Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/9nPlX1QMH6wDMg-6TckQGPcQQuc.roa
File: 9nPlX1QMH6wDMg-6TckQGPcQQuc.roa (raw, json)
Hash identifier: 4XhHQsofXYGf4VxOcz/sL2TTD+LQBgVNZuGqw/gO/5Q=
Subject key identifier: F6:73:E5:5F:54:0C:1F:AC:03:32:0F:BA:4D:C9:10:18:F7:10:42:E7
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01865EC46F14D52F94BB9CAEC3CA93D1F919
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/9nPlX1QMH6wDMg-6TckQGPcQQuc.roa
Signing time: Fri 17 Feb 2023 09:46:17 +0000
ROA not before: Fri 17 Feb 2023 09:46:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 93.114.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:c4:6f:14:d5:2f:94:bb:9c:ae:c3:ca:93:d1:f9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Feb 17 09:46:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f673e55f540c1fac03320fba4dc91018f71042e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ba:e9:7c:6f:32:d0:b5:03:b0:c5:7a:d0:ef:
49:c0:a4:0a:7c:e2:59:ce:1c:23:7d:9d:46:d0:59:
b7:5f:1b:8e:dd:70:d9:90:be:22:c9:e6:4a:32:1e:
23:29:86:ec:10:45:2c:ee:40:e3:95:9d:13:ab:a9:
ad:15:65:30:27:d7:ef:6b:b3:55:62:39:6d:c8:b7:
54:25:37:a0:65:a8:fa:57:89:9b:84:f5:36:2b:14:
21:81:78:2a:42:ec:63:5f:63:2e:3d:65:85:d0:83:
5d:a8:78:db:a2:df:ff:b2:fc:25:e9:df:bd:f6:d5:
5a:22:71:b4:6d:1e:94:c9:38:6e:b9:4f:95:00:28:
a9:79:ab:77:ef:41:66:55:e5:f5:3c:3e:f1:1f:ec:
44:ec:8c:c2:33:27:33:8e:5a:32:bb:e1:50:d6:2d:
f5:27:da:26:44:0c:73:91:b6:ce:12:1c:a3:66:a0:
84:95:be:f8:00:14:34:eb:6a:13:4c:c7:20:f3:6b:
06:76:2d:f2:25:a2:4b:34:ea:9a:25:8a:cc:32:89:
73:5a:d2:9c:7d:59:7d:5e:2a:54:ed:ea:5a:9b:b7:
06:44:6d:26:2e:80:f5:ec:88:fd:4f:a5:a0:78:89:
2a:31:f5:d8:87:09:c3:f4:66:29:3f:93:d5:3d:64:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:73:E5:5F:54:0C:1F:AC:03:32:0F:BA:4D:C9:10:18:F7:10:42:E7
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/9nPlX1QMH6wDMg-6TckQGPcQQuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.61.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:11:a3:45:31:2d:2b:72:b3:50:ac:44:59:d6:04:63:12:2b:
2d:f9:a2:89:c3:20:6b:e5:9e:f2:96:fe:8f:11:bc:03:bd:28:
3e:b9:3f:a7:b1:df:03:3c:5d:5b:28:80:5f:29:d9:88:53:de:
8a:a5:52:88:de:c9:5d:d0:d9:7b:91:d9:80:29:7b:4b:31:a2:
88:a5:bd:bd:27:27:e3:9b:b9:06:2b:20:fd:c4:d8:f4:ae:16:
a0:e6:3a:ca:cd:cf:3b:41:b0:3d:58:d6:9c:d7:63:16:0f:a7:
33:e9:b5:7a:72:b9:53:fb:46:6e:ea:09:4b:70:26:f8:e4:58:
5f:a6:f5:f6:17:4b:e3:5b:58:15:3e:78:7b:48:ba:92:0c:a6:
39:e0:63:81:d1:cf:61:9f:05:e0:84:e8:44:22:3e:e8:62:b1:
bb:f3:ea:cc:19:f5:ad:46:84:93:24:fe:c9:5c:44:04:a4:40:
2f:3b:2f:5c:c4:4f:32:d9:76:b2:78:27:91:58:ee:ee:1f:7b:
03:d6:74:75:09:a1:3b:62:e6:9c:90:2b:be:4f:33:5f:3c:18:
db:de:fc:5a:14:4e:4d:70:b7:f3:6d:05:2b:ae:09:cd:7b:93:
12:b7:5e:cd:4c:4c:04:9c:c7:f3:c1:6f:45:34:e5:02:8b:2c:
04:42:38:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZexG8U1S+Uu5yuw8qT0fkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjMwMjE3MDk0NjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjczZTU1ZjU0MGMxZmFjMDMzMjBmYmE0ZGM5MTAxOGY3MTA0MmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbrpfG8y0LUDsMV60O9JwKQKfOJZ
zhwjfZ1G0Fm3XxuO3XDZkL4iyeZKMh4jKYbsEEUs7kDjlZ0Tq6mtFWUwJ9fva7NV
YjltyLdUJTegZaj6V4mbhPU2KxQhgXgqQuxjX2MuPWWF0INdqHjbot//svwl6d+9
9tVaInG0bR6UyThuuU+VACipeat370FmVeX1PD7xH+xE7IzCMyczjloyu+FQ1i31
J9omRAxzkbbOEhyjZqCElb74ABQ062oTTMcg82sGdi3yJaJLNOqaJYrMMolzWtKc
fVl9XipU7epam7cGRG0mLoD17Ij9T6WgeIkqMfXYhwnD9GYpP5PVPWQ6PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPZz5V9UDB+sAzIPuk3JEBj3EELnMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvOW5QbFgxUU1INndETWctNlRja1FHUGNRUXVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXI9MA0G
CSqGSIb3DQEBCwUAA4IBAQANEaNFMS0rcrNQrERZ1gRjEist+aKJwyBr5Z7ylv6P
EbwDvSg+uT+nsd8DPF1bKIBfKdmIU96KpVKI3sld0Nl7kdmAKXtLMaKIpb29Jyfj
m7kGKyD9xNj0rhag5jrKzc87QbA9WNac12MWD6cz6bV6crlT+0Zu6glLcCb45Fhf
pvX2F0vjW1gVPnh7SLqSDKY54GOB0c9hnwXghOhEIj7oYrG78+rMGfWtRoSTJP7J
XEQEpEAvOy9cxE8y2XayeCeRWO7uH3sD1nR1CaE7YuackCu+TzNfPBjb3vxaFE5N
cLfzbQUrrgnNe5MSt17NTEwEnMfzwW9FNOUCiywEQjjz
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:19 2023 by rpki-client on console-fra.rpki-client.org