Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/BtLwM5ke-acKzW_qP5CHBLIA0es.roa
File: BtLwM5ke-acKzW_qP5CHBLIA0es.roa (raw, json)
Hash identifier: V284M6VKwnLiFg3p3LpsAuK7st/5W6VWoZJlR5xF2RY=
Subject key identifier: 06:D2:F0:33:99:1E:F9:A7:0A:CD:6F:EA:3F:90:87:04:B2:00:D1:EB
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018BC8100F1341C950B56B23EAE845C7036D
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/BtLwM5ke-acKzW_qP5CHBLIA0es.roa
Signing time: Mon 13 Nov 2023 09:42:57 +0000
ROA not before: Mon 13 Nov 2023 09:42:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
89.46.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:10:0f:13:41:c9:50:b5:6b:23:ea:e8:45:c7:03:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Nov 13 09:42:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06d2f033991ef9a70acd6fea3f908704b200d1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:d1:33:89:2b:00:50:d3:ee:6b:19:8e:4e:
06:14:85:7c:c6:3b:60:86:0b:c8:4e:a8:68:35:b6:
5c:21:e1:3b:8d:d6:e8:fc:13:4f:1c:2a:79:78:36:
e8:e4:b1:db:79:c5:8f:88:76:bd:77:94:44:35:13:
cc:18:10:71:5d:5d:ae:03:65:b1:9e:00:f6:a7:61:
bd:d7:20:1f:48:01:ae:0a:6e:b7:a5:16:cd:f1:96:
3a:9d:0b:43:28:2e:28:6f:d6:82:b5:81:e0:1a:77:
23:79:fe:0d:3b:b5:83:fd:33:4f:b8:97:fa:8e:f1:
75:d5:93:9b:cc:26:0d:d0:2e:e7:41:bb:49:25:58:
da:b4:c2:e3:bc:61:54:3a:2f:60:d1:62:35:ca:3d:
cb:ff:38:52:09:54:87:ce:ca:f4:71:40:b4:62:3f:
de:a4:50:05:84:05:f8:95:6d:02:a6:6c:a3:fc:7e:
6e:d9:a6:63:4c:65:13:42:5d:66:5d:1b:7a:cc:d8:
7f:ee:81:8e:06:6d:9f:48:c0:1f:7d:1f:26:f2:b1:
c2:d9:f3:4d:86:b1:b5:06:09:a7:95:ad:79:5e:da:
18:5f:3c:d8:39:c8:d8:8b:56:a9:64:ef:1d:42:5e:
d0:97:78:b1:36:ff:af:68:c8:d6:c5:c2:0e:22:8e:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D2:F0:33:99:1E:F9:A7:0A:CD:6F:EA:3F:90:87:04:B2:00:D1:EB
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/BtLwM5ke-acKzW_qP5CHBLIA0es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.8.0/24
93.114.61.0/24
185.81.180.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:18:4e:89:87:d2:ac:5d:20:e8:0c:c9:51:96:a5:e8:ed:4f:
19:16:78:f7:a1:c4:f6:42:55:26:4b:5e:ce:e0:d9:c6:a4:c0:
85:93:62:0b:79:d6:2c:bc:72:db:09:80:25:8e:c2:29:bc:eb:
2a:44:28:be:76:32:a2:a1:8a:6f:be:5f:8a:22:f4:b8:77:c5:
6a:ed:f5:45:4c:f5:73:8f:53:e0:95:d1:ab:14:86:0f:4d:0e:
36:f7:da:75:a3:20:e1:97:36:8b:79:14:74:76:3c:f2:b4:a6:
1e:13:5f:af:29:b0:8d:8b:c7:ed:32:6b:3d:ca:ec:00:36:07:
76:99:e4:79:38:27:71:61:9a:b5:6a:27:ba:a2:c5:bc:a0:af:
99:51:57:61:8b:84:6c:cf:27:1e:ce:56:1a:0f:96:5f:99:4e:
6b:28:e5:c6:12:16:2d:eb:d7:a1:55:17:a0:c8:36:0d:15:27:
68:44:8c:d4:06:a1:69:1e:9e:ed:d1:b9:c8:ef:db:ca:4a:d7:
84:aa:c2:55:a4:e2:6d:40:5b:f5:47:a0:b4:1c:fb:59:09:79:
29:ac:ab:ff:19:d3:ab:04:d6:63:eb:0a:f7:09:35:c6:f5:5e:
33:75:4a:4e:0e:04:a1:0d:a4:45:d6:6f:e8:b9:01:4d:57:20:
89:3c:83:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 10:07:45 2023 by rpki-client on console-ams.rpki-client.org