Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/GrXZWmWfM0wx4TvfQYifAUCgi44.roa
File: GrXZWmWfM0wx4TvfQYifAUCgi44.roa (raw, json)
Hash identifier: yI4ShyOBA02zf7ypFqx1loaClD9xFDd59Dx5vMSOBPg=
Subject key identifier: 1A:B5:D9:5A:65:9F:33:4C:31:E1:3B:DF:41:88:9F:01:40:A0:8B:8E
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 01886CBCC1EAF4124A3490E8EC2C82A882F9
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/GrXZWmWfM0wx4TvfQYifAUCgi44.roa
Signing time: Tue 30 May 2023 12:58:09 +0000
ROA not before: Tue 30 May 2023 12:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199556
IP address blocks: 2.58.164.0/24 maxlen: 24
2.58.164.0/22 maxlen: 24
2.58.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:bc:c1:ea:f4:12:4a:34:90:e8:ec:2c:82:a8:82:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: May 30 12:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ab5d95a659f334c31e13bdf41889f0140a08b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:9d:d3:b3:ea:b6:98:0f:37:36:e5:5a:3a:
7d:38:a5:74:b8:83:e3:ef:7b:02:7a:58:92:68:1f:
75:7b:8b:87:4c:a8:cf:87:5e:a5:b8:c5:67:b1:24:
12:ac:fa:fd:4d:29:26:63:df:a0:e2:09:6d:66:14:
c8:bc:4c:14:30:6f:58:1f:62:9a:fc:a5:37:05:9e:
c4:3b:d3:e5:7d:e9:8e:0a:d5:93:c0:2d:19:ce:83:
22:fd:ab:11:59:3c:54:7b:55:da:d9:66:0d:85:b3:
25:4c:97:84:78:b7:6c:bb:f1:ee:00:08:23:8b:b5:
ea:1f:d3:a9:87:70:e9:25:99:55:dc:2e:9a:06:6b:
ce:01:7c:c6:d9:3b:f6:88:e9:3b:12:76:99:ce:7d:
4d:43:1a:6d:af:db:8b:35:65:7b:fe:9b:0c:be:5e:
44:3e:a6:0a:09:6b:d4:a3:dd:fb:f7:e7:f2:37:dc:
b6:8a:07:5c:34:6e:72:ed:35:24:d3:cb:ee:ef:ae:
38:aa:37:46:a5:55:de:da:c4:8d:ee:c8:34:96:1b:
42:cf:1c:da:34:e9:c5:d2:dd:90:8c:0d:b7:5e:3e:
69:73:a4:57:cf:90:16:13:99:a2:3b:68:8c:d5:e2:
42:4f:21:10:35:6a:1f:84:43:67:f3:f9:bf:6c:ea:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B5:D9:5A:65:9F:33:4C:31:E1:3B:DF:41:88:9F:01:40:A0:8B:8E
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/GrXZWmWfM0wx4TvfQYifAUCgi44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.164.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:95:d9:c9:b9:5a:a0:1f:13:23:ea:de:8e:b7:4d:84:71:0d:
b8:b9:89:d8:b9:77:05:b3:98:3f:03:6f:fd:c3:69:cc:72:08:
87:e2:d8:da:a0:1e:f7:10:5e:97:2c:e1:1a:c6:57:d6:f7:98:
d2:9c:bb:54:d1:dc:04:73:1c:60:6a:6b:39:fb:79:8f:84:1d:
37:6a:d8:eb:25:d4:fa:e3:a1:bb:22:8e:a0:c3:3e:e5:1e:7c:
1a:bf:ff:cf:bd:7a:41:fe:96:89:cc:16:33:90:f6:83:98:c9:
5e:fd:ba:60:fa:9d:cc:4a:ef:b1:c0:e7:dd:65:4e:74:87:5a:
a0:09:21:30:d0:5e:4f:b3:07:d0:2f:b4:55:40:88:5d:bb:95:
4b:bf:b8:b7:42:6d:df:23:68:4b:69:e2:27:a6:f0:04:a3:80:
94:7e:43:61:0a:41:54:c0:90:80:b7:8d:90:dd:c1:10:fe:4f:
af:9d:f6:27:3f:c4:c8:00:33:01:a9:80:91:86:d0:79:78:cc:
26:9b:a9:84:1d:fb:07:39:84:3a:a2:dd:77:c5:b3:05:d4:f9:
ee:3d:af:60:f0:cc:55:b5:ee:fc:d0:a4:e5:ba:f0:61:78:91:
d9:eb:40:ce:c5:8c:c5:9c:ea:ad:3d:5c:28:94:f0:60:4c:2f:
e6:a9:27:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:28 2024 by rpki-client on console-ams.rpki-client.org