Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/cf8EcHoX97-WQKVuB7tsiDjnU1U.roa
File: cf8EcHoX97-WQKVuB7tsiDjnU1U.roa (raw, json)
Hash identifier: h5XrrU25CeRlym8ZWEgcOO6ulZC+RIP8niLQoqf5qiM=
Subject key identifier: 71:FF:04:70:7A:17:F7:BF:96:40:A5:6E:07:BB:6C:88:38:E7:53:55
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018CC794167A8431D4C27FDCCE8CC1A2C63C
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/cf8EcHoX97-WQKVuB7tsiDjnU1U.roa
Signing time: Tue 02 Jan 2024 00:30:20 +0000
ROA not before: Tue 02 Jan 2024 00:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30738
IP address blocks: 195.211.53.0/24 maxlen: 24
109.248.41.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
2001:1468:8000::/36 maxlen: 36
2001:1468::/32 maxlen: 33
Validation: Failed, certificate revoked on Thu 01 Feb 2024 17:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:16:7a:84:31:d4:c2:7f:dc:ce:8c:c1:a2:c6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 00:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71ff04707a17f7bf9640a56e07bb6c8838e75355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:14:d3:33:26:92:49:bc:5c:2c:44:2e:b3:
37:f4:37:a3:29:8d:21:51:b5:e1:8a:03:6a:5e:ff:
88:07:60:82:7d:9c:16:ff:d9:f2:7e:ee:3b:df:c4:
b2:20:fc:1e:9b:ae:08:35:eb:9b:60:4e:f9:97:9e:
19:73:8c:20:cb:6a:0f:fe:69:2f:fd:b8:4d:c7:2f:
ea:33:ef:da:6a:ab:df:85:ea:d8:f7:97:6e:89:3c:
23:f0:96:4f:49:4e:8b:1e:28:91:6c:17:50:63:28:
2d:95:49:82:9e:1c:cc:df:69:60:b8:d4:19:61:2e:
29:54:24:34:31:a4:68:e7:39:48:27:75:64:ea:68:
41:83:a9:97:2c:b7:6c:85:c3:da:0a:8a:1a:7a:cd:
ae:8a:13:28:80:99:26:5b:6d:6c:a1:1f:1a:e8:09:
ff:90:87:23:16:8a:7f:a7:01:c8:98:1f:d3:a0:e5:
25:89:ef:72:11:a1:2a:16:b0:23:e0:86:3b:c8:d0:
fc:47:e3:0b:7e:bd:55:3c:db:6d:5e:86:44:35:da:
9a:bb:f4:c7:ef:3c:38:d8:b6:b3:d3:59:e8:aa:18:
47:b0:83:47:a3:fd:6c:a8:f7:e5:01:fc:2d:c4:35:
fb:84:7c:98:3a:96:a1:09:41:e2:a0:fa:4c:e7:5c:
b4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FF:04:70:7A:17:F7:BF:96:40:A5:6E:07:BB:6C:88:38:E7:53:55
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/cf8EcHoX97-WQKVuB7tsiDjnU1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.41.0/24
188.130.182.0/24
195.211.53.0/24
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
73:81:84:6e:a2:b5:50:19:89:fa:fb:3a:7a:1e:92:e0:82:15:
28:73:34:99:ce:af:b2:46:45:b7:de:2c:3b:08:02:3c:8d:e9:
da:c0:68:18:e3:12:dc:b9:53:d3:99:6d:72:33:ce:64:73:8e:
ab:99:f5:28:d0:9f:a8:f2:08:b4:18:c8:22:03:44:9a:52:6d:
1e:07:e9:5e:9a:9e:aa:de:db:3a:bb:bd:26:61:ba:74:a0:89:
63:92:c3:68:cc:c5:76:04:54:2b:24:ff:a6:55:e3:d1:0d:e8:
a4:5a:2e:ab:2a:f6:9f:68:38:2a:d2:9a:2d:41:18:1e:71:37:
f1:12:2f:bb:76:fc:8e:f6:4a:9a:f7:d9:ce:78:a9:8c:9e:c3:
de:56:a0:3c:fa:85:2c:48:74:57:6e:76:09:b2:49:c2:34:e7:
f1:41:8f:c1:55:ca:67:f3:d6:cf:91:81:f4:9e:03:53:ce:9d:
80:2e:76:58:8d:ea:7e:13:04:74:29:6b:fe:6b:9b:86:3b:e4:
96:32:41:d5:62:ac:e8:78:58:d6:bc:fa:82:62:d2:74:1c:7e:
d0:86:be:9f:72:b1:8e:d8:fa:d0:b1:e2:d5:3c:f9:fc:ee:e7:
a5:66:41:df:ab:b2:aa:a2:72:77:4a:f1:d5:5a:90:69:41:ed:
9a:29:fc:54
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzHlBZ6hDHUwn/czozBosY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjQwMTAyMDAzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWZmMDQ3MDdhMTdmN2JmOTY0MGE1NmUwN2JiNmM4ODM4ZTc1MzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl54U0zMmkkm8XCxELrM39DejKY0h
UbXhigNqXv+IB2CCfZwW/9nyfu4738SyIPwem64INeubYE75l54Zc4wgy2oP/mkv
/bhNxy/qM+/aaqvfherY95duiTwj8JZPSU6LHiiRbBdQYygtlUmCnhzM32lguNQZ
YS4pVCQ0MaRo5zlIJ3Vk6mhBg6mXLLdshcPaCooaes2uihMogJkmW21soR8a6An/
kIcjFop/pwHImB/ToOUlie9yEaEqFrAj4IY7yND8R+MLfr1VPNttXoZENdqau/TH
7zw42Laz01noqhhHsINHo/1sqPflAfwtxDX7hHyYOpahCUHioPpM51y0gQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHH/BHB6F/e/lkClbge7bIg451NVMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvY2Y4RWNIb1g5Ny1XUUtWdUI3dHNpRGpuVTFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAbfgpAwQA
vIK2AwQAw9M1MA0EAgACMAcDBQAgARRoMA0GCSqGSIb3DQEBCwUAA4IBAQBzgYRu
orVQGYn6+zp6HpLgghUoczSZzq+yRkW33iw7CAI8jenawGgY4xLcuVPTmW1yM85k
c46rmfUo0J+o8gi0GMgiA0SaUm0eB+lemp6q3ts6u70mYbp0oIljksNozMV2BFQr
JP+mVePRDeikWi6rKvafaDgq0potQRgecTfxEi+7dvyO9kqa99nOeKmMnsPeVqA8
+oUsSHRXbnYJsknCNOfxQY/BVcpn89bPkYH0ngNTzp2ALnZYjep+EwR0KWv+a5uG
O+SWMkHVYqzoeFjWvPqCYtJ0HH7Qhr6fcrGO2PrQseLVPPn87uelZkHfq7KqonJ3
SvHVWpBpQe2aKfxU
-----END CERTIFICATE-----
Generated at Thu Feb 1 21:43:20 2024 by rpki-client on console-fra.rpki-client.org