Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Ej2NLUKgrHbNIJNsjUA4wqxoi18.roa
File: Ej2NLUKgrHbNIJNsjUA4wqxoi18.roa (raw, json)
Hash identifier: a8gbr2AC9OhFpnsMY6D0sHioS38pGDM629T6oikRVM0=
Subject key identifier: 12:3D:8D:2D:42:A0:AC:76:CD:20:93:6C:8D:40:38:C2:AC:68:8B:5F
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01857002930560A82BF25646F7DE4D80BFC2
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Ej2NLUKgrHbNIJNsjUA4wqxoi18.roa
Signing time: Mon 02 Jan 2023 01:04:54 +0000
ROA not before: Mon 02 Jan 2023 01:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 91.243.178.0/24 maxlen: 24
93.114.62.0/24 maxlen: 24
89.46.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:93:05:60:a8:2b:f2:56:46:f7:de:4d:80:bf:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 2 01:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=123d8d2d42a0ac76cd20936c8d4038c2ac688b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:8b:26:5a:b6:26:a8:64:fb:22:86:94:21:
8a:fe:4b:0f:12:9a:2a:c3:f2:f3:50:08:19:28:8a:
5e:81:15:c4:d5:26:2c:f7:94:fd:73:53:be:eb:d8:
0b:d3:44:0b:e8:a0:1f:4a:17:44:53:d1:43:b5:a0:
71:de:f2:4e:21:dd:6a:24:52:0f:27:5c:9a:d6:34:
ef:c7:77:6f:b7:82:7d:6d:83:6a:d8:cf:39:3c:1b:
d4:f0:65:55:2a:e8:bb:4a:b5:06:11:6d:6c:4a:96:
03:9b:9f:27:12:26:6c:ce:1f:9a:2e:3e:04:60:85:
62:87:f7:18:70:04:82:e6:ce:f7:5b:eb:0f:ea:a9:
4b:1d:21:87:90:fc:74:12:2e:01:40:62:80:6e:f7:
b8:b4:45:b6:fa:96:5a:3d:a2:19:7f:81:60:fb:dc:
27:75:0e:0a:65:04:14:5d:38:e9:a7:83:22:79:2b:
49:f1:96:11:fe:3f:28:69:3c:32:a2:20:31:b0:73:
c6:20:d5:ff:07:c4:7b:57:4a:94:5d:db:14:87:d5:
1f:0a:d2:83:9a:48:52:29:e6:b2:9b:31:14:03:a6:
be:1b:56:e8:15:8d:9d:33:54:9b:b2:21:ea:5d:86:
c5:d6:27:75:35:40:29:37:18:f7:01:b3:97:5b:dd:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3D:8D:2D:42:A0:AC:76:CD:20:93:6C:8D:40:38:C2:AC:68:8B:5F
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Ej2NLUKgrHbNIJNsjUA4wqxoi18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.11.0/24
91.243.178.0/24
93.114.62.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ef:39:5e:9a:bb:26:bf:dd:2c:c7:ab:e2:98:cb:d4:67:d2:
1c:af:18:b7:72:d5:14:17:fd:ff:ab:7e:01:76:29:7b:27:c0:
b1:b3:de:98:3f:5c:4d:46:47:ac:05:0a:72:31:0f:75:da:4f:
6f:dc:fe:e6:1c:64:39:fc:1e:e7:4f:0a:ee:7e:b3:b8:fd:96:
b0:dc:87:f4:95:6a:71:0e:50:86:bd:a8:ff:c3:71:b5:aa:86:
7a:a2:11:f5:49:22:11:2e:22:90:d9:e8:39:1f:9c:dc:c3:53:
03:dc:52:ef:d9:84:2d:2f:5c:e1:91:de:d0:af:cd:f4:05:91:
e0:66:a3:9b:89:41:6b:64:c0:58:1f:56:4f:69:66:e1:e7:4a:
da:0c:d6:e4:68:1f:cb:3b:48:5f:00:ae:be:8e:08:40:f8:b2:
49:62:13:07:b5:6d:68:79:b5:26:bf:69:a1:97:d4:94:47:d4:
db:f0:3a:00:92:02:8d:6e:db:55:31:69:bd:14:83:ce:c7:61:
0d:e1:f9:04:c0:30:ab:a0:52:00:9c:35:a6:50:c4:8b:ae:16:
17:f3:64:23:89:aa:db:5e:2a:db:71:23:30:35:73:e6:bb:2b:
85:df:1b:37:b3:e8:b6:aa:b0:20:85:26:54:6c:d2:20:6c:8a:
2a:ae:68:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 16:10:24 2023 by rpki-client on console-ams.rpki-client.org