Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/CfpZJx6_P1CHTKGYrckY9D5zHTk.roa
File: CfpZJx6_P1CHTKGYrckY9D5zHTk.roa (raw, json)
Hash identifier: hF8iXNpABpVQY1SJh2d0LHkidNlKH2YUPvjEIipw0nE=
Subject key identifier: 09:FA:59:27:1E:BF:3F:50:87:4C:A1:98:AD:C9:18:F4:3E:73:1D:39
Certificate issuer: /CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d
Certificate serial: 01897904372F7034D1ACD76AE4B7FBFF87A7
Authority key identifier: 93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/CfpZJx6_P1CHTKGYrckY9D5zHTk.roa
Signing time: Fri 21 Jul 2023 15:14:26 +0000
ROA not before: Fri 21 Jul 2023 15:14:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51342
IP address blocks: 195.128.166.0/23 maxlen: 24
176.124.96.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:79:04:37:2f:70:34:d1:ac:d7:6a:e4:b7:fb:ff:87:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d
Validity
Not Before: Jul 21 15:14:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09fa59271ebf3f50874ca198adc918f43e731d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:e2:85:c0:4c:d9:4a:2c:e0:6e:e8:0f:d9:37:
52:50:eb:8e:83:37:cd:c9:9f:70:a2:19:c2:54:43:
99:06:3a:1c:fe:9f:eb:1c:65:56:55:1a:95:9a:6c:
52:d3:b0:ca:6b:3c:d2:ed:70:67:1b:df:73:86:1c:
4a:68:ff:a0:6a:9c:21:df:e0:f5:5b:f6:b0:0a:4e:
4b:5e:36:dd:ef:fe:cb:f3:ba:16:f7:48:0d:62:c9:
16:89:c2:e4:b8:36:04:e7:07:93:1c:aa:49:0b:5f:
12:65:55:da:c9:11:84:c7:aa:5b:3d:f7:56:59:63:
65:d2:e2:4f:dc:53:d3:98:7c:77:93:c4:8c:57:d0:
ef:72:fc:c9:fc:dc:bc:bd:48:a8:49:e7:51:7b:17:
19:82:36:48:5e:4c:77:58:32:dc:ca:86:41:ae:5c:
ce:11:71:c3:fb:1f:ff:f4:e7:78:0a:f0:e4:ef:2b:
8a:b3:00:51:d1:f6:9b:b2:af:b9:2d:7e:d4:d9:4a:
91:be:4e:2c:27:fa:37:77:9d:48:c9:80:fc:1f:48:
36:85:7b:a2:81:40:cc:02:68:ec:21:ee:d0:05:b8:
39:d1:f9:e2:6d:15:64:91:18:81:de:90:c4:ef:20:
de:c8:af:59:3b:2e:79:bd:27:7b:d6:15:6e:7c:36:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FA:59:27:1E:BF:3F:50:87:4C:A1:98:AD:C9:18:F4:3E:73:1D:39
X509v3 Authority Key Identifier:
keyid:93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/CfpZJx6_P1CHTKGYrckY9D5zHTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.96.0/21
195.128.166.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:d7:32:2a:64:2d:ba:ba:8e:c4:ab:34:43:94:ae:99:68:10:
2a:e1:12:1c:14:7e:35:0b:b1:ea:99:b8:cf:4e:6d:b3:1f:14:
2b:5b:f9:fe:e2:f1:4e:71:93:57:a6:56:25:e0:d3:3a:0c:4c:
2f:a9:e9:61:9b:cb:62:b7:a1:a4:5f:03:a1:6a:16:4e:e0:71:
1c:06:04:89:94:2a:60:75:35:7b:2f:1a:af:52:34:eb:eb:0b:
2c:a7:36:f8:b8:35:49:e0:ac:a5:52:a2:a6:2a:55:36:89:d7:
ab:34:3b:78:f1:3a:d3:63:ac:91:fa:c1:ec:d2:62:55:a7:f2:
9c:31:1c:ea:9d:7d:62:e2:a7:ec:cf:93:94:21:92:1f:9b:b2:
6b:fd:e0:23:85:ac:29:47:33:70:63:1d:72:a3:8d:bf:f7:92:
96:9f:00:5c:fc:8d:6a:b9:fe:6d:5d:35:09:dc:be:c1:91:49:
6e:6b:f8:d6:08:18:af:89:90:f2:88:04:b6:ac:31:ac:c6:83:
54:9c:7a:12:71:bc:57:aa:b6:78:a3:c6:9a:8a:31:f2:55:03:
d5:0b:52:2d:22:44:57:e8:c1:e2:dd:8d:d0:9d:df:ae:24:0e:
96:8a:0d:f2:be:50:f9:bd:fc:60:82:16:87:3d:d7:02:4e:5a:
43:a9:f9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:53 2024 by rpki-client on console-fra.rpki-client.org