Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6018cb-339a-416f-af4c-1244ba9eacd9/1/_CP4_qbSvVYLggft_j-MQ8lElh0.roa
File: _CP4_qbSvVYLggft_j-MQ8lElh0.roa (raw, json)
Hash identifier: cBvgRF1nfso9ZfN/QiLigumQsGP2zMQkst+sTZjy3cQ=
Subject key identifier: FC:23:F8:FE:A6:D2:BD:56:0B:82:07:ED:FE:3F:8C:43:C9:44:96:1D
Certificate issuer: /CN=eeb526fe681118956441227133b320f5efbdfd6b
Certificate serial: 0185708C95317C283F29C1A053097C45E4B3
Authority key identifier: EE:B5:26:FE:68:11:18:95:64:41:22:71:33:B3:20:F5:EF:BD:FD:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rUm_mgRGJVkQSJxM7Mg9e-9_Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6018cb-339a-416f-af4c-1244ba9eacd9/1/_CP4_qbSvVYLggft_j-MQ8lElh0.roa
Signing time: Mon 02 Jan 2023 03:35:39 +0000
ROA not before: Mon 02 Jan 2023 03:35:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31669
IP address blocks: 195.28.164.0/23 maxlen: 24
89.106.240.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:95:31:7c:28:3f:29:c1:a0:53:09:7c:45:e4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb526fe681118956441227133b320f5efbdfd6b
Validity
Not Before: Jan 2 03:35:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc23f8fea6d2bd560b8207edfe3f8c43c944961d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:f3:da:b2:ef:e4:b3:21:46:f8:82:00:32:
ff:e7:9a:4b:65:8f:d8:bc:7d:f7:bd:da:81:36:4e:
e3:ee:5c:8c:1b:43:39:f2:b9:72:c8:74:d8:53:31:
ba:04:3b:a7:06:05:84:b7:1a:81:43:c6:e8:85:eb:
c7:22:1c:d1:4a:2c:cf:dc:7a:b5:55:1f:34:10:71:
e0:b6:d3:81:2a:3b:fd:b5:b8:7c:b1:82:11:97:e1:
b2:33:69:69:8a:a7:92:a1:85:5f:f9:0d:a7:cf:fc:
0f:07:5e:7a:0f:20:34:d6:4f:8c:16:19:36:a2:30:
ef:2d:e7:5b:7a:a4:63:7b:64:3a:17:dc:63:e5:e1:
e8:54:15:0b:99:b6:44:a3:32:96:87:b1:de:bd:61:
25:84:26:41:e9:f9:b2:6a:dc:5c:29:7a:ce:ae:96:
8b:89:1f:21:7e:3f:4d:fe:e5:13:02:15:d0:0b:2b:
f5:70:2a:1a:6b:11:fa:3b:32:ea:b3:f5:58:46:e5:
de:a8:b9:de:c1:55:bf:3e:08:17:e1:db:01:85:84:
fc:be:8f:99:4b:11:9a:41:24:cf:6a:9f:ca:5f:20:
d4:69:f9:fa:33:6c:97:06:63:c6:b5:f8:56:19:55:
b8:4a:77:04:ea:c4:d3:fb:54:65:f8:68:94:1f:d1:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:23:F8:FE:A6:D2:BD:56:0B:82:07:ED:FE:3F:8C:43:C9:44:96:1D
X509v3 Authority Key Identifier:
keyid:EE:B5:26:FE:68:11:18:95:64:41:22:71:33:B3:20:F5:EF:BD:FD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rUm_mgRGJVkQSJxM7Mg9e-9_Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6018cb-339a-416f-af4c-1244ba9eacd9/1/_CP4_qbSvVYLggft_j-MQ8lElh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6018cb-339a-416f-af4c-1244ba9eacd9/1/7rUm_mgRGJVkQSJxM7Mg9e-9_Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.240.0/21
195.28.164.0/23
Signature Algorithm: sha256WithRSAEncryption
27:c3:b5:23:eb:be:06:b1:e1:39:ae:aa:d6:54:bc:85:6b:47:
da:3e:be:f4:02:61:fe:a0:56:02:85:5c:64:57:e3:19:bd:01:
93:24:44:3a:7b:97:31:72:74:61:51:22:dd:15:7b:b4:13:01:
53:0e:c7:1b:8c:48:28:cb:b6:af:96:3c:e9:21:b9:5a:75:d3:
dd:a5:49:14:76:6c:8b:c2:59:65:5b:4d:b0:34:91:46:d1:c1:
3c:af:9d:2c:02:aa:e1:7d:bb:6f:d5:a5:2e:a5:93:ca:21:ec:
90:5e:4f:3a:11:82:22:3c:cc:c6:1e:ec:ce:95:a5:a0:c6:72:
4f:4c:07:b4:a8:b2:54:f8:df:fe:f9:27:61:af:26:40:81:a5:
70:fb:5f:05:0e:75:3e:2d:3d:ad:1c:3d:da:3c:05:27:57:83:
c6:f3:15:0e:a4:80:fe:47:6d:fa:38:e2:ae:51:58:04:d2:ad:
a3:61:e5:80:16:76:bd:51:c6:99:b6:ff:f1:46:e8:7e:81:39:
37:ee:9c:b3:79:0c:1b:59:dd:00:dd:28:a0:90:01:4a:c7:4a:
b7:09:88:c3:8a:0d:3b:7d:7c:cb:a6:b6:b8:7f:80:26:f8:b4:
b7:66:0a:cb:f9:10:f0:85:ea:fd:9a:75:f7:ba:ac:55:18:79:
ad:69:60:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:55 2024 by rpki-client on console-ams.rpki-client.org