Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/1l4HluX26jy90yWiRLVb-SXq_ds.roa
File: 1l4HluX26jy90yWiRLVb-SXq_ds.roa (raw, json)
Hash identifier: jTqgd62iecCfcjM9EiiPVL6KbjSmFrduFWzYN70SOfE=
Subject key identifier: D6:5E:07:96:E5:F6:EA:3C:BD:D3:25:A2:44:B5:5B:F9:25:EA:FD:DB
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018BF7EB1960A1BDC20371B40BF667A65841
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/1l4HluX26jy90yWiRLVb-SXq_ds.roa
Signing time: Wed 22 Nov 2023 16:44:21 +0000
ROA not before: Wed 22 Nov 2023 16:44:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f7:eb:19:60:a1:bd:c2:03:71:b4:0b:f6:67:a6:58:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Nov 22 16:44:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d65e0796e5f6ea3cbdd325a244b55bf925eafddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:04:71:16:08:3d:a1:1f:b5:c6:e1:b3:a7:
cb:9e:14:26:18:dc:50:51:3b:a9:38:86:f3:78:71:
fd:94:a2:df:81:99:70:5a:5e:a5:ce:65:6c:55:44:
d4:4f:cd:eb:47:3b:5b:6e:8c:66:08:12:17:24:12:
ae:03:2d:c2:bb:c0:3b:c6:39:70:49:ee:25:fc:a3:
6b:a0:5a:1b:55:89:e0:d4:53:84:8a:3c:2b:2e:90:
29:e0:26:1f:62:eb:77:6d:e3:70:fc:c9:98:6b:8a:
56:f2:e7:e8:35:c9:31:40:dc:18:ed:72:0a:d6:06:
35:9a:1a:4a:e7:d3:f3:18:4f:3d:8f:c6:b7:74:8a:
08:11:a2:de:35:e0:f5:99:64:e1:7f:d3:3d:14:51:
d9:7c:f3:df:a3:f1:e7:07:d7:9c:36:6d:99:87:32:
f9:52:d1:60:05:ff:bf:04:66:ec:bb:1a:b9:90:19:
72:8a:c0:c1:bd:a1:d1:d1:59:b3:e3:9f:bf:4b:b5:
35:08:93:e4:4c:6f:cf:2a:f1:ea:ab:0c:71:e9:43:
13:18:e1:0e:51:31:39:50:c0:d3:68:45:62:be:34:
31:69:b3:ce:38:92:60:53:e4:33:2e:e4:60:3a:49:
58:34:8d:bd:02:44:3c:e7:8e:9a:59:5e:0b:ff:2c:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5E:07:96:E5:F6:EA:3C:BD:D3:25:A2:44:B5:5B:F9:25:EA:FD:DB
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/1l4HluX26jy90yWiRLVb-SXq_ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.61.0/24
185.81.180.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:25:93:c6:5a:45:80:98:8b:83:2a:70:ae:dc:72:02:08:de:
11:60:a3:43:cb:12:cd:68:4f:61:36:76:55:98:24:a7:c4:01:
4f:ee:ba:2a:c2:cd:b6:b9:d2:1b:dc:b6:a9:d6:91:eb:ab:2e:
64:a2:cf:23:c9:5a:5d:be:29:6f:2a:e0:fa:c0:6f:6e:86:79:
8b:22:bf:dc:41:41:b6:57:c6:13:42:96:79:de:00:e8:a2:69:
19:a6:82:b3:74:73:90:8a:07:de:f6:99:9f:fc:36:3e:c7:cb:
9f:82:59:be:95:cd:f0:68:96:a1:34:21:5e:a5:12:d8:b4:46:
8e:7c:2a:40:52:f8:6c:2c:ae:1f:dd:b1:cd:03:a6:1a:9e:48:
fe:5f:79:99:c5:71:39:9b:f0:b1:74:76:b3:9d:2e:bf:12:93:
0c:99:84:c2:d4:24:b7:09:10:08:57:ce:84:a7:c8:0d:0b:d9:
9d:8d:e7:e3:dc:19:11:eb:bd:a0:0e:9d:05:7d:5e:54:3a:1e:
dc:00:21:12:75:48:3d:30:1a:32:11:b5:1e:11:8a:3c:25:03:
d2:03:96:fb:41:a2:d9:ec:9d:1e:37:65:ae:f5:0c:90:c7:c3:
ca:a9:10:47:7a:11:79:6c:53:90:8c:f2:93:df:71:84:61:f0:
31:b5:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 17:29:28 2023 by rpki-client on console-ams.rpki-client.org