Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/Cc8ntcfun7vN9QcL6zwVl_vcSYs.roa
File: Cc8ntcfun7vN9QcL6zwVl_vcSYs.roa (raw, json)
Hash identifier: AmtzmHxBrGEwIcX/dv6rQD89Qlf5whmZFJobwHGT7QY=
Subject key identifier: 09:CF:27:B5:C7:EE:9F:BB:CD:F5:07:0B:EB:3C:15:97:FB:DC:49:8B
Certificate issuer: /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Certificate serial: 0190E117FEFEC53114FCAD171066D60ACF68
Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/Cc8ntcfun7vN9QcL6zwVl_vcSYs.roa
Signing time: Tue 23 Jul 2024 19:36:04 +0000
ROA not before: Tue 23 Jul 2024 19:36:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198037
IP address blocks: 195.200.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 16:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e1:17:fe:fe:c5:31:14:fc:ad:17:10:66:d6:0a:cf:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Validity
Not Before: Jul 23 19:36:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09cf27b5c7ee9fbbcdf5070beb3c1597fbdc498b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:98:ce:f6:29:56:e9:2a:06:e9:fd:7a:f4:8a:
71:4f:3c:5f:5c:07:03:cb:4a:d2:0c:c4:7a:87:ad:
de:e9:ba:e5:a3:74:87:66:6e:60:d3:d4:54:67:9e:
5e:72:31:1d:2c:26:b0:85:0f:f9:30:77:c1:c7:aa:
8a:ff:cd:00:e8:ad:3f:2c:c6:fc:a9:59:ef:20:00:
aa:96:9a:ab:71:62:9e:c8:d8:06:00:09:78:cb:bf:
5a:b9:8a:f9:50:52:93:66:c4:4a:5e:c1:c7:d0:76:
79:a5:66:ab:1b:8e:cd:6c:5d:ea:c1:bc:6f:39:fb:
05:68:a1:c0:71:64:5f:fc:5b:98:3c:3b:5f:82:75:
82:f3:87:7b:29:92:9b:5a:11:be:c4:ec:ff:5f:2c:
ab:48:d1:67:36:3e:19:61:5e:80:d4:57:b2:fb:7a:
a1:09:b7:4c:9d:03:4b:fa:3f:38:0f:15:ea:f1:08:
4e:07:68:db:96:b6:00:82:3b:f9:c0:1e:58:0c:6d:
8a:25:94:b0:90:1c:a0:89:f5:49:f2:c8:17:15:f2:
37:67:75:ea:d0:3d:82:cd:9c:d5:38:4d:a9:4f:ea:
59:6a:2b:8a:c7:4b:d0:42:7f:3e:a9:b7:3f:75:5f:
62:81:77:9b:52:ad:1c:69:ff:19:64:a7:05:56:65:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:27:B5:C7:EE:9F:BB:CD:F5:07:0B:EB:3C:15:97:FB:DC:49:8B
X509v3 Authority Key Identifier:
keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/Cc8ntcfun7vN9QcL6zwVl_vcSYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f3:ac:ce:7f:4c:8b:07:2e:16:58:78:39:93:46:35:02:38:
4b:cf:fb:a5:c8:bb:3a:e9:19:8f:ec:73:c9:f6:82:26:e2:40:
73:3a:d9:ac:48:d6:55:d4:c4:7d:39:96:ba:fd:a1:01:32:03:
8e:69:8e:3a:34:f3:cd:66:2e:7e:9f:42:2f:a7:df:56:d1:31:
97:45:c4:34:88:c3:b6:f9:11:62:b3:f8:34:17:da:1f:aa:73:
78:32:39:2c:88:eb:87:c0:fc:d4:57:21:c5:1b:89:2b:d5:d1:
51:ce:60:84:b6:6d:06:25:e5:6a:82:87:c8:5f:74:6b:22:0d:
37:ba:ab:d5:4b:3a:00:93:1d:8a:dd:1d:02:3b:f8:14:4f:4f:
9a:0f:cd:c3:57:e3:5f:85:bd:ac:a1:bb:97:fa:86:f5:6a:72:
a8:1e:86:7f:ee:31:84:9c:19:9b:db:24:4a:01:4d:30:5f:83:
5c:30:92:7e:a5:b4:74:77:97:86:73:90:22:fe:61:2e:23:7b:
24:a3:a5:46:04:5f:67:11:86:33:ac:ce:29:91:89:c8:5a:37:
b2:c4:03:05:80:19:c9:05:f1:31:ca:48:64:0a:47:38:ad:78:
4b:ba:ec:a1:bf:75:fd:2f:bf:44:ed:80:21:db:e0:4a:b3:0c:
65:b5:4c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 21:38:01 2024 by rpki-client on console-ams.rpki-client.org