Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/mdW45Qml5yq2nmWXKsGolWiX1wQ.roa
File: mdW45Qml5yq2nmWXKsGolWiX1wQ.roa (raw, json)
Hash identifier: tv9PcwZrOAtlbtM5Mx6gjHo2j/jJA8QN9RgHPwNJwKo=
Subject key identifier: 99:D5:B8:E5:09:A5:E7:2A:B6:9E:65:97:2A:C1:A8:95:68:97:D7:04
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018B136454287A4D056DD6EAAAE85D40E5B5
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/mdW45Qml5yq2nmWXKsGolWiX1wQ.roa
Signing time: Mon 09 Oct 2023 07:43:44 +0000
ROA not before: Mon 09 Oct 2023 07:43:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.81.183.0/24 maxlen: 24
93.114.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:13:64:54:28:7a:4d:05:6d:d6:ea:aa:e8:5d:40:e5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 9 07:43:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99d5b8e509a5e72ab69e65972ac1a8956897d704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:81:0d:56:f9:88:ce:a2:9b:11:3b:47:aa:3b:
00:c0:25:18:30:d7:71:31:94:0b:f6:0c:bf:c8:0d:
8a:d8:1c:7d:88:37:f4:36:64:b9:0e:79:2f:69:fd:
96:a3:fc:92:70:1f:2a:53:84:f8:1a:14:86:fa:31:
7f:9a:6b:34:9a:72:7b:6c:7e:ba:bf:df:ed:6f:32:
e2:ed:d7:57:1a:b7:b5:90:18:a1:ed:e8:47:97:32:
9a:98:93:0b:5d:4b:6b:5e:0d:08:ac:84:23:33:10:
9e:de:4c:e9:2a:52:ab:84:fc:f4:a2:f3:42:ec:fd:
90:06:11:50:1d:fe:72:54:6c:1b:0a:54:10:d2:f6:
3d:86:f0:8c:d3:cf:26:e6:16:57:8a:a8:a0:ab:55:
57:3a:a3:df:66:ef:e3:69:c4:4b:02:71:b5:fd:61:
8d:cd:64:0d:d9:33:ce:8e:59:27:f1:56:3a:63:e1:
bc:75:bc:22:06:e3:bd:fa:eb:95:d9:55:c1:5a:6a:
e2:55:ac:e4:62:cf:a8:4e:17:78:cc:8c:82:57:8d:
df:ed:3c:c8:e6:b1:01:9b:dc:ae:35:b5:4d:fe:71:
7b:93:56:3e:24:4f:92:f4:0b:e3:61:ab:57:1c:a4:
dd:6e:4a:a7:73:b1:5f:ca:b3:1c:0f:99:cd:c0:ab:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D5:B8:E5:09:A5:E7:2A:B6:9E:65:97:2A:C1:A8:95:68:97:D7:04
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/mdW45Qml5yq2nmWXKsGolWiX1wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.62.0/24
185.81.183.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:97:36:a7:b6:16:94:60:fb:f1:9c:cf:c6:06:42:f8:dc:a6:
b0:5a:8a:04:38:0b:b9:2e:4b:54:20:5b:86:8c:17:14:8f:b3:
95:cf:a1:3e:a9:82:37:15:3f:8c:2f:97:57:11:63:b8:4d:46:
cb:fc:ef:2c:00:e5:31:7e:5e:67:22:91:04:f0:7e:05:c8:e3:
a2:94:10:67:c1:55:be:8a:0f:44:96:2a:b8:dd:ec:a7:5a:ac:
e8:b3:01:22:ed:01:61:ea:8c:7e:cb:c8:7e:c0:fd:46:b3:60:
a8:f2:de:3b:cf:6c:8d:9d:67:68:ea:40:2a:75:d7:5a:04:44:
ba:f7:77:be:d0:a5:39:60:95:ad:92:2b:40:b2:2a:0b:4a:35:
84:4c:3e:34:7c:af:c6:60:65:c3:85:c3:c2:96:42:1d:2e:b2:
ae:16:63:60:6a:25:11:b9:bf:f9:07:e5:2a:6f:0c:de:b2:58:
d8:7e:fe:8a:b9:15:fe:f2:6d:15:1a:84:6c:ed:ce:7e:d3:42:
91:01:1e:4f:27:fc:ba:38:71:a4:ad:d8:ab:65:83:e5:55:7f:
4c:06:f9:94:44:7d:17:85:a3:03:33:64:f3:76:76:3b:0b:d9:
6e:3c:db:d4:0f:a8:41:72:1f:36:fc:56:a9:e4:a5:5e:3b:31:
6d:e1:5b:46
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYsTZFQoek0FbdbqquhdQOW1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjMxMDA5MDc0MzQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWQ1YjhlNTA5YTVlNzJhYjY5ZTY1OTcyYWMxYTg5NTY4OTdkNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4ENVvmIzqKbETtHqjsAwCUYMNdx
MZQL9gy/yA2K2Bx9iDf0NmS5Dnkvaf2Wo/yScB8qU4T4GhSG+jF/mms0mnJ7bH66
v9/tbzLi7ddXGre1kBih7ehHlzKamJMLXUtrXg0IrIQjMxCe3kzpKlKrhPz0ovNC
7P2QBhFQHf5yVGwbClQQ0vY9hvCM088m5hZXiqigq1VXOqPfZu/jacRLAnG1/WGN
zWQN2TPOjlkn8VY6Y+G8dbwiBuO9+uuV2VXBWmriVazkYs+oThd4zIyCV43f7TzI
5rEBm9yuNbVN/nF7k1Y+JE+S9AvjYatXHKTdbkqnc7FfyrMcD5nNwKv3yQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJnVuOUJpecqtp5llyrBqJVol9cEMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvbWRXNDVRbWw1eXEybm1XWEtzR29sV2lYMXdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXI+AwQA
uVG3MA0GCSqGSIb3DQEBCwUAA4IBAQCdlzanthaUYPvxnM/GBkL43KawWooEOAu5
LktUIFuGjBcUj7OVz6E+qYI3FT+ML5dXEWO4TUbL/O8sAOUxfl5nIpEE8H4FyOOi
lBBnwVW+ig9Eliq43eynWqzoswEi7QFh6ox+y8h+wP1Gs2Co8t47z2yNnWdo6kAq
dddaBES693e+0KU5YJWtkitAsioLSjWETD40fK/GYGXDhcPClkIdLrKuFmNgaiUR
ub/5B+UqbwzesljYfv6KuRX+8m0VGoRs7c5+00KRAR5PJ/y6OHGkrdirZYPlVX9M
BvmURH0XhaMDM2TzdnY7C9luPNvUD6hBch82/Fap5KVeOzFt4VtG
-----END CERTIFICATE-----
Generated at Fri Oct 13 07:53:18 2023 by rpki-client on console-ams.rpki-client.org