Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/ckutnhY9YcqdB9m9oofLvD2uMk4.roa
File: ckutnhY9YcqdB9m9oofLvD2uMk4.roa (raw, json)
Hash identifier: iAQSYV9U4uhvL9Kq/A+0SEOzKwvWdZi5ZPa6QzeKx8w=
Subject key identifier: 72:4B:AD:9E:16:3D:61:CA:9D:07:D9:BD:A2:87:CB:BC:3D:AE:32:4E
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 01856DCAC170170C2172C9A0C91B65F80C4A
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/ckutnhY9YcqdB9m9oofLvD2uMk4.roa
Signing time: Sun 01 Jan 2023 14:44:42 +0000
ROA not before: Sun 01 Jan 2023 14:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39276
IP address blocks: 195.238.91.0/24 maxlen: 24
195.238.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:c1:70:17:0c:21:72:c9:a0:c9:1b:65:f8:0c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Jan 1 14:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=724bad9e163d61ca9d07d9bda287cbbc3dae324e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:2c:b9:97:e7:c6:41:47:ee:73:ba:bb:ad:
e0:e0:3e:6c:21:c5:8b:8c:4f:32:37:28:b9:ae:fa:
22:8c:f3:b6:73:b0:ff:da:fd:43:e1:11:5b:df:1d:
04:5a:0f:fd:f9:a4:5d:04:d8:81:9f:9b:e0:b1:07:
8e:89:a2:44:5e:ca:76:db:f3:be:61:d0:84:e7:c7:
19:91:ec:16:cd:84:b1:bd:4b:79:32:9e:73:74:ca:
a9:14:c7:93:f1:10:f7:86:8f:cc:59:3c:fe:1d:98:
36:b9:0b:dd:53:d7:1a:36:0f:a3:39:9e:8b:1b:5b:
c8:8e:ed:fd:d4:54:44:db:83:b4:9e:fe:82:bc:0e:
cc:fd:e6:5f:51:9c:26:fe:bf:03:1c:7d:42:36:44:
2e:e3:48:57:5a:05:80:0f:9b:bf:7b:21:d6:84:37:
9d:36:35:87:c0:58:90:4c:03:16:b7:95:63:bb:3d:
5a:18:25:f9:6b:2b:10:18:06:80:09:a2:c4:66:12:
50:1a:b8:db:b1:56:e0:59:21:ba:e8:e8:47:88:3f:
50:95:ff:15:4d:0a:bb:d1:4d:42:07:a4:cd:ea:26:
e7:c8:7c:91:f7:62:aa:ca:ed:f5:a5:15:bb:46:4f:
0f:6d:e5:89:7a:98:05:45:04:c1:b4:42:59:14:d7:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4B:AD:9E:16:3D:61:CA:9D:07:D9:BD:A2:87:CB:BC:3D:AE:32:4E
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/ckutnhY9YcqdB9m9oofLvD2uMk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.90.0/23
Signature Algorithm: sha256WithRSAEncryption
71:c3:0e:ce:1c:ac:59:fa:ba:d6:73:df:ac:9d:fd:57:7c:b9:
2e:db:60:1f:cb:aa:3e:25:71:f4:56:74:1c:bc:be:37:28:ef:
f3:1a:91:6b:9b:4c:70:78:94:82:17:16:08:fc:a8:ad:93:e9:
fc:d9:80:8c:e3:98:9c:28:18:1d:ab:ff:89:f3:22:83:9e:2f:
31:88:2a:06:93:15:b5:b4:ef:40:11:28:c1:9e:9f:d9:83:11:
7b:1d:4a:b7:b4:59:9d:cf:30:ce:b0:9e:8a:fe:59:e1:f6:92:
dd:e3:65:e9:23:3b:ce:99:22:fb:b9:f5:65:1d:30:dd:41:d7:
d0:11:d2:e7:ab:5e:b5:0d:4c:2c:4a:5f:0f:b6:57:ca:cd:28:
66:44:35:f3:e6:e9:69:f8:c6:46:cf:8e:61:0d:58:ef:f3:1b:
56:a2:ba:1b:18:ff:05:cc:5f:87:76:0c:6b:e3:52:9e:9a:d5:
1a:d1:54:34:a1:32:c9:8e:14:6c:24:45:11:bb:da:c4:57:bb:
8a:ac:dc:9f:d4:a3:e2:80:67:e7:7f:f8:52:e3:23:e5:2b:f4:
2a:7d:f2:ab:e2:3e:e0:2d:8e:05:cb:54:5e:67:b4:f7:ae:c4:
8a:9e:1f:24:fe:6f:87:60:ed:9c:d5:91:f6:14:56:b7:ad:f7:
0c:ad:77:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:29 2024 by rpki-client on console-ams.rpki-client.org