Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/CNN2TS_BVyTyUtaZYtKVUtdeZx0.roa
File: CNN2TS_BVyTyUtaZYtKVUtdeZx0.roa (raw, json)
Hash identifier: vgi+vpCIokklJDqULVfRZedWY/fkGUcjVB0ll/NE3Dw=
Subject key identifier: 08:D3:76:4D:2F:C1:57:24:F2:52:D6:99:62:D2:95:52:D7:5E:67:1D
Certificate issuer: /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Certificate serial: 018AFF02F35D7DBCDDB843D8F627A58618D3
Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/CNN2TS_BVyTyUtaZYtKVUtdeZx0.roa
Signing time: Thu 05 Oct 2023 08:44:57 +0000
ROA not before: Thu 05 Oct 2023 08:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48650
IP address blocks: 195.8.40.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:02:f3:5d:7d:bc:dd:b8:43:d8:f6:27:a5:86:18:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Validity
Not Before: Oct 5 08:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08d3764d2fc15724f252d69962d29552d75e671d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:89:85:d2:41:da:7f:ae:96:31:62:a2:67:
2b:1c:e5:ba:8a:2b:73:fd:8b:25:cf:66:a2:c7:b4:
3c:b6:12:c0:44:ec:88:39:e0:fb:fa:0f:8e:d9:6e:
ac:7a:8c:1f:90:b8:c6:05:46:f9:45:5b:9a:bd:da:
eb:79:4e:00:36:a4:99:c3:71:6e:05:de:e2:e0:cc:
26:e5:33:af:6a:81:54:61:de:82:d2:61:f5:4e:f2:
c0:4e:80:b0:03:4d:62:4a:d5:0c:49:12:ad:e4:5c:
ff:d1:eb:c1:d5:00:e3:a3:38:c0:f2:81:29:8c:2c:
f4:c2:3f:da:e7:84:3d:99:aa:95:6a:19:19:f3:5e:
a3:49:23:c9:1e:3c:d9:5f:ab:2a:cb:66:fc:bf:54:
04:ee:1b:22:bc:c9:3c:06:70:1a:40:1a:8b:2b:7b:
7a:3f:c4:95:5a:1f:25:1a:3a:b8:e6:28:7d:a5:5d:
05:4f:88:e1:76:85:7f:58:27:ef:97:6d:12:f1:0b:
e0:21:0c:df:c6:ed:b3:4b:f2:57:50:12:b9:95:97:
87:c9:d1:a9:cd:66:8b:c5:1a:a1:c1:db:d3:bb:54:
89:46:a5:f4:ee:40:3c:c8:8c:0f:ab:e7:d7:92:83:
f4:6a:91:ea:d7:e0:94:6f:af:f5:96:15:4e:20:eb:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D3:76:4D:2F:C1:57:24:F2:52:D6:99:62:D2:95:52:D7:5E:67:1D
X509v3 Authority Key Identifier:
keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/CNN2TS_BVyTyUtaZYtKVUtdeZx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.40.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:91:c3:d3:35:ac:eb:12:82:f3:3f:7e:41:57:83:59:c2:9c:
da:52:bc:f0:07:e2:94:45:53:20:cc:c0:95:71:4c:10:73:cc:
c0:e6:a2:56:6c:57:b4:84:f1:67:32:9b:4a:2b:42:3c:fb:ba:
6d:b1:91:81:1e:14:f3:66:f4:42:86:c5:2f:28:4f:e2:e8:47:
23:c6:fd:ed:ad:cb:0b:2c:8a:9a:8c:72:2d:fe:00:b0:11:15:
22:6e:80:98:2f:ee:5b:14:3d:72:6f:6b:94:c4:52:b7:1f:32:
c8:00:20:3d:30:c2:11:90:99:1f:aa:7a:af:6d:e5:34:94:a8:
6a:dc:35:d3:ee:c7:3a:e7:0b:4b:f7:ea:81:ea:9c:20:9a:4b:
e9:5a:82:72:2e:f0:61:be:d7:4a:79:7c:37:1d:55:91:c2:93:
0a:0c:f2:0b:31:ff:ff:98:3c:70:e6:90:ca:53:dd:09:d6:85:
cd:fd:03:99:f9:1c:ec:0d:b2:e1:6d:0d:28:ef:d3:25:cf:2c:
c9:3c:6e:1b:fc:0c:96:a1:83:d8:c2:20:6e:18:de:ca:19:d2:
09:b6:13:87:02:56:68:88:67:e7:f6:e0:38:70:58:8c:26:64:
9d:46:3e:6b:c4:b5:5c:38:74:5d:cd:98:6a:fd:b7:3b:33:77:
8b:52:65:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:36 2024 by rpki-client on console-fra.rpki-client.org