Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/pv8mxctqtqi6jfwBCeKGzk3Gowg.roa
File: pv8mxctqtqi6jfwBCeKGzk3Gowg.roa (raw, json)
Hash identifier: Dtivfo5KrYOcdTYIUePT+Dd0xMivMieNfBTigaiSDrY=
Subject key identifier: A6:FF:26:C5:CB:6A:B6:A8:BA:8D:FC:01:09:E2:86:CE:4D:C6:A3:08
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018612A9E5837B5CA83D702C295AFF734A99
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/pv8mxctqtqi6jfwBCeKGzk3Gowg.roa
Signing time: Thu 02 Feb 2023 15:06:09 +0000
ROA not before: Thu 02 Feb 2023 15:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 195.242.243.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
89.46.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:a9:e5:83:7b:5c:a8:3d:70:2c:29:5a:ff:73:4a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Feb 2 15:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6ff26c5cb6ab6a8ba8dfc0109e286ce4dc6a308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2b:cc:6a:23:93:2c:a0:89:56:a4:0f:4a:15:
0e:b2:97:d5:33:24:4f:90:ed:0a:06:bc:d8:ef:19:
96:d7:33:70:aa:75:e4:7d:f2:65:d9:45:aa:37:ec:
61:ec:09:3b:df:8d:64:ff:ee:7f:3b:6e:ac:6e:dc:
da:0c:e5:ff:36:2e:78:09:fc:91:5f:90:42:83:9d:
57:b7:7a:7f:f0:aa:a3:6b:30:8a:80:70:cf:5f:3e:
51:27:b3:fb:77:41:c9:e7:ef:b6:68:d3:ee:f7:d8:
c3:7b:2d:a7:85:ab:ca:6e:35:4d:26:f6:ca:7f:62:
67:4c:b4:2c:8d:40:f5:24:93:f7:08:bc:72:5a:67:
16:58:43:7c:12:d8:d5:aa:96:95:3a:e7:43:d7:fd:
d8:1f:3d:f1:7c:e6:67:21:40:b9:d0:14:69:8f:81:
1d:a6:04:f4:7f:47:35:9e:53:83:46:ac:38:7d:47:
f1:cc:d7:d2:94:55:74:5f:d7:94:6a:b0:cf:9d:62:
9c:0a:50:fa:de:98:6a:ed:aa:4b:e5:9a:45:21:cd:
99:e8:07:a0:7d:2f:78:31:df:1d:fc:c1:88:b9:0d:
7b:fb:fb:91:94:34:77:49:0f:c4:14:6d:4c:a6:87:
2b:b1:ee:69:49:2c:7b:8e:2d:60:97:41:ba:1f:43:
4f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FF:26:C5:CB:6A:B6:A8:BA:8D:FC:01:09:E2:86:CE:4D:C6:A3:08
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/pv8mxctqtqi6jfwBCeKGzk3Gowg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
185.81.180.0/23
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d4:a0:dc:d8:44:80:96:55:dd:34:d6:d7:bc:0d:4b:64:55:
e8:00:0d:31:40:1a:1a:60:50:e8:4a:24:fa:3b:05:4b:2f:24:
61:31:7b:3e:05:26:04:5d:02:89:77:76:55:90:ec:60:e2:c1:
d2:03:1e:47:04:64:27:ed:af:29:5c:1e:7e:01:9f:34:6c:90:
50:39:d1:29:10:9f:f9:da:88:d0:44:a1:21:cf:1c:f2:0b:c6:
3b:f5:8a:93:ec:56:a8:09:b2:aa:9b:99:fc:42:d0:6e:e9:09:
20:6b:fd:85:bb:7b:44:4c:db:8a:cf:6a:2a:d4:08:84:c0:c6:
71:d9:25:a2:2c:88:b4:49:d5:c3:b1:fd:3c:fc:d3:52:d7:7d:
2c:e4:5b:4c:05:ad:0b:5e:af:0d:a4:60:a3:2e:2a:78:83:60:
69:3c:03:97:65:59:5b:e2:52:2d:f9:f0:75:3c:09:c7:c4:eb:
d0:88:f4:52:79:00:54:4d:6e:39:e8:0e:01:2d:4e:cb:3c:6d:
07:a1:af:c6:87:05:79:da:18:e3:85:0e:64:81:05:88:41:45:
d5:ec:19:47:e2:89:47:28:4a:2f:79:f6:3d:3d:7f:45:f0:65:
fe:29:3a:10:8e:f6:7f:08:99:bc:03:4f:52:07:37:10:42:2f:
21:70:46:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:04 2023 by rpki-client on console-ams.rpki-client.org