Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/2CVn8MYEpfdfdFmZQTdV6OftF5c.roa
File: 2CVn8MYEpfdfdFmZQTdV6OftF5c.roa (raw, json)
Hash identifier: /ORRK7G26QxfvRhXDYxgINe6TcHN/gk4yw/ilCoDrUs=
Subject key identifier: D8:25:67:F0:C6:04:A5:F7:5F:74:59:99:41:37:55:E8:E7:ED:17:97
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 0189FECEFBB6EF8D7F7C1F0388289D765BC9
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/2CVn8MYEpfdfdFmZQTdV6OftF5c.roa
Signing time: Wed 16 Aug 2023 14:45:24 +0000
ROA not before: Wed 16 Aug 2023 14:45:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8258
IP address blocks: 195.64.224.0/22 maxlen: 22
195.64.227.0/24 maxlen: 24
195.64.228.0/24 maxlen: 24
195.64.254.0/23 maxlen: 23
2a02:2540::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:ce:fb:b6:ef:8d:7f:7c:1f:03:88:28:9d:76:5b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Aug 16 14:45:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d82567f0c604a5f75f745999413755e8e7ed1797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:ea:41:af:44:fe:ee:ae:8b:52:6e:8e:20:
dd:11:be:98:31:52:31:5d:e5:5f:3b:af:fe:f4:a5:
c7:78:1a:75:ad:94:c2:d2:f3:2f:f0:2c:02:16:33:
ea:bb:db:ba:9e:09:6c:aa:1a:47:b0:32:39:9f:6f:
1f:a7:06:c3:56:2b:ba:ce:46:95:3e:86:ac:fe:74:
0b:78:e2:9b:8b:eb:25:5f:4d:eb:8f:b4:77:6f:0e:
46:9e:25:dd:22:44:f6:d8:19:6e:2a:46:74:f7:f8:
37:90:2d:61:3b:e7:f1:b9:0e:46:d7:1f:a1:c0:57:
6e:3e:21:0e:0c:48:ed:20:e1:49:cc:f1:af:74:db:
14:f5:07:ac:99:1e:87:be:6a:b8:09:0a:d3:30:0a:
45:a3:ec:fb:77:c5:c8:99:f3:f9:21:19:db:31:a0:
89:c6:60:86:fa:e1:bd:4b:b6:52:86:1a:4b:f7:07:
c0:8f:85:de:fb:64:bd:87:0d:d3:0a:e2:1e:82:cd:
cc:81:f8:41:0f:06:a1:39:bd:ce:37:71:a1:ef:51:
d5:55:31:3b:d4:c8:a2:24:93:d2:12:05:38:c3:b2:
62:28:27:7a:61:0a:f7:8b:04:47:05:d7:e7:4d:d3:
4f:9a:a4:c0:06:60:32:1c:ac:7e:a0:57:6f:b6:d2:
09:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:25:67:F0:C6:04:A5:F7:5F:74:59:99:41:37:55:E8:E7:ED:17:97
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/2CVn8MYEpfdfdFmZQTdV6OftF5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.224.0-195.64.228.255
195.64.254.0/23
IPv6:
2a02:2540::/32
Signature Algorithm: sha256WithRSAEncryption
9e:6e:a3:65:c8:31:c0:f2:66:fc:75:93:c7:24:3a:44:2c:b8:
69:69:4e:70:ed:2e:f6:fc:0a:8b:40:48:5e:5f:74:69:f5:f0:
5e:29:a7:f1:7c:f8:6e:3d:2d:0b:7f:c9:37:9d:f8:10:13:fb:
50:06:0e:2f:aa:c2:6f:de:f0:7d:56:5a:a1:99:9b:77:fd:d2:
07:ef:65:14:e1:97:11:76:5c:be:dd:d3:dc:6f:ab:78:0d:b0:
8c:98:5a:c3:c5:db:95:93:fd:da:6c:bd:02:bd:dd:2b:0c:04:
c5:0a:9d:89:45:88:43:6e:0c:95:94:2d:54:98:bc:d4:4c:1a:
d3:36:c5:8f:94:75:ed:60:62:91:4c:4c:91:e4:93:c0:d5:1c:
ac:0c:ef:ca:18:68:4f:19:94:30:06:af:c3:13:af:91:10:8f:
70:d7:42:d2:ad:bc:3f:d1:0b:56:d8:f1:bc:df:0d:80:16:52:
98:bc:78:6a:04:88:91:c8:01:ba:ec:c4:d0:bb:7b:34:7e:87:
94:81:73:52:a3:93:6c:59:44:ea:fc:75:fa:e2:f0:4b:85:b8:
01:ec:06:72:c8:fa:08:92:c6:2e:1e:ea:43:09:5f:d5:95:6d:
b1:1c:b5:0c:3e:ce:3c:f7:75:1b:5a:26:2b:7c:d9:f8:50:f2:
e2:dc:9d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:56 2024 by rpki-client on console-fra.rpki-client.org