Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/QzV7X_gHIYQcS_xwe60k4H4AcIw.roa
File: QzV7X_gHIYQcS_xwe60k4H4AcIw.roa (raw, json)
Hash identifier: vynUi3gcPunMJvT5LytA3ah+K64ePaPl8dJR6yf158I=
Subject key identifier: 43:35:7B:5F:F8:07:21:84:1C:4B:FC:70:7B:AD:24:E0:7E:00:70:8C
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018770874ED068E6759853F089A55EAA4867
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/QzV7X_gHIYQcS_xwe60k4H4AcIw.roa
Signing time: Tue 11 Apr 2023 13:35:28 +0000
ROA not before: Tue 11 Apr 2023 13:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.242.240.0/24 maxlen: 24
93.114.61.0/24 maxlen: 24
93.114.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:87:4e:d0:68:e6:75:98:53:f0:89:a5:5e:aa:48:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Apr 11 13:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43357b5ff80721841c4bfc707bad24e07e00708c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:27:8c:f4:3c:c0:68:bc:48:e9:f8:ce:65:21:
84:31:d7:8c:85:bd:22:b1:3a:c6:9a:66:7a:7d:f8:
3b:14:34:6c:76:71:5b:5e:39:51:90:61:2f:c1:b5:
b6:2a:37:81:78:8c:f2:d9:09:ec:58:b8:3f:7c:77:
97:72:18:d0:84:2a:0b:63:a9:fa:6d:10:f5:52:b9:
e0:01:43:97:5c:d7:53:70:ef:bf:f5:3f:2a:b9:57:
c7:56:1e:20:92:dd:ca:c8:ca:70:c9:07:52:64:a5:
76:66:9b:c9:ac:66:4d:8e:9b:a1:55:2d:94:ec:7f:
d9:0b:f4:ca:d8:9e:d2:4f:95:b4:99:92:25:4d:e3:
0f:6d:f3:fe:ee:20:45:66:fe:e6:21:e0:56:0f:32:
93:c0:7f:63:bb:97:31:3d:1c:2d:85:5d:63:52:9f:
88:3f:dd:ac:26:75:a1:fb:51:db:d4:ae:e7:cb:a3:
e6:83:cd:5b:d0:e0:3d:b5:8e:2e:ac:48:a6:9f:01:
59:bd:24:2d:49:b1:74:90:fd:ce:a4:f0:a5:5b:6d:
ff:7b:8b:cb:7d:48:56:12:8c:d7:76:09:87:eb:a9:
30:bb:83:6a:49:48:ad:ff:88:63:b3:c2:a0:49:04:
e4:e0:d1:8a:0d:80:76:f5:ed:53:bb:65:99:c6:cb:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:35:7B:5F:F8:07:21:84:1C:4B:FC:70:7B:AD:24:E0:7E:00:70:8C
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/QzV7X_gHIYQcS_xwe60k4H4AcIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.60.0/23
195.242.240.0/24
Signature Algorithm: sha256WithRSAEncryption
11:22:82:1e:34:bd:37:fd:ac:9d:48:74:a6:6e:2f:43:e2:ac:
4e:d2:14:8e:1c:0f:e3:b1:5f:ca:c8:42:02:94:e6:0f:cb:5b:
3c:61:a8:14:76:46:29:58:e1:28:8b:94:e9:ce:d1:16:55:9b:
98:d7:ac:c0:f3:b3:64:de:be:11:72:ba:d8:f6:b3:a1:79:c0:
99:b5:df:2a:11:50:1b:59:78:ba:7c:ac:60:a2:0d:15:80:57:
81:56:a3:f6:c0:c6:02:1b:b1:fe:1b:ff:55:74:a4:e6:37:ce:
86:ca:0e:b1:e3:15:02:91:fc:69:d5:ef:fe:08:df:93:17:46:
dc:4e:2f:ac:03:aa:65:e8:13:7d:2f:83:b7:33:0f:f1:d9:13:
a6:6f:e4:96:df:d3:36:2b:0c:86:aa:57:15:e0:c8:0f:1f:f4:
54:54:9c:20:29:6c:31:50:10:57:c1:8d:c2:7e:c2:91:27:06:
67:8c:bc:e0:5a:f5:19:80:1c:81:a0:9e:a5:67:72:54:00:a2:
dc:18:ef:65:9e:52:6f:9b:06:29:cd:71:92:0f:54:e0:a3:c8:
d2:5e:6b:87:01:ff:4f:e5:d4:ea:2c:cf:83:c5:89:78:d2:66:
6e:3f:1b:49:2f:4b:3d:b4:5d:64:85:c3:0d:6f:ff:55:ff:2c:
47:91:13:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:04 2023 by rpki-client on console-ams.rpki-client.org