Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Djc-Wnrin7Wn8lQrG1unWTTz7mo.roa
File: Djc-Wnrin7Wn8lQrG1unWTTz7mo.roa (raw, json)
Hash identifier: H9EjCXE+sP+srXg4N7mHynSjtcwwrejI9TkqRONgxHE=
Subject key identifier: 0E:37:3E:5A:7A:E2:9F:B5:A7:F2:54:2B:1B:5B:A7:59:34:F3:EE:6A
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018570028F5AFCDDD50C7DE4ED5DEF08DBAD
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Djc-Wnrin7Wn8lQrG1unWTTz7mo.roa
Signing time: Mon 02 Jan 2023 01:04:53 +0000
ROA not before: Mon 02 Jan 2023 01:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43431
IP address blocks: 93.114.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8f:5a:fc:dd:d5:0c:7d:e4:ed:5d:ef:08:db:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 2 01:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e373e5a7ae29fb5a7f2542b1b5ba75934f3ee6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:00:2c:55:34:e7:4a:0c:f9:3a:53:8b:97:
72:1c:6a:10:46:17:9f:d9:17:aa:9c:cd:1b:2f:ec:
fc:2e:6f:95:31:4c:48:fa:d8:7c:cc:86:9b:89:cd:
0e:59:c9:af:e4:58:20:50:cd:db:93:f8:7a:f6:ae:
95:34:f2:e2:0c:5f:24:2a:f3:c8:6e:da:91:e4:d1:
04:90:7e:62:5f:76:b0:00:6e:b7:b6:06:8b:ef:ce:
f0:ff:e6:f9:f5:f1:69:d2:22:9c:02:fa:37:7b:83:
97:78:70:61:c7:e3:d1:19:eb:a9:d6:3b:da:55:5a:
67:93:24:5b:cc:e7:c2:3a:40:4a:6b:b3:5b:b0:02:
5c:47:e0:02:03:03:de:d5:0c:22:4a:ed:07:27:3e:
a9:08:f3:6e:03:65:0a:a0:54:91:37:3c:15:7e:02:
97:19:41:ed:50:d3:ee:38:fe:da:27:b9:11:3a:f1:
d1:8b:30:99:7a:e5:ef:99:73:10:d5:1b:dd:74:cb:
44:89:87:b8:99:0e:98:2c:ef:09:ac:30:88:ac:d2:
f9:57:25:0d:f1:81:1f:bd:f9:3e:bf:ae:f0:5a:cc:
4d:a6:15:09:57:ad:32:e5:42:8d:72:50:9d:bc:b6:
64:af:d2:d7:1d:5c:36:a6:3c:93:4b:64:e1:c8:2f:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:37:3E:5A:7A:E2:9F:B5:A7:F2:54:2B:1B:5B:A7:59:34:F3:EE:6A
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Djc-Wnrin7Wn8lQrG1unWTTz7mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:96:51:7d:80:28:9c:fb:7d:e3:da:a9:0f:61:0a:9a:e5:50:
cb:c9:1c:2d:6b:85:65:63:ad:ea:84:ac:0c:06:2e:94:ba:10:
e9:59:70:bf:ff:44:78:ab:a4:9f:fa:de:d4:a3:cf:0d:2d:40:
07:de:ab:00:ca:1f:6b:00:e5:02:cf:ee:ea:4c:d3:01:1d:c0:
05:fd:f4:08:be:60:ad:ad:3c:a0:79:0f:5d:58:0c:cd:49:4c:
f5:87:aa:ad:10:61:23:eb:98:00:dd:68:d8:a6:c2:32:6a:4b:
54:53:54:34:42:32:7a:17:86:42:85:f3:aa:ff:0f:59:84:b7:
91:c6:c2:bf:45:17:e3:ef:11:d1:cf:c5:48:ac:06:a2:99:eb:
e3:3f:65:28:1a:25:a9:85:95:a2:9d:8f:da:54:41:a6:5a:e8:
eb:3b:53:6c:d0:0f:91:2e:c4:21:cb:ac:5f:13:ed:99:e8:89:
bb:c7:c2:ce:b8:43:51:e2:3d:73:0b:5c:5c:f8:ea:f9:5a:2b:
82:7f:3d:22:0d:a6:35:a8:0e:a7:4c:5c:95:76:ee:22:e8:69:
25:42:98:68:d2:ab:9c:0e:17:97:48:50:8b:87:e5:1b:ef:fe:
f9:73:dc:ae:93:be:fd:eb:07:ff:3e:5d:c2:a2:f3:49:3e:2d:
25:f1:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:04 2023 by rpki-client on console-ams.rpki-client.org