Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/CpLPQshAg72vp3NSWZl1soPPdTE.roa
File: CpLPQshAg72vp3NSWZl1soPPdTE.roa (raw, json)
Hash identifier: cahlJeuptkGQWuDKx7N3iz/nteeSI5MIPfzPD1C5z1A=
Subject key identifier: 0A:92:CF:42:C8:40:83:BD:AF:A7:73:52:59:99:75:B2:83:CF:75:31
Certificate issuer: /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial: 018A9303BCEF15F98CDAB99C579A214056A1
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/CpLPQshAg72vp3NSWZl1soPPdTE.roa
Signing time: Thu 14 Sep 2023 09:26:50 +0000
ROA not before: Thu 14 Sep 2023 09:26:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 185.148.224.0/23 maxlen: 24
109.234.0.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Sep 2023 12:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:03:bc:ef:15:f9:8c:da:b9:9c:57:9a:21:40:56:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Validity
Not Before: Sep 14 09:26:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a92cf42c84083bdafa77352599975b283cf7531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:00:1f:df:cb:f9:15:cf:20:53:47:b4:e4:
45:6b:f5:57:5f:7e:b3:70:e7:62:f1:98:23:28:63:
92:6e:c4:5a:d3:41:9a:e9:a9:c0:fc:84:d1:e9:e4:
eb:c8:5d:d8:d3:c0:7e:7d:8f:c8:ea:f0:70:5c:6f:
e4:5c:b6:9c:eb:d9:46:82:e2:b0:2c:0e:f7:e0:71:
81:bf:3b:04:53:86:3a:3c:ec:74:95:a4:86:56:6b:
3a:82:be:4e:36:0a:dc:b3:4c:46:34:68:8d:ac:9d:
d8:bd:88:32:ff:f3:cd:47:69:44:f6:41:f0:0a:a9:
32:4b:b9:ef:11:f5:a9:06:44:90:a0:98:d7:ae:c6:
82:75:52:af:95:a8:cf:b8:89:59:0c:8d:41:a8:ae:
a5:bc:35:78:48:5f:c4:a7:04:40:0d:95:5d:79:30:
65:f3:95:d3:b5:b1:d2:86:1b:d4:7e:d5:a6:15:8d:
09:84:a1:99:72:44:a4:16:44:4b:0a:ce:01:5a:d9:
01:5f:68:35:fa:96:bf:45:58:96:89:94:93:c4:b8:
35:f0:73:5b:8e:63:15:46:ea:39:5c:9d:e9:55:2d:
6e:e5:47:94:89:67:6f:61:df:07:dd:a0:61:a8:1d:
cd:39:e3:03:57:31:ab:e8:67:69:e9:a7:8b:b9:91:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:92:CF:42:C8:40:83:BD:AF:A7:73:52:59:99:75:B2:83:CF:75:31
X509v3 Authority Key Identifier:
keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/CpLPQshAg72vp3NSWZl1soPPdTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.0.0/21
185.148.224.0/23
Signature Algorithm: sha256WithRSAEncryption
03:91:f4:d9:df:d3:79:f5:13:aa:5a:4f:66:fa:45:a6:13:dd:
2a:02:42:2a:ba:a0:e1:65:bf:b3:f8:fa:a0:aa:03:cf:70:94:
b7:86:cd:f1:94:16:45:d7:5a:43:6a:f4:1c:a7:dd:ed:52:fe:
e1:5a:12:04:2e:aa:16:f1:d1:15:b7:62:c1:a1:06:f1:16:02:
9b:0c:44:e0:d7:4a:38:58:84:ac:6a:12:49:b8:82:e6:3f:76:
19:4a:a6:f6:68:e9:01:21:23:37:d0:85:ab:b4:1c:e3:6a:6b:
70:7c:74:cd:b3:09:26:11:a4:0c:ad:43:31:77:f9:51:87:52:
2b:62:1b:e4:7f:b7:19:a9:0d:54:0a:56:ae:49:e5:6c:2d:3e:
42:f0:69:26:e9:29:33:b6:c6:81:1e:7d:68:46:8d:5b:3d:b1:
a5:5f:c8:12:08:75:bb:cc:5d:7d:2e:5d:a1:d9:a6:3c:49:e8:
c4:40:9d:1e:d5:53:c8:52:fc:71:ab:84:8f:ca:9c:fc:90:a2:
02:c2:e1:8e:e9:9a:56:a8:9b:9e:c4:3e:bc:88:26:a8:0b:66:
8b:1f:01:6e:3c:c6:11:01:94:5c:63:53:5e:91:db:b3:ad:c2:
8d:50:df:d6:99:41:b9:7b:02:d3:55:57:c0:21:3a:e9:4a:13:
8e:9e:67:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:51 2024 by rpki-client on console-fra.rpki-client.org