Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/CFEnb_BIztIoYJcpafPvJzRcAPs.roa
File: CFEnb_BIztIoYJcpafPvJzRcAPs.roa (raw, json)
Hash identifier: qB98PwtlEQGpheqIKNqpRZm3i+/uiL3CiL/SISKkrSQ=
Subject key identifier: 08:51:27:6F:F0:48:CE:D2:28:60:97:29:69:F3:EF:27:34:5C:00:FB
Certificate issuer: /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Certificate serial: 018CC3B72887CD87D58B1FD5275DDB535FE7
Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/CFEnb_BIztIoYJcpafPvJzRcAPs.roa
Signing time: Mon 01 Jan 2024 06:30:09 +0000
ROA not before: Mon 01 Jan 2024 06:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12315
IP address blocks: 185.215.40.0/22 maxlen: 22
213.34.32.0/19 maxlen: 19
193.254.214.0/23 maxlen: 23
2a04:c580::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:28:87:cd:87:d5:8b:1f:d5:27:5d:db:53:5f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0851276ff048ced22860972969f3ef27345c00fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:ba:51:e8:db:7b:d2:83:e6:99:66:89:39:
59:f5:af:99:9b:c7:82:1b:9f:45:73:43:60:6a:ad:
82:75:a1:aa:9b:8d:b9:80:d7:b5:41:a4:02:f2:c6:
0d:4e:98:00:8a:43:81:33:79:e2:33:59:d7:42:33:
1d:28:8b:55:7b:60:7f:60:56:c2:7e:e2:32:10:4b:
89:84:06:04:b2:e3:a2:cf:3b:c8:18:c1:ae:97:a4:
59:0a:1e:be:3f:71:20:ee:6b:6e:8c:7f:f2:e4:b1:
8c:cb:8e:3c:86:74:c3:dd:e0:42:8c:8e:ed:9b:d8:
e0:91:00:97:2d:f3:d2:c1:36:e8:d9:3c:71:fc:bd:
03:5e:de:fa:45:a0:3c:13:43:79:a4:6a:0e:c7:1b:
56:d8:dd:61:be:c8:43:2f:7f:34:3d:75:0a:37:2a:
61:47:91:66:f1:34:77:c4:a7:b1:9e:27:eb:8e:7b:
02:1a:d1:78:76:e4:20:67:ac:8e:a7:70:6f:0f:8e:
d9:c2:2e:4d:a1:64:8d:88:f8:19:eb:32:be:71:67:
e4:f7:53:85:a4:e8:1d:2d:53:94:66:e7:06:41:03:
cb:f1:b0:bc:16:c3:a6:b7:0a:3a:4e:e0:a8:eb:31:
76:2a:7a:39:a2:74:2d:23:da:99:c4:46:1d:80:9d:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:51:27:6F:F0:48:CE:D2:28:60:97:29:69:F3:EF:27:34:5C:00:FB
X509v3 Authority Key Identifier:
keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/CFEnb_BIztIoYJcpafPvJzRcAPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.40.0/22
193.254.214.0/23
213.34.32.0/19
IPv6:
2a04:c580::/29
Signature Algorithm: sha256WithRSAEncryption
7f:3a:49:95:04:a2:e7:40:93:21:4a:50:8b:f8:f5:7a:8c:3c:
0c:59:53:ad:a4:ee:16:ea:33:87:0b:b8:d0:d9:87:cf:ad:3e:
42:95:8e:50:0b:aa:3e:58:6a:00:54:7a:33:19:8a:a2:8a:f9:
6e:ee:08:48:ac:b6:08:05:7f:d6:08:49:f8:e4:fe:5c:34:88:
bf:47:8c:33:81:bf:32:f7:1a:73:ee:f7:1f:7e:3f:f1:35:c6:
a0:69:a5:c9:a9:c1:8d:7e:a3:5f:e8:a5:55:b9:2e:ae:40:39:
88:6f:be:cf:cc:38:d5:d0:aa:db:74:fb:4b:a3:e6:e4:8c:20:
e6:18:c8:58:26:d8:c6:02:d1:32:8f:92:6f:bb:e8:52:b3:36:
55:15:13:6d:d9:dc:74:a5:70:03:e4:ed:d4:28:60:2c:7c:df:
36:de:a3:b9:ce:5a:32:d7:ee:59:1b:05:d0:41:f5:e8:22:0d:
35:a2:01:6f:a9:02:2a:86:aa:a0:22:2d:32:73:74:16:f5:48:
50:aa:9c:86:f6:92:bc:b7:7d:14:5e:2c:2d:47:d4:89:bf:90:
04:4d:b4:e5:ab:78:63:2a:31:9d:93:5c:a2:12:48:a5:00:4e:
9c:93:f9:2e:9b:19:62:9d:5e:8f:a4:a9:93:be:24:ab:e5:7e:
d4:ac:fc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:10 2025 by rpki-client