Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/cJ69vmwrzKwwj9uSZk33QgBHYtk.roa
File: cJ69vmwrzKwwj9uSZk33QgBHYtk.roa (raw, json)
Hash identifier: NWcHLBBMisPONUL1dYhWmHYRhzlb6vcjvln0cHQsuT4=
Subject key identifier: 70:9E:BD:BE:6C:2B:CC:AC:30:8F:DB:92:66:4D:F7:42:00:47:62:D9
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018E39DF14F502644A89750845E5F180C5F1
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/cJ69vmwrzKwwj9uSZk33QgBHYtk.roa
Signing time: Wed 13 Mar 2024 22:11:44 +0000
ROA not before: Wed 13 Mar 2024 22:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.46.10.0/24 maxlen: 24
93.114.61.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
185.81.181.0/24 maxlen: 24
195.242.242.0/24 maxlen: 24
195.242.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 20:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:39:df:14:f5:02:64:4a:89:75:08:45:e5:f1:80:c5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Mar 13 22:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=709ebdbe6c2bccac308fdb92664df742004762d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d8:9a:d3:1f:c2:a0:50:54:cc:a4:9e:98:20:
50:22:d5:68:03:dc:f4:36:d0:5d:21:d6:92:d5:36:
86:bc:f5:b5:b4:b4:cb:2e:01:a0:da:e3:66:d0:4b:
59:8a:82:3d:be:88:a2:4e:55:43:22:e4:fe:15:96:
83:8b:4f:c0:b7:b7:e0:5f:0d:6b:c0:ed:83:36:e1:
bb:b8:20:75:0b:37:5d:f4:8b:d8:e4:03:ba:93:91:
1f:42:1f:42:4f:e7:e4:ae:7c:c2:2c:0d:8d:0a:fd:
78:bb:cc:5f:bd:b6:8b:a6:1f:ef:e7:db:22:18:60:
c7:d6:24:1b:8b:47:70:d7:3f:d1:12:77:d1:1a:c9:
c2:02:7e:fa:8b:be:ec:85:fe:67:1e:f7:e5:09:ca:
d7:c8:b7:8c:24:3c:b5:53:01:25:75:a7:5c:8c:a9:
1a:7a:60:d6:5f:52:a0:81:4f:6b:bf:2d:8a:3f:98:
fb:3d:27:a6:55:43:b2:ec:1b:38:d4:f8:39:25:2c:
c1:2c:bd:12:c4:eb:cb:8a:12:97:12:18:5b:07:0e:
b7:db:f5:b2:c8:83:95:06:0e:f9:8c:85:5e:75:ed:
21:0e:b2:5b:e5:9f:7a:cd:ec:52:d2:e8:a6:5a:2f:
76:7a:cd:f5:9a:5d:24:b5:79:bb:9e:28:f5:83:cf:
35:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9E:BD:BE:6C:2B:CC:AC:30:8F:DB:92:66:4D:F7:42:00:47:62:D9
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/cJ69vmwrzKwwj9uSZk33QgBHYtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
93.114.61.0/24
185.81.180.0/23
195.242.242.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:3f:b8:76:ab:f9:f2:af:41:a6:d1:e2:18:81:a7:dc:b1:3b:
dd:f4:bd:de:1b:11:ab:2f:f6:5e:4b:d5:e3:69:c7:c7:97:43:
dd:3d:27:f9:1e:78:94:37:7a:e9:fa:ef:6e:7c:26:d1:0a:66:
39:aa:88:a3:c7:2d:6d:69:08:d1:6d:03:c3:4d:c3:08:e4:cd:
58:eb:e7:36:23:91:c8:8b:83:8b:7b:b2:84:4c:f0:6c:21:d4:
9a:35:7d:f4:c1:c2:e5:9e:84:a7:6b:2e:e9:74:57:ae:1e:41:
a8:e8:fc:b7:77:22:55:cb:68:ae:54:39:61:b0:99:d4:33:a8:
9c:fd:d7:21:5f:83:6c:fb:a9:e1:9a:6f:e2:ca:69:7a:7e:b2:
2a:ad:ff:4e:23:3c:10:5a:69:82:8e:7a:22:b5:d1:93:d6:b1:
98:e3:4a:1b:b2:9f:79:00:a8:1f:ac:47:7f:50:e2:d7:10:7c:
dc:75:cd:63:71:89:72:d5:87:44:19:5d:8a:b2:11:1b:38:09:
90:26:b6:41:c9:f7:45:04:a8:d0:ab:20:60:a7:da:21:c9:b6:
63:f9:d9:5b:6b:56:8f:35:55:fa:af:d0:79:b7:95:e9:22:dc:
66:10:36:a7:d4:7e:57:4a:c6:1d:04:2d:4c:f0:ab:e5:db:68:
0d:12:69:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 01:05:16 2024 by rpki-client on console-fra.rpki-client.org