:0c:28:c5:58:07:05:4a:23:16:3c:b8:38:ad:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6D:E5:EE:8C:F0:33:20:91:AB:5A:89:FB:48:45:50:44:9D:C6:CC
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/5m3l7ozwMyCRq1qJ-0hFUESdxsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.164.0/23
IPv6:
2a0f:91c0::/47
Signature Algorithm: sha256WithRSAEncryption
9b:2c:b0:46:fe:b8:95:92:bf:e3:97:56:ab:85:9c:a7:c6:fd:
95:01:04:96:1d:72:32:47:25:3b:4f:f9:68:d3:43:68:fd:57:
0c:53:ac:3d:b4:79:20:18:8f:a4:28:37:85:1c:a7:cd:06:d1:
ab:04:89:62:a8:e5:cf:ef:57:2b:86:5d:c0:b8:b3:49:9c:de:
9e:dc:21:1c:90:fc:9e:44:70:e2:fe:73:f2:95:88:b4:68:85:
5a:81:80:a6:4e:e2:87:f9:35:66:14:8f:b6:9b:79:d3:1f:50:
03:bf:43:93:a9:47:0b:4e:39:e2:5b:f5:cb:8d:ff:7e:fe:b3:
c0:e5:96:7c:0e:61:77:5a:a5:c1:3e:ee:2c:c2:07:95:5d:f7:
c9:64:14:94:87:08:55:b9:ac:da:a8:f7:b3:73:78:30:38:92:
03:bc:7e:64:3f:5e:f2:4a:53:16:e9:90:db:92:58:47:1f:87:
9a:89:01:70:5d:53:26:e6:f5:38:7c:4d:53:04:4c:b3:ca:c4:
db:bd:6b:b6:a3:b6:ff:d6:a7:80:25:66:a7:ab:41:3e:3d:11:
6c:46:6c:5f:62:e8:39:89:79:47:49:e7:28:b2:38:6a:17:b5:
ea:1d:ba:8c:da:0b:ce:70:39:8f:45:38:e2:ab:30:7f:63:7d:
d1:15:8e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:32 2024 by rpki-client on console-fra.rpki-client.org