Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/CaupW57K2VhS2KubYKJuEEKd0rM.roa
File: CaupW57K2VhS2KubYKJuEEKd0rM.roa (raw, json)
Hash identifier: QU8+Id+MpbEqz/S6gXTvJVJk47+rkfpLFb+lExJIVe8=
Subject key identifier: 09:AB:A9:5B:9E:CA:D9:58:52:D8:AB:9B:60:A2:6E:10:42:9D:D2:B3
Certificate issuer: /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial: 018CC4937768E1583D0EC5A1A73FA414D32D
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/CaupW57K2VhS2KubYKJuEEKd0rM.roa
Signing time: Mon 01 Jan 2024 10:30:47 +0000
ROA not before: Mon 01 Jan 2024 10:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59890
IP address blocks: 147.78.248.0/22 maxlen: 22
194.208.176.0/21 maxlen: 21
185.67.172.0/22 maxlen: 22
185.251.200.0/22 maxlen: 22
194.208.128.0/19 maxlen: 19
2a05:1140::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:77:68:e1:58:3d:0e:c5:a1:a7:3f:a4:14:d3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09aba95b9ecad95852d8ab9b60a26e10429dd2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:52:37:f6:af:d0:7c:03:a0:44:e5:ce:d3:7e:
74:16:84:2c:cf:02:26:3c:45:33:87:5b:cf:ae:3f:
fa:91:9d:90:f8:fc:65:1a:55:1f:98:a6:aa:66:ad:
84:d6:4d:1a:92:ab:cc:ee:2c:0b:44:95:97:ea:e1:
93:e1:4f:ef:83:4b:21:f1:a1:cf:cd:c1:9e:0b:f6:
ba:b7:26:9b:24:2d:05:d7:fb:8c:17:b3:8a:77:55:
68:24:f9:7b:ba:39:11:ab:c9:0b:0f:69:fd:56:ba:
2f:e0:53:ca:86:24:35:60:d3:32:1e:64:fd:1a:f8:
bf:7c:9d:8b:ab:41:8b:25:95:00:de:90:58:94:0f:
a5:1c:33:87:76:a2:7c:9c:12:86:46:16:bf:9b:a3:
32:e3:11:47:27:22:d0:d9:1b:c0:4a:1f:bb:43:89:
67:0f:71:8c:ad:c5:92:7a:31:44:9f:a6:e7:0a:8c:
a0:54:4b:d4:9a:f6:15:67:a3:58:4e:90:51:da:cb:
f6:b6:ec:dd:2e:36:6a:33:0c:d1:25:43:19:42:b6:
29:30:67:dc:09:d8:25:53:d5:5b:9b:dc:39:30:e2:
17:8e:3a:71:ad:e0:19:a5:6d:8a:3a:0b:c9:22:88:
67:85:fa:c5:10:4d:ba:bb:be:e6:04:b8:77:68:62:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AB:A9:5B:9E:CA:D9:58:52:D8:AB:9B:60:A2:6E:10:42:9D:D2:B3
X509v3 Authority Key Identifier:
keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/CaupW57K2VhS2KubYKJuEEKd0rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.248.0/22
185.67.172.0/22
185.251.200.0/22
194.208.128.0/19
194.208.176.0/21
IPv6:
2a05:1140::/29
Signature Algorithm: sha256WithRSAEncryption
43:29:bc:65:27:7f:72:3e:64:8c:72:bd:f4:88:ec:35:6c:89:
e8:6a:68:59:32:cd:91:63:5e:a6:56:3a:8b:a6:23:05:fa:80:
6a:fc:f0:87:05:e5:1b:4c:2b:67:1d:2d:50:e4:57:0f:99:3b:
66:53:df:d0:04:b9:d3:5c:16:ca:39:18:1d:9c:fd:99:3e:07:
09:62:3c:a7:e8:c1:92:a7:03:30:50:a8:0b:46:98:5d:05:71:
eb:90:38:57:c0:44:a2:5f:ec:f9:8e:30:84:f9:86:cd:28:2d:
62:15:e1:78:63:97:67:6d:fc:eb:ca:30:c1:b6:ba:a9:e5:ea:
2e:52:7a:ba:aa:0c:4a:38:85:c8:5c:72:c1:5b:bb:ab:c7:52:
fd:a8:31:cb:84:70:85:64:0a:84:55:ed:d5:c2:f0:6a:8c:f4:
62:ee:ed:61:ee:a6:c9:0e:41:99:44:b3:70:5c:cc:be:41:d2:
0e:11:a6:b2:ee:44:61:23:6c:f6:c5:25:94:08:69:13:c6:94:
5d:4d:43:7a:ea:7d:35:38:f7:b9:a6:81:b7:e3:df:d2:6d:38:
70:78:70:4b:49:77:ee:88:6c:96:42:c5:e6:a5:c6:09:1e:9e:
74:c8:30:a8:20:77:46:a6:42:ec:24:47:96:d4:db:a2:cc:dd:
56:ae:3d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:45 2025 by rpki-client