Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/C8cp-1G-G8WlI2rZAdk4p5eE40s.roa
File: C8cp-1G-G8WlI2rZAdk4p5eE40s.roa (raw, json)
Hash identifier: iq1KBae/p2aOOYtmpLuViNjx8vMUUoqywqwZ+5IM3to=
Subject key identifier: 0B:C7:29:FB:51:BE:1B:C5:A5:23:6A:D9:01:D9:38:A7:97:84:E3:4B
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 018B6AF94FADC1749BB97FFC1C58C40D5AA1
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/C8cp-1G-G8WlI2rZAdk4p5eE40s.roa
Signing time: Thu 26 Oct 2023 07:53:25 +0000
ROA not before: Thu 26 Oct 2023 07:53:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 152.89.172.0/24 maxlen: 24
81.92.90.0/24 maxlen: 24
2a09:35c0:102::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Oct 2023 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6a:f9:4f:ad:c1:74:9b:b9:7f:fc:1c:58:c4:0d:5a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Oct 26 07:53:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bc729fb51be1bc5a5236ad901d938a79784e34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f5:5f:10:9d:62:57:93:90:d9:fa:ed:d1:bd:
28:e2:af:bf:d2:e7:ff:54:61:23:68:c4:1b:ab:d1:
9e:e9:ca:c8:3b:6f:40:ab:65:a2:60:cb:ab:f8:db:
43:60:9a:8b:ac:f8:e8:1e:a7:75:43:df:f9:63:06:
0d:24:9d:00:be:2c:83:6e:6a:87:d1:1b:0f:de:1f:
5b:25:c0:6b:19:7a:78:37:88:d0:33:e5:40:02:29:
8a:f1:d7:3e:3c:66:65:c2:79:6f:5d:b2:27:5a:ff:
cf:9a:b9:fc:dc:8b:70:cb:51:0e:34:2a:b2:22:65:
17:cf:3b:f8:b9:a6:51:8f:e1:0c:ac:8b:25:00:69:
1c:f6:5f:1b:e5:d2:93:e1:72:ef:af:eb:85:e1:e5:
98:ec:75:26:c2:69:c4:ff:de:48:42:ef:71:02:7a:
f2:0f:c0:3a:45:75:ca:af:5e:36:ee:2d:fa:81:eb:
b2:a0:bb:69:15:67:ea:df:6b:3d:8f:56:d1:f6:46:
43:57:6a:a6:4b:17:6a:ae:07:3a:c9:26:8c:fc:09:
87:e2:53:e9:93:2a:5d:04:06:b6:6c:43:b9:ea:0f:
14:17:69:d4:c7:ca:a1:ee:1b:f9:c3:60:e1:e2:f3:
31:7a:b7:2d:62:13:81:81:a8:67:20:2e:89:87:8c:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C7:29:FB:51:BE:1B:C5:A5:23:6A:D9:01:D9:38:A7:97:84:E3:4B
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/C8cp-1G-G8WlI2rZAdk4p5eE40s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.90.0/24
152.89.172.0/24
IPv6:
2a09:35c0:102::/48
Signature Algorithm: sha256WithRSAEncryption
57:31:72:4a:bc:02:00:f0:c7:81:b0:1a:da:45:27:b1:ec:ec:
78:23:dd:89:9b:b2:1f:cd:b7:7c:ec:4f:7f:38:e0:06:d1:b0:
5f:50:96:3a:bf:02:3f:e0:45:d8:4f:41:28:2e:7f:84:ba:4f:
7d:17:d5:bf:cd:c2:f5:3c:11:92:74:d7:5f:ce:9c:7a:ff:fa:
53:8f:a0:27:9e:0b:b1:ea:2f:5b:93:74:8b:73:ca:d9:a5:28:
96:01:49:f2:95:d8:99:95:0b:83:9e:5d:22:33:43:fc:64:fd:
3e:a4:a0:bf:bf:a0:c5:49:31:49:24:7d:a3:2e:be:e3:90:8c:
1d:88:02:42:2a:23:dc:ab:46:31:df:91:a1:d5:90:73:1c:11:
8f:48:81:78:e6:d1:ed:c2:b3:b0:10:0b:0c:0c:ac:ee:7e:ab:
f8:45:2c:c2:5e:3f:10:b1:f1:9b:ae:47:2e:e1:b4:29:8b:36:
a8:a4:c6:a6:96:8d:af:df:ea:c5:74:87:b0:84:8d:e4:61:e7:
35:23:8d:7a:28:e3:ce:54:68:84:52:ed:5a:be:33:f8:96:bd:
f9:1f:4c:1f:2e:af:b7:ef:2f:9e:2a:48:ca:25:6e:a1:74:29:
07:b5:34:08:82:72:6c:13:64:09:c6:57:40:9d:83:d5:c2:2f:
cf:07:6c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:54 2024 by rpki-client on console-ams.rpki-client.org