Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/CLeEaEp9fO8KBWN5vUdGE7nXnxk.roa
File: CLeEaEp9fO8KBWN5vUdGE7nXnxk.roa (raw, json)
Hash identifier: tUBYCNdT7mpZSWhm2Z/p8geGBIm23cRG4FF+ZLhQRe8=
Subject key identifier: 08:B7:84:68:4A:7D:7C:EF:0A:05:63:79:BD:47:46:13:B9:D7:9F:19
Certificate issuer: /CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Certificate serial: 0191E4E17F8411F87CE24A6369CC99ABAAEB
Authority key identifier: 8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/CLeEaEp9fO8KBWN5vUdGE7nXnxk.roa
Signing time: Thu 12 Sep 2024 06:17:48 +0000
ROA not before: Thu 12 Sep 2024 06:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41549
IP address blocks: 195.20.64.0/19 maxlen: 19
Validation: Failed, certificate revoked on Thu 10 Oct 2024 05:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:e1:7f:84:11:f8:7c:e2:4a:63:69:cc:99:ab:aa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Validity
Not Before: Sep 12 06:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08b784684a7d7cef0a056379bd474613b9d79f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:3a:cf:af:a0:58:d2:20:04:13:26:73:e6:
3d:c8:0b:58:3b:ce:ec:a6:b4:4f:b0:0d:f4:1e:f6:
aa:de:2a:2d:63:a4:d8:ce:d5:f4:37:8a:3d:f7:97:
f2:a7:ed:7c:84:a7:14:68:9d:9a:6f:5d:91:b6:38:
6d:b0:e0:f6:35:b0:e3:f5:3f:b8:15:67:f9:7c:a3:
48:2f:53:8c:76:6a:ed:18:04:44:e9:8b:82:be:8a:
22:ca:85:59:3e:2f:d5:4b:7a:bf:63:99:e3:1f:9b:
a3:47:45:12:18:e0:4e:85:51:70:eb:e4:4d:2c:51:
c7:6b:f9:c4:d9:4d:c7:3b:ba:2c:04:7b:9f:f6:22:
08:81:e7:a9:ef:04:10:c1:11:21:59:fa:90:70:85:
d4:72:1b:3d:6c:79:45:a5:fa:85:43:53:ce:86:c5:
63:24:7d:19:bc:c3:da:3e:90:a7:df:f6:0b:bb:25:
fe:4d:46:d2:56:02:1b:dc:21:12:8b:54:ed:5c:7c:
14:fd:5d:70:2a:74:b5:8a:06:97:5c:57:3e:6b:15:
8f:53:5e:ac:db:73:27:ad:19:eb:47:82:7a:3a:e4:
ff:fa:e4:ac:c7:a7:4d:fb:68:0e:62:e4:3e:aa:dd:
79:6c:f0:c2:70:25:f4:e4:8c:2a:ad:66:20:18:ea:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B7:84:68:4A:7D:7C:EF:0A:05:63:79:BD:47:46:13:B9:D7:9F:19
X509v3 Authority Key Identifier:
keyid:8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/CLeEaEp9fO8KBWN5vUdGE7nXnxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.64.0/19
Signature Algorithm: sha256WithRSAEncryption
85:5f:bf:6a:ca:d2:3b:d1:0f:d0:72:b2:b8:7e:90:fd:63:38:
4a:ef:a7:c5:38:68:40:95:43:94:05:c2:25:33:1f:a7:9c:21:
d0:84:b5:4b:a5:b7:50:1c:55:58:34:71:e1:5c:a2:be:19:85:
ed:4c:f7:21:4f:d1:59:19:66:8f:28:d5:07:b0:81:14:4d:76:
7b:b2:2f:7e:4b:ed:e0:25:a8:36:1a:22:d1:6f:31:57:75:20:
77:15:4f:d6:f2:ee:72:d1:da:d2:42:08:9c:d1:d7:ed:60:8a:
e4:dd:81:c5:a3:a7:aa:6b:62:ad:48:c6:72:9d:e3:33:3e:1d:
70:84:ae:8f:83:f5:55:9b:11:b6:5d:b0:0f:e1:00:de:07:11:
c5:6b:20:52:33:34:a0:e8:ea:f7:86:4a:6c:75:dc:46:63:31:
cc:95:1d:43:17:6a:45:85:25:4c:89:cb:b8:6b:31:17:0e:b6:
c1:f3:89:eb:84:0f:85:5d:18:ba:e5:e9:e7:07:84:9b:3e:15:
c9:54:5b:10:bf:a5:d8:32:78:12:78:31:cd:71:7c:64:26:30:
12:c1:60:70:2e:38:3a:fd:2f:fe:a3:9d:a9:6a:4c:d5:b0:92:
63:35:a4:4e:dc:44:62:e5:5a:ab:38:ca:b3:2e:65:66:d8:dd:
68:49:68:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHk4X+EEfh84kpjacyZq6rrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNDAwMDEwMWFkMzkzY2FkZjdmYzhmZDYzZGFhZDNjNmRh
ZTEyNGYwHhcNMjQwOTEyMDYxNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGI3ODQ2ODRhN2Q3Y2VmMGEwNTYzNzliZDQ3NDYxM2I5ZDc5ZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wo6z6+gWNIgBBMmc+Y9yAtYO87s
prRPsA30Hvaq3iotY6TYztX0N4o995fyp+18hKcUaJ2ab12RtjhtsOD2NbDj9T+4
FWf5fKNIL1OMdmrtGARE6YuCvooiyoVZPi/VS3q/Y5njH5ujR0USGOBOhVFw6+RN
LFHHa/nE2U3HO7osBHuf9iIIgeep7wQQwREhWfqQcIXUchs9bHlFpfqFQ1POhsVj
JH0ZvMPaPpCn3/YLuyX+TUbSVgIb3CESi1TtXHwU/V1wKnS1igaXXFc+axWPU16s
23MnrRnrR4J6OuT/+uSsx6dN+2gOYuQ+qt15bPDCcCX05IwqrWYgGOrfJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAi3hGhKfXzvCgVjeb1HRhO5158ZMB8GA1UdIwQY
MBaAFIpAABAa05PK33/I/WParTxtrhJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWtBQUVCclRrOHJmZjhqOVk5cXRQRzJ1RWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iMjdiZDAtM2QzOS00ZDc4LWFhMmMt
MWYzY2NmYTYxYWFjLzEvQ0xlRWFFcDlmTzhLQldONXZVZEdFN25YbnhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9iMjdiZDAtM2QzOS00ZDc4LWFhMmMtMWYzY2NmYTYxYWFj
LzEvaWtBQUVCclRrOHJmZjhqOVk5cXRQRzJ1RWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwxRAMA0G
CSqGSIb3DQEBCwUAA4IBAQCFX79qytI70Q/QcrK4fpD9YzhK76fFOGhAlUOUBcIl
Mx+nnCHQhLVLpbdQHFVYNHHhXKK+GYXtTPchT9FZGWaPKNUHsIEUTXZ7si9+S+3g
Jag2GiLRbzFXdSB3FU/W8u5y0drSQgic0dftYIrk3YHFo6eqa2KtSMZyneMzPh1w
hK6Pg/VVmxG2XbAP4QDeBxHFayBSMzSg6Or3hkpsddxGYzHMlR1DF2pFhSVMicu4
azEXDrbB84nrhA+FXRi65ennB4SbPhXJVFsQv6XYMngSeDHNcXxkJjASwWBwLjg6
/S/+o52pakzVsJJjNaRO3ERi5VqrOMqzLmVm2N1oSWg5
-----END CERTIFICATE-----
Generated at Thu Oct 10 07:48:30 2024 by rpki-client on console-fra.rpki-client.org