Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/L53-CPsmb-x4dLcc5q-6bmwaEAY.roa
File: L53-CPsmb-x4dLcc5q-6bmwaEAY.roa (raw, json)
Hash identifier: wB7XUbXuWwkUEkiUCtV+ZeJ1Zyl4i/up4j/4utns6cw=
Subject key identifier: 2F:9D:FE:08:FB:26:6F:EC:78:74:B7:1C:E6:AF:BA:6E:6C:1A:10:06
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0188D2B1713E7A4DF1CC418DF0447B25980D
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/L53-CPsmb-x4dLcc5q-6bmwaEAY.roa
Signing time: Mon 19 Jun 2023 08:07:04 +0000
ROA not before: Mon 19 Jun 2023 08:07:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.243.179.0/24 maxlen: 24
91.243.176.0/24 maxlen: 24
89.46.10.0/24 maxlen: 24
93.114.60.0/24 maxlen: 24
93.114.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:b1:71:3e:7a:4d:f1:cc:41:8d:f0:44:7b:25:98:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jun 19 08:07:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f9dfe08fb266fec7874b71ce6afba6e6c1a1006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:1c:24:86:82:50:33:67:8b:cb:ba:45:45:
6f:90:a4:1c:fe:99:e7:c0:0c:13:6c:ba:4d:4a:eb:
76:7f:78:ab:f7:36:2d:c7:c0:68:26:84:99:89:20:
39:ba:fa:3e:de:be:59:88:db:dc:d1:02:8f:1e:db:
1a:76:00:de:e4:43:99:58:31:8a:5a:42:e2:de:de:
92:c2:58:88:1c:82:4f:cf:fa:a2:8a:80:9a:bb:ee:
22:72:fc:5f:ff:16:eb:30:bd:15:93:80:dd:ff:cb:
da:ee:5e:52:c9:a9:2b:d9:4f:ad:07:cd:a0:90:da:
93:2b:93:b8:0e:ca:89:d0:70:47:8f:cb:3b:dc:b4:
66:cf:9e:8e:46:d0:0b:9a:15:83:1f:b1:16:73:9f:
59:dd:53:06:8c:87:e8:88:d1:b9:09:ea:f6:99:04:
8e:98:e8:76:bf:8a:ab:4c:ca:73:6e:d7:cd:b8:5d:
f0:6b:7e:59:a3:fa:dd:c2:ba:48:23:bf:c0:f3:61:
cf:2a:e5:bf:1a:48:c3:c5:2a:0c:ee:50:bb:36:f2:
61:1c:a6:1f:f3:f1:10:07:89:b1:91:f4:09:75:e6:
85:b7:36:f9:42:56:50:f5:78:08:2d:53:d1:26:cc:
84:c4:1f:69:9a:98:2b:53:e0:33:ed:5c:dd:07:9f:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9D:FE:08:FB:26:6F:EC:78:74:B7:1C:E6:AF:BA:6E:6C:1A:10:06
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/L53-CPsmb-x4dLcc5q-6bmwaEAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
91.243.176.0/24
91.243.179.0/24
93.114.60.0/23
Signature Algorithm: sha256WithRSAEncryption
63:88:5f:7f:8d:fd:9c:89:07:81:3a:68:fc:00:7e:2a:c0:aa:
71:40:d0:c1:1d:7b:e8:8a:b9:a4:3c:99:bb:07:79:27:ca:93:
8b:75:4a:1a:b1:ed:e2:94:0d:36:a9:ea:e2:d6:1c:09:b2:27:
9c:85:21:1b:52:c0:b5:d6:53:20:63:d7:38:b5:98:b5:83:74:
ed:ea:72:13:8a:6c:b5:11:52:54:e3:79:23:72:94:11:db:28:
e7:be:d8:dd:1f:e0:d0:78:c4:fc:5b:d8:3e:83:7b:19:ec:d7:
cb:6b:12:d0:cf:53:1e:2f:5f:23:a7:b4:86:72:d2:39:7d:a4:
91:03:a8:e9:bf:e5:c4:c9:ad:5e:75:9b:71:31:28:bc:c9:1d:
3b:8f:e7:a2:e7:e9:3c:bf:06:32:cd:c4:88:86:c7:37:23:b9:
60:7f:02:83:7e:00:b8:fa:c7:19:b8:0a:8b:30:19:10:51:71:
41:54:a1:76:df:7e:5c:ff:b6:2c:f4:71:fa:8b:26:09:9d:7c:
1e:c2:b7:b2:04:21:52:0a:61:79:ea:4f:73:ce:1b:18:29:51:
7c:65:a2:4b:c0:45:a4:02:91:11:0f:e5:59:4d:06:3c:c1:35:
f4:0c:2d:7a:7c:ce:9a:2d:fd:be:35:0b:68:d9:bc:ad:14:2c:
2b:8f:92:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:19 2023 by rpki-client on console-fra.rpki-client.org