Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/CfEWcn3-czq3YTQPAYKpdRG55zQ.roa
File: CfEWcn3-czq3YTQPAYKpdRG55zQ.roa (raw, json)
Hash identifier: RNU3sIHCmWKhjxX+Q8aeVHJ2GsT00F8A7jD6htvuULU=
Subject key identifier: 09:F1:16:72:7D:FE:73:3A:B7:61:34:0F:01:82:A9:75:11:B9:E7:34
Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial: 018CC34942092C59FC805DAF7A421E402AAA
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/CfEWcn3-czq3YTQPAYKpdRG55zQ.roa
Signing time: Mon 01 Jan 2024 04:30:07 +0000
ROA not before: Mon 01 Jan 2024 04:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58265
IP address blocks: 193.169.184.0/23 maxlen: 23
185.200.224.0/22 maxlen: 22
193.138.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 20 May 2024 09:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:42:09:2c:59:fc:80:5d:af:7a:42:1e:40:2a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Validity
Not Before: Jan 1 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09f116727dfe733ab761340f0182a97511b9e734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:06:d6:59:7c:27:93:04:b1:d4:e6:36:52:
ac:1b:1a:a6:37:ad:84:0b:e4:e4:8f:41:5c:ea:7b:
35:83:9d:fd:06:91:ce:c9:9f:85:f7:87:b9:b0:53:
8f:ce:97:c2:78:59:23:8d:ff:72:77:6e:0e:b2:be:
f6:23:30:c0:d4:9e:2f:b6:cb:46:e4:dd:7a:2e:37:
dd:ce:cd:05:c4:26:e7:d9:f2:37:c3:97:f8:60:65:
0a:24:d7:bc:c4:27:8b:40:44:a7:36:39:a2:21:a2:
4d:56:90:43:f4:ec:75:34:ef:7e:b4:da:4b:f1:39:
23:be:c5:de:3f:f6:71:11:e4:59:e1:06:33:fd:62:
e6:3e:d1:3c:34:b2:1e:e7:a2:20:84:b4:24:14:0a:
9e:5f:99:d7:19:09:9a:a0:21:80:fc:2b:46:0b:eb:
f8:69:89:8a:b8:10:8c:a2:8c:52:eb:2f:c6:1c:8b:
b6:62:60:a1:03:76:63:0a:69:94:21:16:2e:bf:8d:
42:70:fe:6c:bf:0d:03:d2:75:97:40:a5:8d:8f:72:
75:ef:68:62:9c:48:df:c4:36:7a:8a:d9:f5:46:30:
e1:b4:7b:f3:b2:9b:ec:71:b1:3b:c1:8e:5a:cc:18:
69:0a:2b:12:93:06:99:6e:86:e9:fe:c4:fc:ea:f7:
4f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F1:16:72:7D:FE:73:3A:B7:61:34:0F:01:82:A9:75:11:B9:E7:34
X509v3 Authority Key Identifier:
keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/CfEWcn3-czq3YTQPAYKpdRG55zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.224.0/22
193.138.156.0/22
193.169.184.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:cc:8b:56:ce:3b:44:7e:30:61:c6:c7:65:13:11:6d:d1:3a:
9a:b4:23:cb:8e:7e:2b:75:e9:c0:66:c2:2c:62:3a:d5:20:bf:
d1:a9:7b:c3:cc:12:39:4b:02:26:ad:55:70:14:43:4b:70:46:
27:dd:0e:89:24:57:3c:a7:75:75:83:34:2d:34:3d:15:7e:a3:
fa:9f:08:41:17:d3:7f:a6:40:23:62:63:e4:11:d1:5d:ee:bd:
d6:d3:4a:13:16:88:8b:2f:8e:df:f8:d9:6d:1a:56:3b:f4:91:
9b:df:13:aa:66:e7:9a:d2:e0:eb:37:ce:1f:ac:9b:5f:ea:3b:
be:8d:08:7c:0b:cd:ab:be:80:0b:7d:26:54:90:fa:40:f1:ca:
0e:52:16:d9:ed:be:8c:58:4e:bf:3c:2a:ce:17:dd:fb:96:d7:
63:3d:37:08:5b:0b:20:20:6e:a2:99:a3:50:8a:65:5f:53:c0:
d4:eb:67:bb:ce:69:96:68:b9:2a:05:54:6f:36:9b:57:d9:7b:
c1:90:02:e4:d1:97:76:54:ff:de:5d:eb:e1:c1:21:ed:d9:49:
68:ee:34:33:2b:ce:71:45:f1:fa:57:93:0b:f2:36:97:86:7d:
95:5b:95:20:6a:1f:55:e5:08:4a:7a:d6:15:91:ed:56:6f:6f:
82:f3:a3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:19 2024 by rpki-client on console-fra.rpki-client.org