Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/YFHaQysEWtT_JnfB-mwLpLhuKNc.roa
File: YFHaQysEWtT_JnfB-mwLpLhuKNc.roa (raw, json)
Hash identifier: zxwxJNnIl1TOkMHqK6+05/MFmyEM3U6zvu6dVImWoGY=
Subject key identifier: 60:51:DA:43:2B:04:5A:D4:FF:26:77:C1:FA:6C:0B:A4:B8:6E:28:D7
Certificate issuer: /CN=fb744006eac3084bf88f128349b0e733bb3d79e3
Certificate serial: 018916AB1380C73E07D3B207C159EC4148C3
Authority key identifier: FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/YFHaQysEWtT_JnfB-mwLpLhuKNc.roa
Signing time: Sun 02 Jul 2023 12:54:17 +0000
ROA not before: Sun 02 Jul 2023 12:54:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35133
IP address blocks: 2.58.57.0/24 maxlen: 24
2.58.59.0/24 maxlen: 24
2a09:e244::/33 maxlen: 33
2a09:e240:2::/48 maxlen: 48
2a09:e240:22::/48 maxlen: 48
2a09:e240:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:16:ab:13:80:c7:3e:07:d3:b2:07:c1:59:ec:41:48:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb744006eac3084bf88f128349b0e733bb3d79e3
Validity
Not Before: Jul 2 12:54:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6051da432b045ad4ff2677c1fa6c0ba4b86e28d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:24:6a:88:9e:64:a6:d5:58:30:4b:93:c0:
40:d3:48:22:11:25:b4:95:b2:53:11:91:17:5e:59:
ff:b3:73:e4:16:c2:1f:75:ee:99:59:a3:1d:ac:f9:
f6:43:ff:98:3e:5c:da:77:24:a9:8d:b9:06:73:cf:
a8:60:8c:2c:42:57:8d:4f:ff:ad:75:68:94:c2:b6:
e2:ba:5e:4b:e3:ad:9f:1e:65:89:91:25:11:60:29:
ac:61:66:5c:03:8d:9d:a2:7e:d5:ac:f9:40:d8:8a:
ea:9e:f2:07:53:09:2d:64:fc:ca:de:00:49:b7:ba:
81:36:c2:0f:c2:65:19:c5:71:ab:3f:24:3a:92:11:
31:1b:3e:94:7e:5b:17:37:22:41:69:e3:b8:19:be:
d9:2f:c3:e3:59:11:7a:cf:05:d7:5a:08:87:c1:f3:
95:c2:3e:94:77:e2:59:be:bf:f5:c3:88:b3:8c:70:
85:7d:54:e8:e8:bf:77:1f:8d:10:ba:85:9d:5f:b0:
a8:08:c4:a4:f0:0f:24:35:38:ff:3c:66:e2:96:12:
6a:9b:51:bc:1b:46:3a:46:e2:49:f5:cb:fb:4c:79:
26:38:9c:ef:2c:d5:03:8d:21:65:04:43:ae:23:70:
06:ad:2d:35:78:a4:4f:7d:ab:4f:e8:56:06:a6:27:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:51:DA:43:2B:04:5A:D4:FF:26:77:C1:FA:6C:0B:A4:B8:6E:28:D7
X509v3 Authority Key Identifier:
keyid:FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/YFHaQysEWtT_JnfB-mwLpLhuKNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/1-3RABurDCEv4jxKDSbDnM7s9eeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.57.0/24
2.58.59.0/24
IPv6:
2a09:e240:1::-2a09:e240:2:ffff:ffff:ffff:ffff:ffff
2a09:e240:22::/48
2a09:e244::/33
Signature Algorithm: sha256WithRSAEncryption
5e:c6:90:c8:9c:b5:94:9e:3f:5a:ac:8c:6c:7f:8b:e4:ba:19:
ff:1d:14:0b:c4:68:18:6e:f6:11:f6:2b:47:62:81:82:10:f5:
d4:1c:c8:5a:9e:7f:7a:a5:89:83:9d:ae:49:63:76:2e:33:cb:
85:1b:6d:98:39:19:ca:8e:9d:31:31:8d:6a:b0:e7:44:3c:0d:
38:ec:90:b5:00:32:7f:09:c9:5e:04:6d:8f:eb:94:e9:55:15:
e9:1a:af:49:14:22:ab:e1:87:01:52:1f:2c:5e:a6:79:96:0f:
af:d4:40:05:e0:78:f5:ae:b6:16:a2:89:1c:62:59:24:1a:71:
8c:e7:e5:45:2a:f4:91:6f:2a:0b:33:7d:da:48:87:71:98:41:
22:97:00:1d:70:37:e4:8e:2d:7b:ff:8d:61:8a:44:a2:a8:e2:
fc:91:00:90:39:dc:1f:53:ac:7f:33:67:12:aa:3e:34:33:60:
07:d1:7d:5a:fe:76:3c:f5:c8:d3:40:02:7f:da:28:d0:1f:96:
74:29:db:1d:10:f5:76:ab:74:e2:3b:1d:be:af:5c:93:3a:e1:
9e:23:21:9d:d4:f0:8d:22:40:e9:d4:b0:19:a9:33:e3:44:6f:
88:2f:d4:31:75:1b:29:0e:d0:23:5e:48:e3:e7:fd:f6:27:c5:
20:a8:26:04
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 20 14:30:48 2023 by rpki-client on console-fra.rpki-client.org