Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/CPB-Wu3vUt6Nst7hMkNk9i25XYA.roa
File: CPB-Wu3vUt6Nst7hMkNk9i25XYA.roa (raw, json)
Hash identifier: Ea7VNRaXpxckLfMKoj5KeaNbbqzNR7ZDb8Dm1V4RCJE=
Subject key identifier: 08:F0:7E:5A:ED:EF:52:DE:8D:B2:DE:E1:32:43:64:F6:2D:B9:5D:80
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 01856EC20DDA7B77EE4F105D294F3EB41446
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/CPB-Wu3vUt6Nst7hMkNk9i25XYA.roa
Signing time: Sun 01 Jan 2023 19:14:49 +0000
ROA not before: Sun 01 Jan 2023 19:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199976
IP address blocks: 185.136.29.0/24 maxlen: 24
185.136.28.0/24 maxlen: 24
185.136.31.0/24 maxlen: 24
185.136.30.0/24 maxlen: 24
5.102.130.0/24 maxlen: 24
5.102.129.0/24 maxlen: 24
5.102.132.0/24 maxlen: 24
5.102.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:0d:da:7b:77:ee:4f:10:5d:29:4f:3e:b4:14:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Jan 1 19:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08f07e5aedef52de8db2dee1324364f62db95d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:ee:bf:8e:37:b1:70:0c:1b:3e:66:18:dc:
db:11:b7:3a:86:32:af:4a:77:87:fe:f1:d0:c3:04:
f8:fa:64:9d:5f:37:22:14:1e:8c:7a:6b:37:2f:ec:
47:b6:c3:5c:82:75:f0:03:f7:2d:5e:06:0d:cd:e6:
bc:6b:7a:28:4d:9c:60:24:e5:57:48:ce:25:af:35:
c7:cd:59:4d:71:81:0a:61:e3:00:6e:22:c7:27:26:
51:38:48:bf:f9:49:f8:d5:76:cc:c2:70:51:16:98:
89:d1:51:c1:16:27:16:f0:e5:eb:76:48:84:c3:10:
62:a5:fa:84:1d:53:f9:05:0b:fe:16:c1:a7:99:5f:
49:17:cc:98:c0:ee:ad:1b:04:26:bf:fe:33:8e:d6:
21:ea:0c:b4:43:ee:4d:5f:3a:06:6e:ae:2a:a0:30:
77:7d:5a:01:80:69:6f:c2:c3:45:49:1d:bc:0b:8f:
cc:22:88:34:3f:cc:da:50:6b:d9:0d:f8:75:ca:fe:
94:58:02:ea:6e:4d:c5:08:78:9f:72:49:8e:d0:e7:
04:8e:f4:a4:9c:9f:05:13:c7:0c:80:b3:1c:d4:b8:
9e:b1:7c:f1:32:7e:26:ad:1a:df:0e:6d:71:34:7e:
e3:4d:ad:f0:e4:2b:a7:1d:25:2e:ce:d5:44:2b:6f:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F0:7E:5A:ED:EF:52:DE:8D:B2:DE:E1:32:43:64:F6:2D:B9:5D:80
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/CPB-Wu3vUt6Nst7hMkNk9i25XYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.128.0-5.102.130.255
5.102.132.0/24
185.136.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:3d:c4:1d:a9:88:85:3a:13:a3:62:24:a7:4c:93:54:b5:cf:
dd:49:0a:b2:5b:43:38:15:0e:3e:78:8d:c2:d4:a4:6f:2b:26:
55:b5:33:59:dc:d6:72:fa:6c:9f:e1:c7:5a:1d:91:86:d9:d0:
de:8e:e0:f2:fc:07:b7:c8:b8:7b:95:a6:ab:bd:44:b3:ad:95:
c9:c1:51:9c:38:75:56:a1:2b:2d:7d:01:44:f2:e3:f9:d4:41:
b6:a3:b7:5c:a7:0a:5d:45:9c:25:92:df:20:aa:dc:89:7d:52:
30:73:7c:72:c2:ea:fa:f2:dd:a8:b2:06:37:76:dd:08:09:50:
e0:9f:16:45:97:c3:e6:de:9a:31:dd:dd:4c:14:92:80:f1:18:
b6:fc:2b:9d:01:3e:c5:e8:a2:21:e6:a1:0c:e7:33:13:be:11:
ee:ba:b4:68:7c:a4:1c:c2:4d:2a:3e:4e:30:06:19:33:96:78:
fa:71:85:d3:c6:78:17:be:11:77:0b:42:42:01:d9:29:e0:da:
b1:4b:b9:0c:1e:75:e0:eb:96:07:71:61:52:a1:d6:0b:1f:e6:
8a:5f:9d:9b:0f:c6:0f:c8:45:1e:9c:a9:1e:d2:86:e4:b5:fa:
51:c4:f8:de:a2:63:ad:82:b9:8d:60:f0:42:56:24:2f:b6:6d:
92:4e:11:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:19 2024 by rpki-client on console-ams.rpki-client.org