Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/57NGsF2a1bLcmylVvSqouyUMhSw.roa
File: 57NGsF2a1bLcmylVvSqouyUMhSw.roa (raw, json)
Hash identifier: oElxWhGhZRXbR2d+bfECVm4qetCW9ssfb3+g8YC+qqQ=
Subject key identifier: E7:B3:46:B0:5D:9A:D5:B2:DC:9B:29:55:BD:2A:A8:BB:25:0C:85:2C
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0189D4F33D9A54EEE3872BCDC5474C08EB52
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/57NGsF2a1bLcmylVvSqouyUMhSw.roa
Signing time: Tue 08 Aug 2023 11:40:57 +0000
ROA not before: Tue 08 Aug 2023 11:40:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.243.179.0/24 maxlen: 24
91.243.176.0/24 maxlen: 24
195.242.243.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:f3:3d:9a:54:ee:e3:87:2b:cd:c5:47:4c:08:eb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Aug 8 11:40:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7b346b05d9ad5b2dc9b2955bd2aa8bb250c852c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4f:ee:76:96:49:90:88:dd:19:c5:6b:46:74:
ad:97:0d:73:ae:f5:27:a1:c0:fb:d5:1e:ea:22:ce:
20:26:eb:cc:ab:30:69:92:2a:cb:90:3c:c2:8a:df:
c8:bd:43:b9:cb:f2:9b:8b:d1:d2:69:db:a6:fb:ce:
9f:ca:b1:94:5d:5e:d0:e2:de:2c:61:9e:8f:8c:a6:
f2:50:67:c1:a6:df:ce:1b:9e:52:53:05:10:ba:9c:
d4:78:84:ba:be:e1:a5:93:2c:ab:1d:d0:4a:94:59:
8b:42:93:52:4c:60:f8:65:57:a0:2f:8b:6d:c3:d4:
75:4d:a4:4e:8e:f7:b6:d1:0c:f0:ee:c6:44:18:c6:
40:e1:21:5b:ac:ef:02:41:88:4d:18:0b:24:79:ee:
6d:52:de:7a:89:38:3d:cb:2e:d3:e2:7a:7f:34:88:
e0:eb:d4:fb:5f:d6:0a:55:62:ef:82:6f:9f:59:da:
ed:00:aa:3d:fc:a7:8c:8a:13:fb:7a:3d:77:98:c0:
eb:08:6e:f7:6f:4e:52:f9:92:e0:69:7a:d4:ed:fd:
a9:b8:1e:94:d5:ec:b7:29:21:e9:c3:98:6b:a7:0d:
92:da:b3:e7:98:9f:7b:10:af:fc:65:35:09:0f:3a:
2a:65:74:cf:ce:51:e5:f5:61:17:34:1f:0f:51:f7:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B3:46:B0:5D:9A:D5:B2:DC:9B:29:55:BD:2A:A8:BB:25:0C:85:2C
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/57NGsF2a1bLcmylVvSqouyUMhSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.176.0/24
91.243.179.0/24
93.114.61.0/24
185.81.180.0/23
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:5b:37:0e:68:88:9b:00:c6:18:3b:00:5a:3c:d3:1f:16:69:
1e:d5:d1:94:6b:70:10:24:22:84:c7:43:de:da:25:70:de:e2:
70:2f:95:c7:a4:11:33:2f:4f:79:05:49:ce:4f:76:68:ca:65:
c9:ad:7f:55:33:fa:4d:55:ff:95:95:aa:de:af:f5:87:94:cc:
86:c4:a3:a6:81:93:7a:76:4a:00:28:10:4c:ab:9d:23:b3:c1:
b9:a2:6a:3a:94:0e:07:a6:06:79:3a:50:e8:ce:55:4c:70:86:
e9:c4:05:1f:07:eb:ec:95:62:d6:69:e1:09:04:c6:58:b2:94:
5d:35:c0:6f:5d:c6:fd:b3:c1:c6:94:38:3e:4d:ba:8d:b2:b4:
74:42:e7:f7:d7:4b:df:12:da:84:de:3a:89:c8:e1:d7:53:f3:
81:7c:dc:6c:83:de:e7:43:3a:4a:a2:66:a5:16:c2:20:ff:48:
08:59:a7:8c:3c:05:17:c9:64:d5:17:1a:be:9e:03:8d:d2:06:
e3:7a:32:4f:64:40:6d:1f:8f:50:1d:f2:7a:f3:7f:be:1d:3d:
54:2b:4f:16:41:fb:aa:c7:be:e7:9e:85:e6:d9:35:4b:e8:5e:
11:7e:fa:75:83:62:ed:20:a7:2a:d9:68:c4:96:d4:aa:0d:11:
60:d9:46:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 07:50:15 2023 by rpki-client on console-fra.rpki-client.org