Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/CMZY3dCbM7OOah-AZVj8yCwdbEY.roa
File: CMZY3dCbM7OOah-AZVj8yCwdbEY.roa (raw, json)
Hash identifier: bDCxljksm01oDVi3ZaFTRDWoLWFjGYEcNh2q8/u/cPo=
Subject key identifier: 08:C6:58:DD:D0:9B:33:B3:8E:6A:1F:80:65:58:FC:C8:2C:1D:6C:46
Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial: 018CC3B71F0739324B5386E911FE89881EBA
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/CMZY3dCbM7OOah-AZVj8yCwdbEY.roa
Signing time: Mon 01 Jan 2024 06:30:07 +0000
ROA not before: Mon 01 Jan 2024 06:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29028
IP address blocks: 195.20.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1f:07:39:32:4b:53:86:e9:11:fe:89:88:1e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Validity
Not Before: Jan 1 06:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08c658ddd09b33b38e6a1f806558fcc82c1d6c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e5:61:39:09:81:b6:04:42:c9:6d:8d:ca:4f:
fe:c1:9e:7f:7e:ca:49:0e:2a:d1:82:31:a3:f8:73:
94:56:5c:75:fb:62:0a:e3:ed:a7:75:3f:b8:93:18:
61:73:3e:1e:09:c1:0f:43:12:f8:89:cf:b9:4d:9a:
00:a8:3d:8d:30:99:ec:17:fa:da:5a:20:33:fd:9f:
71:d3:d6:16:d9:52:69:b0:e0:61:0e:1d:81:7e:5d:
e3:6d:da:96:3f:5c:5a:3c:93:c4:79:87:0d:d3:ca:
9e:8d:fd:98:f5:27:4a:53:af:f7:53:2d:9e:e7:eb:
91:17:ce:83:b5:a2:66:44:cf:5a:5c:2a:39:d4:00:
71:04:df:9f:6f:40:53:3a:3c:0e:e3:4b:a7:75:67:
bb:15:64:7a:76:ad:30:5a:8f:d7:83:b6:3b:79:76:
60:7c:98:56:63:43:d8:39:cd:a7:53:b9:7d:53:aa:
84:42:b9:d3:bd:eb:8b:cf:30:aa:1d:cc:a9:5f:b1:
40:be:80:10:dc:14:d4:55:45:ed:59:a2:b5:f6:ac:
99:94:aa:6c:d0:a0:a5:ce:23:70:d1:1e:33:d3:ba:
3a:75:a7:40:02:1b:d7:ed:cc:1f:ca:27:13:24:fa:
52:42:96:46:e4:bb:2f:fc:c7:65:f6:70:ef:0a:33:
76:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C6:58:DD:D0:9B:33:B3:8E:6A:1F:80:65:58:FC:C8:2C:1D:6C:46
X509v3 Authority Key Identifier:
keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/CMZY3dCbM7OOah-AZVj8yCwdbEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.143.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:5f:63:5d:ae:e3:eb:5d:45:25:f0:44:36:2b:20:79:cd:9d:
3c:7a:55:22:33:72:85:9d:e8:fb:ce:52:42:27:70:d7:10:82:
ae:a4:e6:4b:9a:80:b2:bb:74:aa:b8:48:4b:54:5a:59:9d:4c:
67:5d:77:74:a4:f9:34:d1:c4:24:13:94:f0:20:0c:cd:9d:a4:
01:b3:9e:4d:d9:71:aa:5e:55:ab:31:3f:5a:73:91:09:56:9f:
d5:b8:d6:f9:10:45:54:3c:98:49:92:da:28:55:ab:6a:20:48:
a4:45:ce:af:13:d5:0e:d1:f4:50:57:14:0d:a7:be:8a:18:df:
2a:65:26:d8:7a:5e:35:7e:2b:47:66:70:64:f6:15:66:fc:4a:
ac:a4:d1:e1:de:cf:d1:29:92:6c:20:18:c7:8e:40:15:bf:42:
5b:27:38:5c:05:e4:c4:ee:30:81:87:54:34:d3:d5:e1:ff:1d:
f2:12:eb:1c:fb:46:41:41:6c:b3:66:cd:30:c6:b2:81:f6:bc:
e5:4a:69:ff:79:14:23:b6:3d:f7:91:6c:24:e0:a3:95:b9:c7:
4a:2e:0b:d5:fb:c3:cc:6d:9f:b5:2d:f6:b5:79:87:e0:79:7b:
fa:a8:62:ee:ef:58:f9:48:a5:d1:d5:11:0b:95:ac:02:5c:4a:
25:1c:d0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:59 2025 by rpki-client