Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/JUtYKp8FYSxi18ZOKg_dI2dS2ks.roa
File: JUtYKp8FYSxi18ZOKg_dI2dS2ks.roa (raw, json)
Hash identifier: souVuOgfbO5r/8BepNg/861zTCrjN2CubpMDPTgnt64=
Subject key identifier: 25:4B:58:2A:9F:05:61:2C:62:D7:C6:4E:2A:0F:DD:23:67:52:DA:4B
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01891AAB8E399BAE67CCAF4AB60BC6602BF6
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/JUtYKp8FYSxi18ZOKg_dI2dS2ks.roa
Signing time: Mon 03 Jul 2023 07:33:17 +0000
ROA not before: Mon 03 Jul 2023 07:33:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.243.179.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
93.114.60.0/24 maxlen: 24
93.114.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1a:ab:8e:39:9b:ae:67:cc:af:4a:b6:0b:c6:60:2b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jul 3 07:33:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=254b582a9f05612c62d7c64e2a0fdd236752da4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:57:43:b7:48:76:af:75:13:2e:ca:88:d5:a2:
05:27:02:88:c4:40:e2:22:e5:5b:f4:7c:57:a5:0c:
04:e8:7c:2e:75:6c:41:fa:1c:83:36:05:ba:e7:03:
4c:47:a2:d9:5c:3e:67:26:09:a5:8c:a6:5a:b6:83:
d0:bb:6e:d0:58:36:bb:aa:1b:2b:2a:fb:d6:af:ea:
da:3d:c2:14:9c:fb:4e:7e:0c:62:b3:2b:89:98:a6:
84:30:71:86:c3:9e:58:43:62:29:7e:dd:64:27:f0:
bd:f6:56:17:22:e8:f7:5f:7b:40:a7:b9:94:af:85:
f4:5c:a1:b9:84:71:f2:ea:cc:f7:32:54:38:62:ee:
95:31:fc:a2:56:ca:c7:f8:18:04:99:35:43:b6:66:
83:ed:4e:f2:1f:23:d3:26:8a:27:b5:fa:77:ba:20:
08:3f:ef:70:13:95:b9:19:1b:6b:26:8c:78:99:7d:
79:2e:8f:af:2f:6d:c1:62:b6:2b:79:64:26:4a:e5:
ff:76:9b:68:0f:8b:15:ac:b6:4b:99:ed:24:d0:f6:
80:8e:83:bf:a5:42:4f:30:33:d3:a0:60:b9:fb:32:
81:f0:1e:e5:18:7a:bb:5c:ff:13:73:44:3a:e5:cf:
1a:de:90:53:b1:df:f5:41:da:43:d2:3b:67:6e:b2:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4B:58:2A:9F:05:61:2C:62:D7:C6:4E:2A:0F:DD:23:67:52:DA:4B
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/JUtYKp8FYSxi18ZOKg_dI2dS2ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.179.0/24
93.114.60.0/23
185.81.180.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:fc:88:39:eb:97:40:a7:e4:f0:6d:ce:b7:44:c8:c3:60:ac:
30:c7:c2:e3:7f:9a:7a:c5:f3:0a:48:f0:46:0e:37:e2:1d:4d:
b6:ed:8d:fe:95:df:79:9b:d1:15:52:58:84:b7:8b:73:ad:91:
69:08:e1:82:29:95:85:50:a7:87:77:c8:2a:ff:8a:2d:15:4f:
46:b6:80:7e:2f:ca:85:63:8d:75:21:56:3b:f0:4e:3d:69:78:
bb:c9:d4:88:57:08:f8:46:a3:33:a8:34:40:d1:53:c4:9a:b6:
b9:e5:18:04:b1:11:c0:ec:7f:26:1c:05:fe:41:92:f4:65:66:
38:c9:73:75:31:b3:47:7a:00:1e:26:8f:79:4e:dc:6a:a3:a0:
bf:bf:6f:47:38:1c:48:71:c0:73:f9:5d:a9:5d:ab:4b:8e:29:
19:ed:f2:18:15:4f:d1:e3:ad:2c:09:b6:93:7b:b8:1a:b8:47:
42:03:6b:11:9d:41:7e:dc:f0:3d:bb:16:e9:3f:27:60:9e:19:
52:e4:cb:c2:13:42:b5:da:ac:5c:8c:77:0a:23:6a:99:14:f4:
73:d8:16:bc:9b:ca:28:94:50:09:ec:13:35:86:7e:6a:fa:ab:
c1:86:f7:1b:18:6e:73:78:f7:31:2f:70:65:7d:f5:dd:0a:74:
3b:f3:32:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 11:41:56 2023 by rpki-client on console-fra.rpki-client.org