Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/E38fD4owdbkOIgMS5NgxrLNl8uA.roa
File: E38fD4owdbkOIgMS5NgxrLNl8uA.roa (raw, json)
Hash identifier: tQaS5J8bD/5vuE43xQitwzFCUGD15pgwZihBE6Vu9hE=
Subject key identifier: 13:7F:1F:0F:8A:30:75:B9:0E:22:03:12:E4:D8:31:AC:B3:65:F2:E0
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018570028E3A49D34072DCDF73B3D5E00AD6
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/E38fD4owdbkOIgMS5NgxrLNl8uA.roa
Signing time: Mon 02 Jan 2023 01:04:53 +0000
ROA not before: Mon 02 Jan 2023 01:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36351
IP address blocks: 89.46.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8e:3a:49:d3:40:72:dc:df:73:b3:d5:e0:0a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 2 01:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=137f1f0f8a3075b90e220312e4d831acb365f2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b2:82:d3:50:15:5a:c8:54:4e:c2:be:35:55:
f3:50:97:70:e5:7f:7e:a7:16:df:bc:ca:e2:6d:cd:
ed:68:9f:5c:5c:75:16:76:5d:8b:62:ea:81:2e:0d:
5c:8b:9e:4b:b5:af:19:e3:06:8d:de:7e:b2:e4:fc:
34:25:69:c9:c6:a1:a8:7a:4d:89:4e:c7:95:fa:73:
f6:6b:7e:24:64:9e:16:f6:59:98:cc:dd:65:d4:49:
ef:1e:b0:0f:d4:1d:9d:d9:69:40:78:45:50:65:67:
ba:66:d4:eb:dd:50:ec:86:9c:ee:a7:66:f6:ba:50:
34:8a:4c:5e:56:a0:88:91:53:d7:20:6e:a0:43:6e:
a7:19:dd:9e:71:3b:08:d8:01:82:2f:8d:f4:86:7c:
73:01:c3:0c:d3:d2:8a:09:a6:37:79:b1:d2:58:d2:
6b:ac:db:87:f9:c5:be:86:46:b6:63:91:33:e6:ae:
70:1b:d4:fc:87:28:c8:60:35:4a:0c:34:2a:6e:b8:
7c:80:d5:7c:fe:54:79:43:52:91:97:dc:08:6d:59:
a5:b1:63:29:66:fa:b8:99:79:46:5f:c5:cb:77:f3:
c9:13:e1:29:bc:2b:78:3b:fe:64:3f:81:05:ab:6d:
b8:ee:61:21:dc:0b:e0:19:58:d6:a0:a7:69:e7:9a:
c9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7F:1F:0F:8A:30:75:B9:0E:22:03:12:E4:D8:31:AC:B3:65:F2:E0
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/E38fD4owdbkOIgMS5NgxrLNl8uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.9.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:11:5f:cd:38:bd:ec:c7:11:b6:7f:89:e2:31:47:2c:bd:0b:
02:a1:74:7b:40:a0:fb:30:37:05:54:22:cc:3b:33:e0:02:5e:
b7:c2:cd:65:69:3d:00:f3:d9:16:5d:e6:62:87:8a:6c:b6:3f:
d2:1f:f1:93:34:bf:35:5b:69:cb:82:54:73:f5:08:77:ff:6d:
7f:ca:4b:c4:a4:79:c2:33:07:8f:c3:33:cf:fc:83:ef:81:51:
b0:3f:2b:7d:99:48:54:9f:70:98:b7:7d:6c:83:de:38:91:3f:
40:2f:78:ca:e9:8a:81:c4:1e:4a:9a:a8:9c:21:14:1e:b9:80:
50:41:2f:ee:38:8e:07:cd:ee:e0:bf:de:aa:98:ea:c7:2b:f9:
b9:ab:58:1b:59:83:79:fe:55:14:7f:fb:c3:46:23:97:29:fe:
0f:d0:60:0f:d8:56:7a:96:46:ee:fb:bb:f8:08:6c:4d:ae:04:
d6:8f:68:10:1b:8b:59:90:e4:70:44:78:ef:b7:f4:f0:9d:e6:
25:aa:37:9f:5f:75:d6:56:6b:6b:a8:68:85:3b:8a:cf:42:80:
dd:fe:6a:cd:17:cb:41:5b:47:b4:ab:69:19:06:3e:50:9a:fc:
bf:6c:1b:8d:44:09:bf:45:3a:61:64:89:2e:b9:5c:b9:dd:65:
c2:99:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 15:24:02 2023 by rpki-client on console-fra.rpki-client.org