Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/75f8FzeQ1_uG8VRNG8515r69tHM.roa
File: 75f8FzeQ1_uG8VRNG8515r69tHM.roa (raw, json)
Hash identifier: NrDdPO7xOE1dHy0PCnUhbjlQKatNKAp5Hd7qoLdRW60=
Subject key identifier: EF:97:FC:17:37:90:D7:FB:86:F1:54:4D:1B:CE:75:E6:BE:BD:B4:73
Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial: 018CC6B825E6F79D090290C02848D33EA010
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/75f8FzeQ1_uG8VRNG8515r69tHM.roa
Signing time: Mon 01 Jan 2024 20:30:06 +0000
ROA not before: Mon 01 Jan 2024 20:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16242
IP address blocks: 193.247.85.0/24 maxlen: 24
2a12:5a40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 11 Apr 2024 02:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:25:e6:f7:9d:09:02:90:c0:28:48:d3:3e:a0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Validity
Not Before: Jan 1 20:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef97fc173790d7fb86f1544d1bce75e6bebdb473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:56:ac:7a:30:cb:0f:9a:dd:67:e6:7b:8c:
73:dd:38:73:43:0d:92:89:3d:5b:d7:59:ac:d1:e9:
16:1e:a2:85:ca:f9:8c:e9:d7:e7:5c:fc:8b:36:9b:
8d:8b:f0:f4:cd:d8:20:02:05:c2:78:7b:28:74:6c:
44:f5:32:50:f5:24:66:96:a2:94:dc:6f:d2:3f:f6:
f6:99:38:07:d6:2f:81:02:3d:15:5d:63:d1:11:cb:
aa:5c:03:60:ac:74:24:d4:4f:48:05:29:11:d2:28:
98:c4:c5:2b:34:78:8f:d8:45:8d:b9:bf:f1:ef:0a:
10:57:77:43:8c:fd:b8:90:d2:38:87:be:21:e0:18:
cb:e1:b0:08:60:5c:4a:09:4a:b3:82:b3:fd:50:db:
9e:d8:76:99:4a:af:8a:9f:3b:77:43:7b:92:3a:00:
a6:af:e2:f9:4c:5a:57:8a:24:f9:7c:e2:fd:67:53:
33:ac:4c:30:28:54:1a:59:34:30:ee:5d:ae:0f:3c:
6d:06:c0:c3:e3:df:33:4c:73:b2:55:1d:50:b4:46:
9f:ba:38:f1:23:85:f2:ae:18:52:30:bf:e7:27:01:
0f:8b:b4:9e:26:b8:49:2e:42:32:e7:42:42:fa:ad:
3a:d2:70:3b:13:1f:b1:57:95:ff:ad:2d:94:5e:cf:
a3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:97:FC:17:37:90:D7:FB:86:F1:54:4D:1B:CE:75:E6:BE:BD:B4:73
X509v3 Authority Key Identifier:
keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/75f8FzeQ1_uG8VRNG8515r69tHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.85.0/24
IPv6:
2a12:5a40::/29
Signature Algorithm: sha256WithRSAEncryption
53:20:85:01:f1:78:12:66:94:4a:85:9c:bb:42:30:af:8d:5c:
d1:02:09:65:c9:aa:89:ea:5b:c3:a3:e4:0a:64:00:cd:59:a5:
17:11:b3:1e:8c:50:aa:57:6a:7f:1b:2e:cd:3d:f9:71:ca:ab:
bf:cd:fb:01:de:13:d3:d4:42:91:fb:67:93:53:50:df:f5:41:
57:41:ca:14:3a:7a:d7:8e:60:6d:29:f6:8c:a2:d8:46:40:43:
76:8a:57:06:03:45:54:9a:a7:cb:de:8b:6a:76:8f:4c:dc:ad:
c7:75:16:2b:2b:84:b9:b2:49:c5:f7:5e:dd:c7:92:92:47:88:
4a:06:f6:6b:3e:69:8d:9d:82:1b:a9:41:08:7d:01:4a:c0:17:
5e:e6:13:1a:ff:fb:49:cb:4c:0e:1d:20:ed:97:a9:21:70:fd:
db:a4:19:f4:00:07:f3:f9:57:b0:91:19:5e:0e:7d:2a:25:b1:
1a:25:6a:80:c3:f9:0f:cb:d8:8f:7f:b2:72:65:8a:0c:26:c7:
f1:ae:6b:1b:e8:ae:14:c5:c8:63:af:7d:cd:81:c1:5c:72:60:
a6:f9:9e:8d:fe:58:58:8b:b4:1b:a2:86:73:a1:50:1c:04:89:
60:ab:3a:06:fb:11:28:4c:58:92:d8:d9:35:01:f8:3f:2c:7a:
ab:d3:9f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 04:51:28 2024 by rpki-client on console-fra.rpki-client.org