Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/Cvu_J8KK3HffpomqwmtHEOG6IfI.roa
File: Cvu_J8KK3HffpomqwmtHEOG6IfI.roa (raw, json)
Hash identifier: nc+SHHaYkKy62ZRBmO9003A7wHr6Pg0FTEeSwuvmbzM=
Subject key identifier: 0A:FB:BF:27:C2:8A:DC:77:DF:A6:89:AA:C2:6B:47:10:E1:BA:21:F2
Certificate issuer: /CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Certificate serial: 0191CD5F54ED63A1727362C4E3023CAE4E9C
Authority key identifier: 9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/Cvu_J8KK3HffpomqwmtHEOG6IfI.roa
Signing time: Sat 07 Sep 2024 16:44:22 +0000
ROA not before: Sat 07 Sep 2024 16:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201364
IP address blocks: 185.163.128.0/24 maxlen: 24
185.163.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 17:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cd:5f:54:ed:63:a1:72:73:62:c4:e3:02:3c:ae:4e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Validity
Not Before: Sep 7 16:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0afbbf27c28adc77dfa689aac26b4710e1ba21f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:40:67:87:d0:90:d4:95:4f:0e:0a:e1:e6:6f:
70:0e:ef:51:48:11:80:ea:40:bc:fa:18:55:8d:93:
8d:25:d8:d0:14:38:d0:2f:62:3c:50:7e:1e:fd:9d:
38:2e:4c:c8:f9:4b:99:79:96:00:f3:65:ea:ac:58:
0e:f9:02:1d:ff:9a:14:f3:78:b9:9c:79:6a:95:a6:
10:73:b9:77:44:ac:82:c3:bc:eb:f1:60:f5:66:6f:
04:e0:13:a1:19:e5:8e:1a:14:6d:ac:de:08:2a:4d:
e9:70:12:45:0b:f5:7e:c5:5b:d3:96:71:d6:0f:2c:
14:3b:53:6d:9f:ea:99:33:9f:4f:e9:47:d1:a9:6c:
1d:26:e8:ab:81:e3:4d:98:b5:2f:4b:53:ac:22:e6:
2b:a5:98:a8:7d:c7:90:7d:70:82:db:a6:ef:de:ba:
fd:3b:ba:1c:71:40:0b:ec:bd:4b:47:7e:96:7a:c9:
bf:38:53:60:00:90:7d:24:ff:e9:9e:ad:f0:7c:13:
95:ce:26:b1:bb:9c:eb:56:b1:19:85:aa:f4:ef:73:
9b:dd:34:10:0b:c7:7a:0d:50:39:a2:9c:b4:ff:e9:
3a:e5:c3:72:fc:1c:f0:a0:b6:da:bb:07:45:ae:93:
b0:9e:bb:78:39:f4:05:72:24:23:46:39:3c:34:f8:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FB:BF:27:C2:8A:DC:77:DF:A6:89:AA:C2:6B:47:10:E1:BA:21:F2
X509v3 Authority Key Identifier:
keyid:9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/Cvu_J8KK3HffpomqwmtHEOG6IfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.128.0/24
185.163.131.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ae:05:e6:86:06:79:21:44:06:59:29:d8:6c:a1:72:15:ea:
67:51:72:ac:c6:0b:b7:1e:d4:80:08:a4:da:4a:07:8c:00:80:
32:5b:ff:02:39:5e:ab:7f:03:c5:2d:92:47:8a:4b:f7:2f:94:
b1:c9:63:9f:fc:56:9d:ae:7f:1a:16:e8:39:fc:94:8d:80:0d:
6c:bd:7d:25:3b:28:6a:18:07:08:8b:fd:89:18:8e:5c:84:a3:
e8:cf:57:d9:08:92:2f:5e:37:68:45:ee:40:06:1b:e0:da:0b:
33:88:ad:bd:2a:b5:35:56:f6:a2:9a:7e:65:a2:a1:d3:df:11:
6b:4e:05:db:b1:be:2a:6b:d1:8d:cd:d7:93:43:33:90:76:0f:
0d:8e:e4:a3:6d:76:c3:3d:bd:df:8e:fc:f9:12:73:6c:4f:a0:
29:bf:dc:7e:28:4b:26:21:d4:78:47:2d:39:1b:f2:96:b6:89:
ce:9e:c6:f7:de:e9:1a:78:2b:1b:aa:8b:27:da:1d:98:97:3e:
f9:02:0a:1e:4f:17:49:21:ca:3d:c5:aa:d2:c8:6e:2a:b0:c7:
00:ea:53:e9:aa:89:92:88:5f:4e:22:f8:75:75:be:bb:f2:f2:
93:00:88:53:5d:a8:b5:42:29:17:a1:1d:c1:02:5c:45:51:30:
e7:c8:9d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 21:03:17 2024 by rpki-client on console-ams.rpki-client.org