Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/E3cZilwoFG_QZhaAJTVFHDvNyYk.roa
File: E3cZilwoFG_QZhaAJTVFHDvNyYk.roa (raw, json)
Hash identifier: Yo6b0fFIHGqPv9nsOm1IiVIcArNupXP/MEn4RT08NWM=
Subject key identifier: 13:77:19:8A:5C:28:14:6F:D0:66:16:80:25:35:45:1C:3B:CD:C9:89
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018A94608E29D089747033F4B0CDA952724E
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/E3cZilwoFG_QZhaAJTVFHDvNyYk.roa
Signing time: Thu 14 Sep 2023 15:47:50 +0000
ROA not before: Thu 14 Sep 2023 15:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.243.179.0/24 maxlen: 24
91.243.176.0/24 maxlen: 24
195.242.241.0/24 maxlen: 24
195.242.243.0/24 maxlen: 24
185.81.181.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
93.114.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:94:60:8e:29:d0:89:74:70:33:f4:b0:cd:a9:52:72:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Sep 14 15:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1377198a5c28146fd06616802535451c3bcdc989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8f:f4:16:1f:7a:df:64:ef:4f:4d:08:f8:35:
0a:7d:75:5a:d4:41:36:17:6d:b8:a2:91:60:34:94:
b5:01:cc:75:0e:32:fd:07:eb:41:29:a7:8d:67:43:
50:5a:0a:50:18:be:5c:b1:32:b3:0a:31:3a:60:1c:
c6:f3:08:92:a0:1a:3b:f3:80:cc:96:c1:f7:a6:ad:
c1:48:40:6e:d3:10:f7:4d:ec:9f:4e:44:16:8a:6d:
7a:2a:bb:cf:34:62:01:92:4d:63:d5:f2:10:8d:81:
4a:58:e3:75:d5:6d:2c:e0:a6:5a:8c:3a:ce:6c:f2:
f7:cf:64:01:aa:2a:da:65:58:3b:89:35:bd:28:04:
36:4e:81:f0:19:5c:96:2e:2e:07:28:e6:53:1e:d4:
c5:44:a3:c6:47:4f:c2:4d:d7:27:fd:1c:f2:41:93:
b2:0f:d7:42:77:3e:55:57:8f:f4:76:c2:01:73:57:
18:e7:59:c8:19:4a:0e:f5:a3:96:52:f9:60:34:e7:
f4:c2:aa:b5:54:ec:99:dc:4d:f1:c5:26:7f:df:a3:
b1:8c:88:53:f1:c6:2c:2b:53:96:32:89:cd:b5:4d:
35:51:39:22:97:30:a4:0b:15:f0:ed:80:9f:da:c3:
83:85:bc:cc:76:8d:df:3b:de:35:4b:41:6d:5f:a9:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:77:19:8A:5C:28:14:6F:D0:66:16:80:25:35:45:1C:3B:CD:C9:89
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/E3cZilwoFG_QZhaAJTVFHDvNyYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.176.0/24
91.243.179.0/24
93.114.61.0-93.114.62.255
185.81.180.0/23
195.242.241.0/24
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:8c:ff:5d:4d:5b:76:08:b4:87:e4:10:58:8a:f9:9e:58:e7:
67:90:62:ee:81:4c:7b:ea:d0:d4:65:59:5d:f0:5a:26:e1:47:
60:3b:c4:46:be:28:46:11:5b:cb:b5:52:73:09:95:f3:93:b6:
91:b2:2c:81:9a:4a:a1:a7:43:cb:bd:b9:2c:98:f7:d6:9f:25:
61:3d:a3:25:2d:f9:41:1f:b0:45:f2:89:fa:46:b7:1e:e8:9e:
94:53:e7:d9:7c:db:a0:17:85:76:88:c4:3a:00:f4:a0:cc:b5:
9a:75:7d:d2:7c:02:d1:09:94:5a:9f:7f:31:e9:ad:9b:1a:8f:
4d:d0:27:9f:b7:3a:d4:67:fd:75:70:bb:54:80:49:41:53:51:
4d:94:3c:c0:d2:b1:5a:26:d9:45:e3:2d:38:e0:5e:f5:19:1f:
81:b4:64:cf:fe:06:e0:ec:39:46:1f:51:7b:5c:76:7a:da:87:
4c:41:2e:01:c3:19:37:2c:cf:37:0b:92:df:e5:ff:e0:2b:29:
a6:e1:64:f7:4f:b6:07:1b:5f:c7:90:c0:25:dc:15:ae:63:b2:
76:0c:08:94:6e:c3:2e:3c:67:e7:c0:ba:86:cc:96:13:1c:ea:
13:f1:5c:74:a6:12:6e:e1:09:7c:c7:06:ee:95:ab:3f:ad:be:
16:40:ea:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 08:19:37 2023 by rpki-client on console-ams.rpki-client.org