Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/RCu2oFE--NEtFTXO_CRBvauUNfs.roa
File: RCu2oFE--NEtFTXO_CRBvauUNfs.roa (raw, json)
Hash identifier: KPD/2HecD3z6f2jWp3NMRwpR0/DRPLptVG0wCtrejQg=
Subject key identifier: 44:2B:B6:A0:51:3E:F8:D1:2D:15:35:CE:FC:24:41:BD:AB:94:35:FB
Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial: 0189FEFCC163B1673B156E8B3FD6EE9AF0C4
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/RCu2oFE--NEtFTXO_CRBvauUNfs.roa
Signing time: Wed 16 Aug 2023 15:35:24 +0000
ROA not before: Wed 16 Aug 2023 15:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49871
IP address blocks: 195.234.129.0/24 maxlen: 24
193.109.236.0/24 maxlen: 24
193.104.9.0/24 maxlen: 24
195.66.154.0/23 maxlen: 24
194.29.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Sep 2023 20:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:fc:c1:63:b1:67:3b:15:6e:8b:3f:d6:ee:9a:f0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Validity
Not Before: Aug 16 15:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=442bb6a0513ef8d12d1535cefc2441bdab9435fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:9c:41:7a:e5:05:d5:8c:4a:be:b2:54:62:
1c:4e:fc:cb:09:42:1a:5e:4c:5e:a1:4a:c4:9a:cc:
ea:7a:1f:c2:e8:9b:b0:43:5c:33:d2:b6:09:fa:65:
22:53:88:1c:29:e6:00:13:3b:6b:2b:f1:42:67:9d:
6f:d7:56:e0:13:95:1a:d0:91:80:76:02:21:0e:9d:
ca:be:b6:23:e4:fe:f9:34:99:a5:e5:d9:fe:6e:36:
d5:f0:85:61:fb:a2:36:0e:4a:76:2c:dc:ad:ad:40:
9b:7e:71:b6:5f:3e:07:2c:7f:fb:08:ee:df:7f:c5:
a0:80:b5:cf:d7:b6:f2:b7:1f:48:02:6a:3e:fe:4b:
d3:51:99:76:77:e7:c3:f0:33:ee:35:2f:96:8f:7b:
6e:90:3a:d8:8f:c8:77:45:8f:59:6a:1d:dd:25:d1:
40:b4:4f:93:75:2d:91:5c:de:6b:95:53:98:42:98:
b1:d1:4a:d5:40:df:a6:36:f1:f3:33:92:26:84:03:
65:e0:c1:e1:35:0c:58:28:5d:16:36:1d:83:97:77:
c0:ae:36:30:b6:24:8a:be:10:85:4d:a7:da:c3:3c:
3e:92:11:f8:87:a9:9a:7d:11:9a:12:38:73:5a:1d:
2e:26:31:32:a3:4c:fd:d0:d6:f3:06:45:a2:2f:84:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2B:B6:A0:51:3E:F8:D1:2D:15:35:CE:FC:24:41:BD:AB:94:35:FB
X509v3 Authority Key Identifier:
keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/RCu2oFE--NEtFTXO_CRBvauUNfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.9.0/24
193.109.236.0/24
194.29.56.0/22
195.66.154.0/23
195.234.129.0/24
Signature Algorithm: sha256WithRSAEncryption
66:34:ef:be:71:b3:bf:6f:c8:6a:e2:f9:34:f5:bf:d6:eb:4b:
25:45:63:99:90:c8:93:db:bf:74:0c:73:87:6b:2b:55:63:72:
83:40:18:b9:73:7c:f9:71:2e:28:43:34:91:6a:8a:85:e6:f2:
4e:fc:7b:44:9a:17:5e:55:51:34:5c:8c:ba:ec:89:08:06:57:
aa:4d:e8:07:3a:b3:b5:45:b3:87:ea:be:9a:fd:0f:ba:62:71:
6d:2c:34:38:24:2a:ae:63:e0:77:5f:e3:c5:a4:0a:38:d4:38:
20:7e:14:cb:30:8a:f2:f7:d8:19:14:a1:15:1f:f8:d0:57:6b:
6d:7d:b7:c9:35:16:9c:e6:91:b3:0a:2d:f4:fe:39:51:cb:fc:
59:a0:6b:53:6a:8d:76:d3:5a:48:a5:94:83:34:04:d9:57:c2:
42:24:c8:e2:a1:3f:a4:ef:79:b5:ab:b6:dd:71:6d:f1:1d:fc:
d2:4f:66:7c:b0:7c:01:40:39:b4:00:e7:d0:ca:88:1c:fc:24:
2b:1e:52:42:33:22:ad:99:79:de:d9:ab:1e:5d:75:6a:ae:18:
95:23:64:a2:04:13:2c:58:bc:b0:3f:98:dc:c5:2c:7f:58:d8:
89:d4:cf:a8:e3:f0:55:c8:77:8f:56:af:5c:7d:d2:2b:1b:28:
31:3b:80:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:45 2024 by rpki-client on console-fra.rpki-client.org