Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/r-tME8FcSKEe0Y-QXR3wgZANQGM.roa
File: r-tME8FcSKEe0Y-QXR3wgZANQGM.roa (raw, json)
Hash identifier: aCwxaptAwBaZPsJN6SBpVcSYs7+3VipKI8xwpdT2cac=
Subject key identifier: AF:EB:4C:13:C1:5C:48:A1:1E:D1:8F:90:5D:1D:F0:81:90:0D:40:63
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018B27E8E3852CA9F9FEB306971C1FF81286
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/r-tME8FcSKEe0Y-QXR3wgZANQGM.roa
Signing time: Fri 13 Oct 2023 07:20:55 +0000
ROA not before: Fri 13 Oct 2023 07:20:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.181.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Oct 2023 11:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:27:e8:e3:85:2c:a9:f9:fe:b3:06:97:1c:1f:f8:12:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 13 07:20:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afeb4c13c15c48a11ed18f905d1df081900d4063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a0:16:4e:d3:04:b0:82:65:d0:e2:d6:24:cb:
a0:d3:99:53:75:52:8a:e0:9c:7c:b7:c8:8d:7e:22:
1a:07:9c:27:d6:c6:5b:25:6a:8e:e8:50:7b:71:e0:
da:4c:11:f3:36:7c:07:f9:df:c4:8f:c9:87:6c:6c:
78:d4:f0:52:ce:79:45:e4:05:32:51:ae:61:0e:4f:
fb:cc:86:95:32:02:36:78:a4:13:e7:82:ba:02:1f:
27:d9:c3:80:0b:02:7a:5c:ef:c4:df:57:6c:d2:18:
6b:8f:0a:e9:2b:67:b7:d6:22:d1:e4:8d:92:93:1f:
c2:3b:66:cd:68:a0:53:86:a8:c4:74:18:66:7d:82:
46:6c:4a:71:88:1e:7a:a4:b8:dc:4d:80:62:a6:64:
70:ae:5f:ed:a8:5a:1d:cb:3a:2a:c5:a1:34:10:fb:
6f:e8:96:75:d7:53:68:cd:17:6a:76:82:d4:2f:b7:
e0:fc:0c:af:10:3a:c9:5a:32:f5:d7:ca:09:86:cf:
38:c8:e2:8b:ea:14:92:32:a3:fd:d6:95:c2:a0:bf:
b8:06:7c:a8:5f:b9:56:3b:19:83:ca:85:1e:2e:78:
10:f8:35:0a:eb:00:c4:c1:00:68:c1:56:8e:ed:32:
f7:d0:12:11:1e:ee:0e:03:5a:9b:c3:3b:63:f1:f1:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EB:4C:13:C1:5C:48:A1:1E:D1:8F:90:5D:1D:F0:81:90:0D:40:63
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/r-tME8FcSKEe0Y-QXR3wgZANQGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.61.0/24
185.81.180.0/23
Signature Algorithm: sha256WithRSAEncryption
72:d5:85:69:f4:2c:b4:6e:00:a9:9e:e4:79:b6:f2:b1:76:07:
ad:83:48:47:57:14:ff:bf:71:2d:23:1c:3c:75:77:85:49:1a:
81:20:95:bd:a0:dc:18:68:64:17:cc:c7:65:f5:5a:7c:4f:90:
6a:da:51:48:54:4e:3f:62:0b:55:c2:ae:63:8b:ea:93:5c:54:
da:2c:68:c2:1f:fa:39:83:28:25:c1:3f:06:ed:70:d5:22:6c:
50:91:c0:a4:24:a7:b6:9a:19:8c:4e:24:a5:de:c0:9c:63:51:
f0:6d:6f:6a:a3:5c:a2:3a:d3:8d:2b:ff:5f:d0:eb:e2:51:45:
64:39:45:3d:5e:81:24:77:94:01:60:e4:1f:0b:7b:5c:e1:d2:
a7:13:b2:81:24:86:19:c8:20:f8:79:68:37:cd:fe:9a:5d:c4:
57:b3:6f:5e:6f:12:42:31:44:99:57:1d:42:f8:86:31:cb:1a:
4d:74:ad:41:c2:2e:1c:01:54:99:d8:5a:a4:06:89:67:5c:88:
b7:3d:fb:b1:cd:26:ad:29:7a:fc:76:4f:1c:f7:e5:f3:9c:4b:
a8:52:35:8f:73:8f:24:5d:73:08:e3:f4:8c:0a:34:77:72:14:
66:1a:14:00:7b:dd:f1:17:a8:0a:8a:c2:f6:cb:53:a7:80:33:
ff:c1:9b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:55 2024 by rpki-client on console-fra.rpki-client.org