Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/4M5nL-yJBjEqhjsqziYz_Nv3_pQ.roa
File: 4M5nL-yJBjEqhjsqziYz_Nv3_pQ.roa (raw, json)
Hash identifier: PM3x+Y+WFqfy8k5c9VzTm4wgufd4OPk5/4u4ctrR2EM=
Subject key identifier: E0:CE:67:2F:EC:89:06:31:2A:86:3B:2A:CE:26:33:FC:DB:F7:FE:94
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01887BB530A1441C42B5217DE19B8CB389F4
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/4M5nL-yJBjEqhjsqziYz_Nv3_pQ.roa
Signing time: Fri 02 Jun 2023 10:44:11 +0000
ROA not before: Fri 02 Jun 2023 10:44:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.243.176.0/24 maxlen: 24
195.242.243.0/24 maxlen: 24
93.114.61.0/24 maxlen: 24
93.114.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:b5:30:a1:44:1c:42:b5:21:7d:e1:9b:8c:b3:89:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jun 2 10:44:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0ce672fec8906312a863b2ace2633fcdbf7fe94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:4e:d6:d2:a9:32:56:c1:0b:04:7b:fd:02:
46:1d:c5:26:40:bf:8a:8f:92:4a:68:94:12:76:9d:
c5:dc:bb:63:e5:89:a6:5a:0c:c4:3f:36:ca:e6:92:
c9:b0:ae:57:ac:74:2a:2f:48:3f:68:ae:f4:60:ba:
0c:90:f1:f9:d6:60:fc:20:1e:54:41:59:4a:de:c1:
37:ed:8a:0c:b1:e0:69:9c:b6:dc:1e:71:c1:5a:92:
0f:00:29:46:fd:20:28:bf:b7:6f:50:ce:4c:ba:83:
c4:9c:37:be:b3:3b:e3:2d:b2:96:f5:64:36:99:0d:
09:13:7b:76:d9:db:87:61:ed:26:17:f4:d2:54:7b:
c1:67:a1:4d:d6:72:0c:bf:e2:e9:d0:fe:8a:7b:42:
26:0f:f5:dd:f8:d0:13:e4:ff:d4:06:55:c0:91:e3:
09:8e:02:6f:93:20:f0:21:a3:27:db:43:39:b1:20:
e0:92:63:2d:9c:14:16:ec:21:44:45:1c:ad:c0:51:
30:c7:a2:7a:bd:83:32:93:29:dc:71:e9:cc:60:b4:
aa:e3:a4:e0:48:02:43:bf:cf:01:38:de:56:6e:8c:
aa:d9:64:97:e8:14:7d:fd:98:55:77:c1:16:d5:bc:
09:eb:82:40:21:45:a6:e6:1a:a2:66:b0:15:d4:21:
0c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CE:67:2F:EC:89:06:31:2A:86:3B:2A:CE:26:33:FC:DB:F7:FE:94
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/4M5nL-yJBjEqhjsqziYz_Nv3_pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.176.0/24
93.114.60.0/23
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:0b:de:0a:0a:d4:e8:d0:9b:49:9b:7f:82:ea:62:bb:8d:ca:
3c:36:70:35:2c:f1:97:de:3b:d1:74:15:13:1c:4a:55:9d:71:
14:bb:f4:39:36:20:74:1f:9f:e3:6a:60:9c:c8:29:aa:f9:09:
f5:1b:af:73:ff:f6:9c:b9:17:42:8e:eb:bc:02:52:a6:bb:9f:
d8:c7:b8:d7:f2:61:81:d0:71:33:18:95:93:04:e2:ec:15:83:
f8:93:5c:2a:f6:b7:8e:21:75:84:43:24:70:54:f3:35:2a:15:
06:23:ca:dc:68:f9:7c:e1:40:71:7c:8b:52:c7:0b:d3:17:c8:
5c:4d:8f:d9:50:ff:57:ff:46:b6:35:41:3e:de:3b:27:4c:cd:
05:13:9e:7b:65:c2:ba:e1:be:a5:25:d5:3c:15:85:53:3d:f4:
2a:91:1d:c3:8b:81:10:ea:d8:50:cf:3e:85:fc:99:54:56:b3:
78:94:db:1b:45:fa:65:37:a7:db:b0:f0:17:42:f7:1c:8e:58:
f6:9f:4d:df:6c:d1:eb:b9:74:c2:51:98:da:3f:d5:d9:7d:14:
29:0f:b5:6b:6c:56:46:3d:d2:7a:d6:ae:ef:5e:c0:84:ba:89:
93:23:65:2e:4b:95:2b:31:06:3b:61:2c:b9:68:3a:a4:47:0b:
8b:bf:3a:cd
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYh7tTChRBxCtSF94ZuMs4n0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjMwNjAyMTA0NDExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGNlNjcyZmVjODkwNjMxMmE4NjNiMmFjZTI2MzNmY2RiZjdmZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmtO1tKpMlbBCwR7/QJGHcUmQL+K
j5JKaJQSdp3F3Ltj5YmmWgzEPzbK5pLJsK5XrHQqL0g/aK70YLoMkPH51mD8IB5U
QVlK3sE37YoMseBpnLbcHnHBWpIPAClG/SAov7dvUM5MuoPEnDe+szvjLbKW9WQ2
mQ0JE3t22duHYe0mF/TSVHvBZ6FN1nIMv+Lp0P6Ke0ImD/Xd+NAT5P/UBlXAkeMJ
jgJvkyDwIaMn20M5sSDgkmMtnBQW7CFERRytwFEwx6J6vYMykynccenMYLSq46Tg
SAJDv88BON5Wboyq2WSX6BR9/ZhVd8EW1bwJ64JAIUWm5hqiZrAV1CEMpQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFODOZy/siQYxKoY7Ks4mM/zb9/6UMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvNE01bkwteUpCakVxaGpzcXppWXpfTnYzX3BRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW/OwAwQB
XXI8AwQAw/LzMA0GCSqGSIb3DQEBCwUAA4IBAQBbC94KCtTo0JtJm3+C6mK7jco8
NnA1LPGX3jvRdBUTHEpVnXEUu/Q5NiB0H5/jamCcyCmq+Qn1G69z//acuRdCjuu8
AlKmu5/Yx7jX8mGB0HEzGJWTBOLsFYP4k1wq9reOIXWEQyRwVPM1KhUGI8rcaPl8
4UBxfItSxwvTF8hcTY/ZUP9X/0a2NUE+3jsnTM0FE557ZcK64b6lJdU8FYVTPfQq
kR3Di4EQ6thQzz6F/JlUVrN4lNsbRfplN6fbsPAXQvccjlj2n03fbNHruXTCUZja
P9XZfRQpD7VrbFZGPdJ61q7vXsCEuomTI2UuS5UrMQY7YSy5aDqkRwuLvzrN
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:19 2023 by rpki-client on console-fra.rpki-client.org