Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/_lJlvk94d8Viw4tWavc_f9nBBLc.roa
File: _lJlvk94d8Viw4tWavc_f9nBBLc.roa (raw, json)
Hash identifier: RexTWjdZVSn+hesrYAGP1rQZbmf4vc5ETmSv0WtMuxA=
Subject key identifier: FE:52:65:BE:4F:78:77:C5:62:C3:8B:56:6A:F7:3F:7F:D9:C1:04:B7
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018B6B568DAFBC65B50BBEC817CBE201599F
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/_lJlvk94d8Viw4tWavc_f9nBBLc.roa
Signing time: Thu 26 Oct 2023 09:35:16 +0000
ROA not before: Thu 26 Oct 2023 09:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 195.242.243.0/24 maxlen: 24
185.81.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:56:8d:af:bc:65:b5:0b:be:c8:17:cb:e2:01:59:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 26 09:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe5265be4f7877c562c38b566af73f7fd9c104b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:82:26:64:52:e1:4e:cd:96:49:f4:9e:fc:
c1:c5:9d:bb:a6:20:95:12:f8:f9:e1:9d:c7:80:87:
f0:6d:c8:7a:c8:42:84:64:81:ee:a1:54:b0:c8:5f:
ff:bc:b9:8e:4d:e3:20:4f:a8:84:17:62:fa:f9:d5:
29:3d:36:8b:21:52:98:f4:06:94:47:84:f9:92:96:
5f:70:e5:44:c9:22:e6:7d:ba:e0:8b:dc:04:13:91:
84:41:6e:c8:40:77:6b:9a:af:2d:1e:8d:c6:f8:87:
99:5e:b7:88:d3:6a:7f:07:24:1e:94:0f:e2:05:7c:
a0:4b:13:54:9d:c2:c2:95:53:6c:71:33:e9:de:2f:
79:48:7e:c0:9a:17:b6:a7:ce:77:d5:ef:27:69:c4:
f7:0c:9b:ef:8e:b7:6b:b6:39:3d:45:08:f4:29:25:
96:7e:65:1b:f0:03:70:8a:99:2d:7e:34:bf:38:d2:
63:73:17:e1:48:00:ef:eb:7d:48:60:6d:1a:f4:bc:
8e:ca:8e:2f:bd:37:ae:b6:e7:fb:24:e7:7b:84:c9:
f0:76:d5:b4:b1:1f:ec:de:70:aa:11:63:9d:92:88:
5b:d0:6a:98:bc:2e:43:1b:b1:1f:68:84:4e:58:73:
77:65:82:36:2f:76:ad:52:5b:9c:71:61:3e:f6:bd:
32:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:52:65:BE:4F:78:77:C5:62:C3:8B:56:6A:F7:3F:7F:D9:C1:04:B7
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/_lJlvk94d8Viw4tWavc_f9nBBLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.183.0/24
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
37:93:cb:aa:b0:34:17:59:70:67:7a:68:34:d8:c1:a9:7c:92:
e5:31:de:6f:f8:f8:9c:ef:6e:db:c4:66:cd:92:84:68:a6:0d:
e4:2b:52:70:d5:6b:02:1a:cf:93:cb:06:06:a4:5a:49:ef:c8:
be:26:55:22:a6:6f:a9:2d:da:55:f6:9c:56:51:b1:85:b8:84:
07:7b:61:be:e8:aa:70:70:a6:9c:8f:1e:d5:cd:56:1f:47:3e:
32:1b:d0:64:0f:cc:7a:01:f0:2f:45:73:a6:ea:6a:62:0e:a6:
0b:f1:30:87:6f:b8:dd:06:b4:36:f6:b6:fb:50:9b:92:d5:6d:
c2:4a:8d:a2:7e:19:5c:42:ea:75:bf:62:06:7f:b3:eb:f1:2a:
3e:28:ec:0d:95:a1:42:01:6d:92:20:03:6a:84:86:27:d7:63:
a9:a8:f5:d3:34:2f:98:6b:1a:a5:39:0c:cb:df:20:80:a3:7b:
f0:43:41:a6:3c:3e:74:f2:2f:32:66:ff:96:3b:b7:7d:04:25:
6a:a9:41:0e:6c:5a:b5:39:18:b8:74:89:24:72:5a:63:80:18:
7f:42:ef:4e:ce:3a:06:fc:70:8d:87:e5:08:76:a6:bf:06:51:
80:f6:91:39:7a:ba:6b:eb:5d:55:73:9e:9f:fa:cf:0b:18:e7:
37:9c:e4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 13:47:08 2023 by rpki-client on console-ams.rpki-client.org