Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/cP_e6dHUYNsxjS-ufslnamPSMOY.roa
File: cP_e6dHUYNsxjS-ufslnamPSMOY.roa (raw, json)
Hash identifier: 2Lgc+5dXLD7F/EkErtygyGu949rjbQzKKA2OGs2IW0g=
Subject key identifier: 70:FF:DE:E9:D1:D4:60:DB:31:8D:2F:AE:7E:C9:67:6A:63:D2:30:E6
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01919E2C348B3C962DC3711EE83B922BBC92
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/cP_e6dHUYNsxjS-ufslnamPSMOY.roa
Signing time: Thu 29 Aug 2024 12:46:22 +0000
ROA not before: Thu 29 Aug 2024 12:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209492
IP address blocks: 195.216.176.0/23 maxlen: 23
213.182.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 13:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:2c:34:8b:3c:96:2d:c3:71:1e:e8:3b:92:2b:bc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 29 12:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70ffdee9d1d460db318d2fae7ec9676a63d230e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:59:ee:89:88:d8:e2:75:e5:76:67:b7:27:
97:40:22:4a:bc:c8:19:9a:17:f5:5b:3a:bc:34:d0:
d0:4b:7e:cc:b3:9e:c6:c1:d3:93:cf:fb:2e:bc:e5:
db:53:38:63:49:95:3f:eb:cb:02:55:22:12:6c:42:
30:bd:b5:d1:d5:31:26:b3:47:7d:6f:44:e9:68:1d:
b0:54:f4:63:59:e0:df:0c:ef:25:42:20:cd:a4:11:
42:f7:d6:22:21:39:fe:bc:a5:05:a7:75:33:91:ea:
fb:a3:83:9d:4e:16:90:26:b5:44:dc:16:94:7c:0b:
3d:75:ee:b3:5f:85:19:41:b0:b4:a0:4e:02:f3:0d:
a0:25:23:f0:41:f6:83:3f:5b:04:12:1c:6a:25:62:
67:06:da:15:dd:85:67:3f:00:0d:71:f8:b3:a6:26:
dc:fb:2d:78:82:f9:48:59:37:08:c3:f5:87:54:41:
f4:72:35:ec:11:9c:a8:ff:e1:01:06:cc:aa:0c:7b:
48:2f:86:05:12:f1:15:fc:3f:cb:97:32:2d:fb:af:
6e:59:b5:76:79:fc:ac:09:f7:4f:95:cb:13:50:44:
a1:33:9a:ce:64:58:14:cb:b0:b3:d0:51:6a:bf:e8:
ca:42:ee:08:d6:09:3f:b8:a5:3f:29:d7:be:fc:91:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FF:DE:E9:D1:D4:60:DB:31:8D:2F:AE:7E:C9:67:6A:63:D2:30:E6
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/cP_e6dHUYNsxjS-ufslnamPSMOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.176.0/23
213.182.192.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d5:91:7e:78:25:c8:e6:03:0c:44:b1:37:90:67:48:41:5a:
46:b0:2b:7c:bd:bc:10:a5:52:e0:ac:e5:a0:05:e3:e3:0e:a3:
46:33:b6:e6:59:6d:c4:b5:69:a1:88:7d:f7:81:63:7e:d4:11:
fd:3f:c2:d4:09:f9:54:80:5b:56:41:ab:cd:31:9f:6d:f8:65:
83:a5:e5:63:3a:cf:e5:b9:a7:50:a2:19:8d:b9:a7:43:7f:9a:
a3:31:4c:2f:4d:b3:f5:86:91:1a:52:12:ab:d4:2a:76:b4:47:
e2:04:7c:5c:ec:db:f4:df:f7:f1:e1:02:d8:86:0c:32:2c:e8:
ff:30:db:da:9f:27:c1:cf:a5:e6:b8:6c:9c:fd:32:8e:01:b9:
1f:58:c1:66:44:2b:16:3c:65:74:ef:59:be:26:e3:45:a0:f3:
53:d0:da:3d:44:95:74:7e:3f:d7:c2:e2:d0:23:c9:ff:c8:fc:
16:8f:1b:06:7d:55:44:67:99:5e:30:ce:3f:9e:11:6d:b1:0a:
5e:f3:51:2b:97:ff:78:97:bd:cf:06:cb:57:96:d4:e4:f2:2c:
b9:72:8e:8a:ef:7a:ea:dd:a9:ac:08:49:02:a7:7c:d3:fc:26:
6a:58:bf:6a:b2:f8:16:4c:51:62:71:45:22:95:7e:9b:df:62:
f1:2e:2a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 17:34:43 2024 by rpki-client on console-ams.rpki-client.org