Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/_aW9rXXrFiq3AzZbe2Wm3zI6hS0.roa
File: _aW9rXXrFiq3AzZbe2Wm3zI6hS0.roa (raw, json)
Hash identifier: CKInW46VIqtK5ImAaC5AFYyxH3KU4ULUTuhi2sfgw6w=
Subject key identifier: FD:A5:BD:AD:75:EB:16:2A:B7:03:36:5B:7B:65:A6:DF:32:3A:85:2D
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018B1EF63CBA224116EF7693342C60E3C126
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/_aW9rXXrFiq3AzZbe2Wm3zI6hS0.roa
Signing time: Wed 11 Oct 2023 13:38:55 +0000
ROA not before: Wed 11 Oct 2023 13:38:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.242.243.0/24 maxlen: 24
185.81.181.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Oct 2023 07:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:f6:3c:ba:22:41:16:ef:76:93:34:2c:60:e3:c1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 11 13:38:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fda5bdad75eb162ab703365b7b65a6df323a852d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:c8:6a:6c:24:f3:e5:c0:30:dc:d0:2b:86:
c7:43:d9:6a:5b:04:5c:59:70:c4:88:f5:69:24:42:
5a:2f:01:c7:a9:0f:79:2c:b6:db:94:78:d9:c5:96:
b9:d7:56:e5:6b:71:ba:f3:46:1d:d9:fb:4d:b8:cd:
5c:c3:41:e6:48:15:74:48:6c:9f:18:5d:1e:9c:a4:
25:e8:c8:32:38:97:57:c6:c6:47:da:33:6a:ff:ac:
a0:86:fb:38:4b:a2:cb:3a:0b:8a:6c:8e:fd:91:d4:
26:cb:2f:08:03:a0:b9:50:34:2e:aa:a4:4e:e9:82:
35:a5:5b:d5:55:db:25:fa:41:e8:b3:22:2d:7a:22:
36:b4:be:05:2e:6c:53:c5:2b:7d:c1:ea:a1:f0:16:
64:62:3b:39:cd:ed:16:a1:8b:dd:96:91:4c:d8:3a:
4f:57:92:82:9e:e5:0e:63:d3:ee:b3:cb:c6:06:1c:
93:57:e9:1d:7d:02:d5:06:47:2e:80:a7:d0:d1:0f:
79:ed:d8:1d:60:0b:dc:92:aa:37:ba:4b:c1:4a:23:
81:c0:9b:00:58:69:20:4b:47:aa:6a:be:25:f7:0a:
8b:85:1b:d8:2f:0d:31:d9:75:d1:2b:d5:a5:99:82:
df:3f:7d:a8:7c:b3:2f:7c:cb:44:8e:1d:fd:73:28:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A5:BD:AD:75:EB:16:2A:B7:03:36:5B:7B:65:A6:DF:32:3A:85:2D
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/_aW9rXXrFiq3AzZbe2Wm3zI6hS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.61.0/24
185.81.180.0/23
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:84:c2:f2:95:62:28:cf:18:e1:ae:39:0f:8f:c4:dd:82:12:
83:77:f2:1f:c9:b4:52:32:be:eb:39:34:71:f8:07:30:e0:81:
d1:68:89:0d:f5:f6:97:30:fb:23:3f:98:78:14:d4:a7:b9:e4:
4a:a2:b0:52:f9:6a:e4:67:f5:0f:ab:b0:8a:12:03:3f:13:ea:
bb:3a:8a:bc:fa:da:f4:ef:c9:de:b2:27:60:bc:06:65:ca:f6:
90:3c:48:3a:c3:c7:b8:33:8c:55:4a:2e:2e:b4:dc:c9:6f:68:
3b:7f:02:20:f5:75:05:6e:b8:45:00:71:45:6a:ad:20:ba:71:
68:48:43:80:19:61:db:9d:ef:4e:9d:89:e2:e6:8d:61:8c:b2:
08:f4:84:9f:87:50:14:e8:91:95:fa:80:1a:6c:c3:11:1d:41:
59:18:55:ab:cc:21:b7:27:4b:da:47:30:12:19:7c:84:9d:a8:
d1:f7:a8:9c:57:ee:56:f9:be:dc:d6:8b:06:7e:a0:23:5e:3e:
02:0d:37:f7:fa:23:7c:ea:4f:9e:11:cc:b0:a9:10:88:01:5d:
a4:6a:b0:72:e7:bf:ca:3d:a6:26:f1:74:9f:c7:98:98:f0:c1:
93:0c:c8:50:16:29:82:28:83:3b:74:d9:74:89:e9:7e:c4:e6:
a7:f9:d2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:14 2024 by rpki-client on console-ams.rpki-client.org