Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/cekq-w-lbeuLr81O01acj2j53yw.roa
File: cekq-w-lbeuLr81O01acj2j53yw.roa (raw, json)
Hash identifier: 95C41DY3YHY8NQSjKBW/h/TIUhsVOzbatth4qvz0Vrw=
Subject key identifier: 71:E9:2A:FB:0F:A5:6D:EB:8B:AF:CD:4E:D3:56:9C:8F:68:F9:DF:2C
Certificate issuer: /CN=2956584b70ce847c1a9b400548b14db031bedff2
Certificate serial: 018AD63530ADC898A30967E65A0580315724
Authority key identifier: 29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/cekq-w-lbeuLr81O01acj2j53yw.roa
Signing time: Wed 27 Sep 2023 10:35:24 +0000
ROA not before: Wed 27 Sep 2023 10:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 195.24.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Dec 2023 09:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:35:30:ad:c8:98:a3:09:67:e6:5a:05:80:31:57:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2956584b70ce847c1a9b400548b14db031bedff2
Validity
Not Before: Sep 27 10:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71e92afb0fa56deb8bafcd4ed3569c8f68f9df2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4e:1a:47:4b:5f:20:a3:37:f9:20:19:cb:76:
22:2f:3b:2a:fa:0f:99:e4:ef:f2:ff:57:2f:0e:42:
ac:68:b4:59:42:76:b1:95:79:ca:6c:69:d5:42:0b:
d1:b7:32:19:97:d0:51:4d:f1:c6:8f:fb:4a:bf:a8:
02:1b:fc:66:02:ce:59:02:4f:0c:15:f7:2d:f1:aa:
b0:8e:5d:27:44:06:78:b6:21:1a:f4:60:d3:cd:9b:
72:50:23:40:5f:12:cf:c2:30:8c:2e:d0:de:25:5e:
7e:bc:8c:35:a9:9a:33:a5:ed:4f:46:5a:e3:ec:72:
d4:69:eb:ae:b0:a2:72:f4:e8:16:9b:2b:51:29:9e:
3b:a6:f3:1e:f4:15:f3:a7:78:37:6f:ff:64:db:dc:
cb:f3:da:78:2c:73:d5:04:e1:d5:35:b9:d8:34:49:
d9:96:8a:29:96:b4:eb:e8:8c:cf:3d:ef:46:e5:45:
48:40:58:3f:83:3a:87:ea:9e:a6:02:6b:e2:b5:06:
44:2c:20:9b:84:93:ca:ba:38:94:42:bb:b0:2f:61:
86:18:fc:fe:39:11:b9:a6:58:79:ba:d1:c2:96:12:
a0:d0:e4:5f:1f:4e:16:7d:1b:5e:58:75:e4:48:0a:
6e:30:fd:ce:60:ad:35:b7:20:81:2a:c8:ec:8e:85:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E9:2A:FB:0F:A5:6D:EB:8B:AF:CD:4E:D3:56:9C:8F:68:F9:DF:2C
X509v3 Authority Key Identifier:
keyid:29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/cekq-w-lbeuLr81O01acj2j53yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.232.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3b:3a:ba:94:b5:d2:f4:d8:d4:a8:f5:24:67:c0:5d:1c:82:
28:4c:93:87:19:88:cd:f0:99:1a:5a:64:99:53:5d:89:43:42:
0c:3a:09:9e:43:56:89:0e:a9:54:22:7f:cc:bf:95:e5:ee:7c:
e0:5c:62:4e:eb:9b:5c:b0:89:92:4b:c1:e3:a4:95:41:9d:ce:
98:97:3e:cc:11:e8:02:c6:21:dd:7b:86:ff:d3:ba:2d:ae:0a:
83:25:14:8b:d2:5a:27:bd:f1:d2:92:0b:dc:ca:bc:ea:b0:4c:
a6:67:45:2c:9f:09:2d:a3:87:50:24:79:9e:14:58:5e:e9:43:
a5:4c:06:32:fb:c2:4c:dc:d5:cb:34:3a:88:2d:63:53:41:7c:
89:a6:a3:0e:e1:07:b9:34:83:26:c1:61:2d:9b:62:55:e4:e2:
ac:55:1f:f3:9c:aa:81:6c:04:43:ec:e2:72:cd:f8:84:8a:d6:
5d:6a:07:d1:70:23:a4:90:98:f5:03:8f:b9:37:9c:70:45:12:
c2:82:b3:41:35:09:8f:06:22:cd:bf:78:67:41:5e:63:06:e3:
8a:e3:4b:74:02:c6:8e:58:57:0c:46:2c:a8:38:68:bb:30:b8:
1c:82:bc:77:da:6d:ce:78:9c:b3:0d:c0:48:73:f8:d2:e7:11:
4a:3c:01:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-fra.rpki-client.org