Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/fTtMOlwYwRmnxZPXz6BNtCxMiIw.roa
File: fTtMOlwYwRmnxZPXz6BNtCxMiIw.roa (raw, json)
Hash identifier: VQxpKea/oYuWx14o4Ec294AE+fltkFmsMQGj8F+pMw8=
Subject key identifier: 7D:3B:4C:3A:5C:18:C1:19:A7:C5:93:D7:CF:A0:4D:B4:2C:4C:88:8C
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018BA9696292B6B69FB9BE3727DE38A4AEEE
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/fTtMOlwYwRmnxZPXz6BNtCxMiIw.roa
Signing time: Tue 07 Nov 2023 10:52:17 +0000
ROA not before: Tue 07 Nov 2023 10:52:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:69:62:92:b6:b6:9f:b9:be:37:27:de:38:a4:ae:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Nov 7 10:52:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d3b4c3a5c18c119a7c593d7cfa04db42c4c888c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e7:73:0d:37:14:0e:4f:f5:87:37:4d:29:b5:
6f:fd:9a:e5:1b:90:6d:e6:b3:1e:bf:21:bd:f3:23:
ec:92:75:d2:04:62:48:02:ed:b7:af:f4:55:a9:04:
93:69:a0:c2:8b:3c:b1:e9:6e:b2:27:50:55:2b:59:
38:16:88:46:38:1f:37:51:2e:03:0c:48:06:c0:85:
f5:03:64:cd:40:39:b8:0f:e1:ba:f3:f8:c3:7c:5e:
bf:61:c7:22:69:70:f1:ac:1f:ae:a9:7a:39:d8:b3:
06:d6:7a:a8:74:f2:ea:b7:57:f8:70:e6:b9:ca:cc:
d7:a2:02:7b:48:75:5d:5e:ee:25:41:75:d6:7e:db:
47:62:a6:23:b5:14:7c:d4:9b:10:fa:96:22:f2:a4:
a2:5b:db:60:b9:39:75:3f:44:25:5c:f3:d3:71:43:
2c:16:e7:03:c4:1d:ac:04:7b:9b:64:7e:da:83:bb:
1e:1d:fe:f6:8b:f0:3c:ab:88:30:f0:a7:84:15:f0:
b4:cf:a8:9d:31:3a:64:d5:eb:5a:72:55:79:1d:1c:
a7:4a:d3:24:ff:f7:5c:af:ee:70:2c:a0:05:78:9a:
5e:16:b2:b0:33:aa:6f:3a:46:cb:86:c0:06:83:ab:
22:8a:bc:9d:d0:2b:36:38:4a:ff:14:47:4a:8b:df:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3B:4C:3A:5C:18:C1:19:A7:C5:93:D7:CF:A0:4D:B4:2C:4C:88:8C
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/fTtMOlwYwRmnxZPXz6BNtCxMiIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.61.0/24
185.81.180.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:89:24:f0:51:ea:f5:50:dd:9b:07:ce:12:7e:07:23:b6:10:
e7:6b:2c:a5:53:b3:db:cd:ec:b0:a4:1f:0b:59:a6:fc:5f:25:
d2:b2:3c:7e:95:e0:5e:fd:b4:92:e8:bf:5b:bd:3f:6f:05:25:
9e:f0:d7:8c:8f:3e:cb:eb:ee:20:0a:d9:dd:12:50:e5:81:92:
0c:f4:e0:a8:97:5a:72:9d:5a:89:45:cd:2f:3d:ac:6f:5c:df:
4b:b4:57:6e:5e:c2:55:35:7b:f0:36:4b:f4:36:d5:38:e7:88:
db:c9:72:47:1e:a6:64:02:79:01:90:b6:83:41:d5:11:04:ee:
c8:b5:1b:d3:35:1e:1e:83:23:22:10:e7:9a:cf:20:fd:da:af:
48:68:2f:23:f0:d7:39:96:68:55:c7:c7:a6:b7:ff:95:13:e6:
ae:3b:0c:99:0f:d2:b5:07:d1:c1:07:1f:96:59:f3:d1:27:fc:
75:25:7c:3c:90:37:7a:03:ea:8a:90:09:4b:93:e6:fb:77:37:
8d:83:d6:27:3d:f5:d9:99:37:53:1e:76:93:f1:4b:a5:ff:c0:
e6:1a:6a:ea:db:d9:bd:4d:b1:19:a3:7b:15:90:dc:35:2b:5f:
b8:f3:12:05:84:46:c8:46:83:3c:0e:14:3e:4a:54:b4:fc:3e:
7c:29:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 10:18:13 2023 by rpki-client on console-fra.rpki-client.org