Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/XcpyOYejc4cZYBRY5tNGSjNihbI.roa
File: XcpyOYejc4cZYBRY5tNGSjNihbI.roa (raw, json)
Hash identifier: hvYwy6HUb+xvUX4jKPk525FnR8hD6+In4zEYznddkbY=
Subject key identifier: 5D:CA:72:39:87:A3:73:87:19:60:14:58:E6:D3:46:4A:33:62:85:B2
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0187E09CC4EF0D3F48BCE5DBB1A011890605
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/XcpyOYejc4cZYBRY5tNGSjNihbI.roa
Signing time: Wed 03 May 2023 07:56:23 +0000
ROA not before: Wed 03 May 2023 07:56:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.243.176.0/24 maxlen: 24
93.114.61.0/24 maxlen: 24
93.114.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:9c:c4:ef:0d:3f:48:bc:e5:db:b1:a0:11:89:06:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: May 3 07:56:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5dca723987a3738719601458e6d3464a336285b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b0:37:fb:51:e9:c9:2a:65:88:50:5f:d1:21:
f0:88:78:71:08:fe:9a:e1:b5:fb:81:dd:46:61:2b:
0c:21:5d:d6:ec:c2:ff:36:3f:27:3b:43:8b:72:74:
6e:03:3e:15:57:37:56:17:8d:da:60:d7:01:a2:f4:
b2:12:9d:5d:bc:90:1c:74:11:3e:bb:12:35:e2:01:
a8:32:17:58:9a:84:19:77:1b:c1:1f:72:c1:27:04:
bd:83:c0:28:99:f3:60:a3:6d:26:94:44:91:af:1c:
da:87:c5:31:69:97:93:41:7a:52:80:3c:c9:88:b1:
c7:4f:9e:be:06:f5:00:f3:8e:89:f6:a4:f5:d4:82:
53:a7:f6:06:c2:22:fa:6d:d4:57:ef:21:8d:82:29:
ca:4d:36:60:e5:23:b0:c0:81:1e:0d:4d:b7:31:90:
ad:e1:a5:d3:33:6c:c0:36:5f:68:3c:7c:65:bb:98:
5b:30:aa:88:70:cc:d4:9d:03:28:96:48:97:36:af:
ba:53:23:2d:f4:de:f4:04:ce:b0:b0:5c:39:8b:00:
e2:bb:d9:c4:ca:fa:fd:ee:f8:6a:a6:c0:8e:c7:53:
91:0d:36:2e:c1:ae:45:75:59:f8:6a:c5:27:ed:52:
7f:e5:18:0c:cc:d0:33:ea:5f:f1:ee:f6:7e:e7:3d:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CA:72:39:87:A3:73:87:19:60:14:58:E6:D3:46:4A:33:62:85:B2
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/XcpyOYejc4cZYBRY5tNGSjNihbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.176.0/24
93.114.60.0/23
Signature Algorithm: sha256WithRSAEncryption
88:5f:ee:6b:08:83:0e:76:13:f0:2f:3e:1f:7d:c5:b6:07:6a:
f8:50:82:02:f8:de:70:51:a9:85:a9:6c:9b:9d:fb:5a:49:f9:
e6:90:ad:53:90:a3:0a:95:e9:3a:91:1d:87:6d:1e:23:01:a7:
a2:69:73:78:7d:8b:2e:80:94:9c:9d:36:43:08:63:f5:88:05:
ec:d4:15:1e:ba:21:9d:5f:32:d4:7f:c3:b4:ed:ce:4d:92:13:
b6:ec:66:bb:75:9f:7c:fb:cc:27:99:cb:61:15:40:da:ad:86:
02:3a:e6:25:77:cd:8d:f4:f7:e1:a4:92:8d:d4:d6:c5:a8:b5:
ab:ac:06:d1:bb:0e:d6:92:00:a1:12:0f:23:53:a7:75:63:29:
fc:e7:a8:02:ca:e7:97:34:a1:19:47:40:ef:28:cb:73:6e:66:
29:2f:29:0d:a1:71:b6:9f:d4:04:36:4c:96:73:00:f2:2a:9e:
20:58:12:31:97:a0:41:72:5c:7f:b0:9b:37:6d:ef:a9:9b:bb:
ee:01:9d:27:2d:91:8a:35:af:87:c6:9a:77:ae:5c:d7:93:89:
ab:cc:58:5b:c3:b8:f3:09:a5:db:88:e0:8b:5c:6e:e5:dc:e9:
36:2a:e1:e6:eb:9c:d6:4e:b8:52:13:87:5a:d2:7f:31:d4:aa:
08:5b:63:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:04 2023 by rpki-client on console-ams.rpki-client.org