Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/pxDa5AnkXbGr35Xqu88uOtvLKdY.roa
File: pxDa5AnkXbGr35Xqu88uOtvLKdY.roa (raw, json)
Hash identifier: PDJtlgQVCtzjD70iVtNKDlMkjR7wDlrsHaEIlSEjLbs=
Subject key identifier: A7:10:DA:E4:09:E4:5D:B1:AB:DF:95:EA:BB:CF:2E:3A:DB:CB:29:D6
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018C6340966C16D6474C021DC85CA5C58AC7
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/pxDa5AnkXbGr35Xqu88uOtvLKdY.roa
Signing time: Wed 13 Dec 2023 12:57:06 +0000
ROA not before: Wed 13 Dec 2023 12:57:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.81.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:40:96:6c:16:d6:47:4c:02:1d:c8:5c:a5:c5:8a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Dec 13 12:57:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a710dae409e45db1abdf95eabbcf2e3adbcb29d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5b:64:5c:ff:a0:69:53:72:90:95:fe:be:1a:
67:34:09:ee:b0:d1:c4:0a:88:c3:68:0c:75:9f:77:
11:b8:3f:7b:2e:3d:a3:99:48:6e:41:2e:43:b3:57:
c8:10:66:3b:68:99:bc:df:3d:75:80:dd:7e:d0:f5:
66:61:39:1f:0d:b3:d9:e8:5b:a1:16:fc:f0:a7:3f:
64:f6:1f:2a:49:3e:d1:6c:da:c6:5c:34:bb:a2:3f:
77:62:80:2f:a0:13:5c:6b:ee:50:26:ed:71:91:ad:
6c:78:5c:9d:2c:cd:22:af:73:0c:39:70:53:c5:0f:
0a:43:ba:ac:aa:2e:be:fc:17:0e:71:64:6b:52:f5:
a6:68:85:12:2b:d8:c5:2b:b7:c0:2f:1a:f8:85:42:
4c:d5:fe:b0:9f:33:07:d6:f3:b7:c9:80:ba:22:f4:
87:8c:62:90:da:59:a1:aa:f5:ae:d5:48:9a:4e:25:
1b:29:2b:cb:74:11:12:cb:67:7b:99:d5:91:a0:e0:
0c:fa:7a:0d:0d:6c:04:be:71:84:e1:27:e3:57:82:
c0:c0:31:ef:24:26:33:39:57:04:ad:de:60:45:5a:
6e:f5:3f:25:a9:3d:1b:63:73:42:13:db:3f:20:c9:
91:d2:54:97:c7:3b:a4:29:f5:e9:42:34:33:90:2f:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:10:DA:E4:09:E4:5D:B1:AB:DF:95:EA:BB:CF:2E:3A:DB:CB:29:D6
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/pxDa5AnkXbGr35Xqu88uOtvLKdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.183.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:46:bd:97:0a:1d:e0:99:ca:b1:5b:44:0e:e9:f2:1b:11:b6:
9a:bf:88:51:20:0f:75:d3:97:af:5a:58:e2:0a:ee:d0:41:df:
98:43:dd:07:8c:3e:93:92:f9:f0:a7:4f:9e:f9:26:30:e3:a7:
5b:ed:df:cc:36:82:e7:66:99:67:b0:b1:35:ef:2e:f9:09:3f:
6f:1c:d5:d9:4f:af:b1:a2:20:ae:99:8f:9f:08:db:87:0f:2d:
27:03:0e:19:e7:56:36:29:28:65:76:ea:10:da:f9:04:6e:3b:
7a:86:f9:7c:a2:0e:19:34:6a:06:57:3c:02:65:bc:a0:fa:91:
89:3f:8d:98:fa:45:ab:f3:74:48:29:0f:80:0b:e0:1e:22:8e:
3d:f0:90:16:10:40:06:c0:e7:fa:15:6f:68:72:07:90:4d:44:
2c:65:c6:70:3a:ea:26:4a:09:3d:fd:15:e3:72:fe:26:a5:99:
29:2f:5d:df:d0:e2:23:1d:8f:42:6d:50:68:ad:10:02:45:2b:
37:27:fe:16:07:e6:95:68:17:08:21:b2:ca:ae:7f:1d:f7:91:
9e:9b:8f:14:f6:54:e0:72:d6:29:2b:89:4c:c2:39:14:65:cd:
49:ae:bc:91:e4:92:21:6c:df:3c:31:e3:59:1f:cc:78:a6:be:
ca:d7:d0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:34 2024 by rpki-client on console-fra.rpki-client.org