Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/cYaXwCbh_hUQwAhIVJN0ykJVosg.roa
File: cYaXwCbh_hUQwAhIVJN0ykJVosg.roa (raw, json)
Hash identifier: DMmPGwgv+WUPV0wv6pexW3v0uMQSj2MxnH/P8pDTbjU=
Subject key identifier: 71:86:97:C0:26:E1:FE:15:10:C0:08:48:54:93:74:CA:42:55:A2:C8
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 0185711E87E72C33FFA9A7CCA79BF4ADF264
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/cYaXwCbh_hUQwAhIVJN0ykJVosg.roa
Signing time: Mon 02 Jan 2023 06:15:04 +0000
ROA not before: Mon 02 Jan 2023 06:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202376
IP address blocks: 2.59.166.0/24 maxlen: 24
2.59.167.0/24 maxlen: 24
2a09:f541::/32 maxlen: 32
2a09:f540::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:87:e7:2c:33:ff:a9:a7:cc:a7:9b:f4:ad:f2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Jan 2 06:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=718697c026e1fe1510c00848549374ca4255a2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:9d:8d:46:e6:d3:08:bd:73:43:96:68:e7:
5a:40:0b:71:ce:a4:3e:d7:c5:4a:73:83:3a:e8:36:
b5:cb:3f:8b:84:39:31:e6:55:1f:d2:8b:d6:8c:cc:
09:a7:b2:7b:f0:ac:ff:26:37:ac:72:ad:0b:a1:4f:
69:9f:fb:a9:64:68:93:e5:ff:e9:f1:58:be:c7:25:
e6:41:a6:74:0d:e2:d2:83:35:d4:78:0d:0d:91:30:
63:8e:42:22:1b:3b:8a:fc:ef:0b:b1:24:b0:4b:3e:
16:5f:a5:f1:82:2a:82:ec:26:29:62:8c:1d:cd:b4:
5c:ef:79:c1:a4:7c:f5:39:0e:69:b0:6c:4c:00:4f:
34:cd:83:20:53:f6:02:41:66:5d:79:26:e4:27:33:
df:34:03:72:27:72:c1:15:e0:d4:88:67:70:0a:73:
2d:a3:08:24:04:1d:6d:f7:c6:b3:4c:d2:d2:dc:39:
1e:8f:c2:00:a8:49:40:83:36:4e:da:79:10:2d:fe:
a8:38:d0:c9:7e:db:c7:79:f9:16:3e:82:c3:44:ab:
29:5f:b0:53:5c:ce:af:8a:44:15:d3:81:af:a0:37:
ca:55:e9:67:40:db:84:ec:09:12:34:4a:d2:ae:7f:
a1:54:d9:34:09:c4:56:a2:d8:0b:b8:e7:d8:1c:b5:
48:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:86:97:C0:26:E1:FE:15:10:C0:08:48:54:93:74:CA:42:55:A2:C8
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/cYaXwCbh_hUQwAhIVJN0ykJVosg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.166.0/23
IPv6:
2a09:f540::/31
Signature Algorithm: sha256WithRSAEncryption
a2:d1:fc:0f:f6:8b:b7:d7:f2:f4:0c:1a:ba:6b:76:1c:5e:05:
04:72:a7:97:4d:85:ca:0b:f5:58:26:0e:9f:27:67:8e:a7:4b:
c4:fd:f3:37:6e:1d:f7:ab:70:c4:6f:ba:70:d3:13:4e:65:c4:
13:25:45:96:15:89:c3:c7:fb:05:8e:9e:53:53:35:75:a0:02:
63:6c:f5:b1:be:97:a1:10:d8:d7:d9:a1:d8:6a:47:75:ba:20:
83:e9:bf:e3:42:9b:b2:64:c8:e7:07:d0:d1:d2:b1:e4:06:bf:
86:ea:e5:61:f4:6f:06:6f:5a:ae:5a:6a:05:21:7a:bd:6b:fc:
e4:0f:76:a0:09:68:9e:da:8e:2a:7f:6e:e8:d4:aa:e6:19:29:
4f:b9:7a:13:6e:17:e6:48:1f:b0:29:1e:a9:ef:8f:1d:4d:2a:
ee:24:19:b9:3c:46:1a:f4:cd:08:76:d7:ea:30:6b:ae:c7:fd:
ee:6a:93:f3:1e:5d:f9:0a:bb:a4:84:fc:41:46:41:69:aa:d6:
16:2b:f7:5a:a2:f7:16:a0:4e:72:12:ea:3b:f4:55:02:b5:be:
2f:e1:19:a0:35:cb:f8:08:73:79:69:70:7e:2f:2e:cc:fd:fc:
84:54:2c:8d:4a:5b:3d:12:45:9e:6f:71:86:b9:20:1e:03:11:
ee:93:be:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:19 2024 by rpki-client on console.sobornost.net