Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/Cf-xjbdt2Jy_0MkjqB8EB1vB-io.roa
File: Cf-xjbdt2Jy_0MkjqB8EB1vB-io.roa (raw, json)
Hash identifier: h0CaQ0+QNPmpHMVfqtvyNG0nADoBLyLjjuShaDinYeU=
Subject key identifier: 09:FF:B1:8D:B7:6D:D8:9C:BF:D0:C9:23:A8:1F:04:07:5B:C1:FA:2A
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 0187749499CB0F1601CBC320EC8D65410BE0
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/Cf-xjbdt2Jy_0MkjqB8EB1vB-io.roa
Signing time: Wed 12 Apr 2023 08:28:28 +0000
ROA not before: Wed 12 Apr 2023 08:28:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207088
IP address blocks: 195.210.96.0/22 maxlen: 22
195.210.104.0/22 maxlen: 22
195.210.116.0/22 maxlen: 22
195.210.120.0/22 maxlen: 22
2a0a:a200::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:94:99:cb:0f:16:01:cb:c3:20:ec:8d:65:41:0b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Apr 12 08:28:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09ffb18db76dd89cbfd0c923a81f04075bc1fa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:ac:dc:5e:0e:11:90:e3:e7:ec:5d:28:ca:
b4:af:35:6a:92:f0:72:25:c6:cd:2f:af:fb:17:13:
6d:0e:3a:ac:30:9e:2c:70:97:9e:cf:89:d1:82:1a:
88:cc:cb:6e:35:07:6b:67:2d:60:08:ca:49:ae:d2:
d8:67:e3:db:98:9a:e7:33:46:84:57:c9:e7:5a:3f:
99:3b:af:2e:7f:27:61:0c:6e:46:1f:55:92:3c:ff:
eb:84:06:23:72:46:d6:f5:15:4b:70:42:0f:14:7f:
f9:3d:8b:29:1c:30:4c:65:f5:8a:2d:e3:a3:3f:f1:
93:1a:e5:54:65:bc:b7:8b:70:be:c7:d4:60:84:58:
c4:c6:dc:67:c8:9c:31:a4:8b:b3:d0:1a:dd:52:48:
d8:b4:59:46:91:31:bc:71:19:8e:4e:6d:e0:64:78:
39:f2:14:8b:d9:9c:74:94:d9:06:19:49:97:50:24:
9b:18:a8:2f:e2:e8:d8:d6:25:9d:3c:9b:d1:f5:2a:
cf:9c:bc:f9:5d:ae:f5:b9:ec:d2:85:19:04:aa:cb:
24:c4:07:51:fd:29:4b:3c:00:7d:9b:c1:17:b8:a1:
ae:3a:15:69:51:18:6e:49:d4:63:c7:c6:15:9d:a0:
a6:2d:3d:8a:84:8c:35:f4:5c:65:c7:99:7d:a6:f6:
ac:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FF:B1:8D:B7:6D:D8:9C:BF:D0:C9:23:A8:1F:04:07:5B:C1:FA:2A
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/Cf-xjbdt2Jy_0MkjqB8EB1vB-io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.96.0/22
195.210.104.0/22
195.210.116.0-195.210.123.255
IPv6:
2a0a:a200::/29
Signature Algorithm: sha256WithRSAEncryption
99:4c:b5:11:ce:3a:b4:7e:28:16:f3:30:f2:ee:75:86:ae:9c:
73:38:1d:51:8e:77:eb:7a:dd:06:49:3b:aa:83:74:8f:36:ad:
c7:19:01:45:91:03:ba:51:5d:46:dd:73:b3:bb:75:67:31:11:
39:c8:29:83:ec:43:a6:b9:43:7a:04:96:53:44:b6:1c:67:3b:
76:ab:cb:ac:7f:4d:fd:72:d2:92:1b:f4:7f:31:be:48:4c:a7:
60:eb:22:98:71:e3:5c:db:4c:dc:13:f9:cc:44:66:b1:ce:65:
0f:f0:27:fd:d1:72:ff:bb:1f:80:06:cf:77:31:5d:7e:7e:4a:
54:67:80:32:29:cc:dd:e1:fc:bd:c7:9f:cd:91:16:54:c7:58:
dc:b3:19:b0:75:67:d4:49:61:83:85:cf:ab:10:c0:b6:17:02:
44:2f:7c:c5:28:03:2b:9a:3f:13:fe:a4:59:5a:c6:40:83:5a:
94:43:28:3f:1a:e6:76:8b:9e:79:93:e0:90:d8:7d:49:bc:ac:
73:c9:4d:9b:7e:c5:fe:7f:3e:54:c7:0f:25:11:fb:b8:9e:59:
db:ba:f3:67:43:a4:49:41:db:bd:e7:69:d3:c0:2e:de:fa:49:
36:e4:50:70:dc:90:2e:c0:99:e6:13:70:5d:19:4c:92:91:32:
ef:22:85:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:48 2024 by rpki-client on console-ams.rpki-client.org