Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/NvutR0LOUeyC8ovgTvFGGVo75q0.roa
File: NvutR0LOUeyC8ovgTvFGGVo75q0.roa (raw, json)
Hash identifier: I3sMtqfd4CBOWUWRqxXStaoHfduo+4D0hDJubKLt3LI=
Subject key identifier: 36:FB:AD:47:42:CE:51:EC:82:F2:8B:E0:4E:F1:46:19:5A:3B:E6:AD
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0189AB9885E4C4D53227107623D8AFCA793D
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/NvutR0LOUeyC8ovgTvFGGVo75q0.roa
Signing time: Mon 31 Jul 2023 10:57:26 +0000
ROA not before: Mon 31 Jul 2023 10:57:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.243.179.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:98:85:e4:c4:d5:32:27:10:76:23:d8:af:ca:79:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jul 31 10:57:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36fbad4742ce51ec82f28be04ef146195a3be6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3c:b9:ff:13:16:dc:f3:02:4a:13:2f:33:ae:
a3:c9:b1:e3:b1:0e:89:3e:54:73:5d:03:e2:ee:03:
a7:c0:c8:c3:d2:9f:2e:b7:17:0a:e8:d3:b4:97:a0:
9f:e2:48:c8:b6:da:f3:9a:b9:fb:25:cc:f3:fe:71:
29:9d:b3:69:88:c5:77:49:e1:67:8f:dd:ce:9a:16:
43:26:b9:ad:e9:cd:16:4b:b1:6c:b4:7d:c4:09:0e:
c6:ab:d8:c7:54:22:41:5f:f4:88:28:ff:1b:cc:65:
96:7c:e7:ac:1c:d1:84:35:3b:14:82:17:11:96:36:
46:91:c5:3f:ca:8e:89:8e:11:75:6e:f0:c3:5b:b6:
cf:f1:ce:de:4e:7b:d2:09:54:ff:df:a9:81:25:00:
03:b1:1e:8f:4c:71:61:ea:c7:e1:e9:d9:f5:04:42:
26:5e:01:eb:51:07:98:d4:bc:a2:62:97:d4:e5:81:
77:f7:fa:69:9a:2f:18:5b:c0:50:41:e9:dd:a6:f6:
9a:f3:22:1e:c4:08:da:9c:20:fb:9a:68:4b:e6:af:
d0:14:aa:d1:e8:9a:60:d9:42:c6:af:68:02:81:98:
49:63:ed:0e:f7:bf:c8:34:bc:92:f5:15:1f:31:d9:
7e:ff:12:f0:98:67:c6:ba:b4:71:43:53:f2:d1:b7:
34:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FB:AD:47:42:CE:51:EC:82:F2:8B:E0:4E:F1:46:19:5A:3B:E6:AD
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/NvutR0LOUeyC8ovgTvFGGVo75q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.179.0/24
93.114.61.0/24
185.81.180.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:69:ed:2d:01:e8:bc:e5:7a:b1:1a:08:73:20:d6:56:3e:a4:
fc:ac:ed:7c:0b:db:3b:ef:9a:df:9c:21:52:80:05:d4:3b:00:
4c:bf:d7:50:1f:5c:d3:7e:74:bc:c5:05:5f:85:e6:13:44:04:
a8:f5:35:85:3b:bc:48:f3:af:a0:4b:2f:91:40:9c:31:ba:95:
64:90:39:9d:40:20:ab:32:13:bb:1a:66:ae:34:fb:45:34:84:
0c:6b:5f:66:23:99:ca:b7:b9:d0:0c:92:03:e0:39:ed:0c:e3:
3f:0a:2d:57:5e:1c:b5:9d:b4:8b:8b:fe:8d:3b:72:a7:6e:06:
2c:22:6b:2e:8d:6c:67:6b:be:26:ef:4a:22:63:ad:49:5e:03:
8e:d3:37:b0:eb:30:2c:46:d3:42:43:78:86:51:9a:92:33:63:
fc:81:86:e4:3a:34:ff:30:60:95:d4:d0:af:51:c9:b7:2c:b3:
d6:c0:ed:47:79:c7:de:d6:7f:19:71:76:bb:b4:83:8a:7e:fb:
d7:17:c1:26:ec:94:0c:b3:44:03:d2:0b:1b:50:09:15:7c:b8:
6e:cc:b5:6f:8b:69:67:84:e4:7f:12:19:e1:a4:c8:81:a9:ec:
33:95:ad:4e:1a:d2:57:aa:27:de:fb:e4:f4:70:d2:56:6b:e1:
04:a2:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 12:00:43 2023 by rpki-client on console-fra.rpki-client.org