Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/qC8ssX8s80o5L18NNLFvOPjErbg.roa
File: qC8ssX8s80o5L18NNLFvOPjErbg.roa (raw, json)
Hash identifier: 7daT2wSm+7Eb+5Lw8gj/wzfJNO+qW1vYVaW9QmoXx+0=
Subject key identifier: A8:2F:2C:B1:7F:2C:F3:4A:39:2F:5F:0D:34:B1:6F:38:F8:C4:AD:B8
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018BC8100F88900B10815804F0E33D6DCDCC
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/qC8ssX8s80o5L18NNLFvOPjErbg.roa
Signing time: Mon 13 Nov 2023 09:42:57 +0000
ROA not before: Mon 13 Nov 2023 09:42:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.243.179.0/24 maxlen: 24
195.242.240.0/24 maxlen: 24
93.114.62.0/24 maxlen: 24
93.114.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:10:0f:88:90:0b:10:81:58:04:f0:e3:3d:6d:cd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Nov 13 09:42:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a82f2cb17f2cf34a392f5f0d34b16f38f8c4adb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:d2:39:48:a5:f0:38:68:9a:05:d1:2a:03:
e2:be:af:e8:8d:2f:89:1b:ff:ba:4f:3c:06:12:ca:
f1:c1:9b:7b:43:77:14:7d:44:f9:e0:69:f2:45:11:
78:c9:48:9b:50:15:47:42:da:3a:28:ef:70:5e:38:
f8:b4:1e:7a:d3:38:86:d8:d4:93:37:04:9c:15:cc:
2d:b1:ba:49:64:b9:8d:dd:13:99:97:af:57:6d:be:
e5:c8:d5:ce:a0:8e:eb:b9:9b:73:d4:45:86:30:39:
16:46:7c:f4:5f:e2:9d:14:04:ec:6f:fd:f2:5f:0d:
04:a4:f4:cc:56:ad:38:6b:18:ce:4b:b6:c2:9c:43:
db:be:db:f4:83:31:fd:13:59:6c:2b:ee:26:f3:45:
6f:eb:c6:cb:49:39:a6:4d:b4:a3:27:ba:c9:c4:f1:
22:80:e1:73:b6:b5:3b:15:61:98:30:31:92:cd:af:
48:cb:ec:c3:c9:fa:28:29:bd:32:29:58:95:97:cd:
a6:7f:68:8a:b1:7d:7f:be:1f:6f:d1:32:2f:d3:ad:
30:39:c7:ff:02:04:c5:97:94:80:22:17:8a:16:56:
e4:20:35:b6:89:6f:c8:5d:33:4f:d7:d8:34:4c:ca:
c4:10:5e:9c:27:d8:78:62:93:d6:77:38:2f:bf:39:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2F:2C:B1:7F:2C:F3:4A:39:2F:5F:0D:34:B1:6F:38:F8:C4:AD:B8
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/qC8ssX8s80o5L18NNLFvOPjErbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.179.0/24
93.114.60.0/24
93.114.62.0/24
195.242.240.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:75:81:39:0a:ac:83:b7:c3:24:2c:7d:36:a5:43:8b:a5:96:
a8:9e:62:39:3f:58:5b:af:53:74:7d:48:55:c8:56:55:20:c9:
f1:05:cd:41:dd:1f:87:03:0b:38:ad:a9:51:7c:80:eb:a7:39:
d9:da:9c:8c:89:a9:e5:6d:c8:e1:eb:76:60:9c:b6:f4:4f:fa:
80:b2:f1:75:51:84:de:10:c5:a4:1b:c3:85:4d:62:63:ee:3b:
ce:ed:8c:26:f9:07:5d:58:3e:82:bb:30:1d:0c:25:fe:2f:49:
a4:5c:af:9a:2c:af:7d:40:cc:e2:37:3b:41:73:a0:96:41:4d:
61:92:da:29:59:52:30:8d:ec:64:8f:03:24:d0:0b:2d:c7:bc:
07:cb:02:57:e3:e5:59:70:b9:60:27:58:dc:c1:87:60:01:c3:
90:ff:eb:d3:64:eb:be:6a:90:5b:7b:77:1e:24:4d:47:da:b0:
d7:d5:f6:9f:bc:d9:4d:70:4d:cb:33:a3:ec:cb:c8:1f:f7:db:
92:83:b3:aa:6c:f2:ad:fb:5f:82:4a:d3:a1:80:96:15:a8:54:
c1:0f:7e:58:5b:57:b4:01:8a:c7:79:37:06:db:c2:4c:50:2a:
28:06:5c:b5:38:74:df:8c:4e:aa:5f:6b:29:81:7d:ea:8f:ad:
c8:d0:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:55 2024 by rpki-client on console-ams.rpki-client.org