Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/tn8KL3ni-QdthNRhc6PHY3TlEog.roa
File: tn8KL3ni-QdthNRhc6PHY3TlEog.roa (raw, json)
Hash identifier: hdR5QIALEzFDEL1NH/YGkG5vD+UxFhn7fajbnenk6e8=
Subject key identifier: B6:7F:0A:2F:79:E2:F9:07:6D:84:D4:61:73:A3:C7:63:74:E5:12:88
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018571B27FA973FA3E8A5567EFB4BB580046
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/tn8KL3ni-QdthNRhc6PHY3TlEog.roa
Signing time: Mon 02 Jan 2023 08:56:41 +0000
ROA not before: Mon 02 Jan 2023 08:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 195.242.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b2:7f:a9:73:fa:3e:8a:55:67:ef:b4:bb:58:00:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 2 08:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b67f0a2f79e2f9076d84d46173a3c76374e51288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:26:10:8f:de:f5:9a:52:b8:27:2b:c7:4a:35:
c7:cf:3a:a8:f3:59:74:2e:8c:7b:e7:09:b1:d9:51:
74:b0:9c:8a:24:c2:c2:36:0e:2b:f1:dd:c8:33:be:
8e:6e:d5:72:c4:03:1f:c6:8e:52:41:58:dc:ba:3f:
60:b7:8d:38:38:61:9b:5f:e0:4c:35:0d:13:fd:ea:
ea:7e:f7:2d:28:50:90:90:fd:0c:b9:82:d9:bf:0d:
a8:1c:fe:0e:08:2a:3e:79:ff:29:51:ad:0a:b2:66:
81:0b:90:f9:87:18:6b:49:4d:8c:87:a2:90:7d:6b:
05:31:a0:50:a9:0f:41:00:04:d5:25:59:82:73:43:
ab:77:2c:1f:fd:d9:61:89:49:8b:f4:1f:6f:78:0f:
9f:6f:45:ef:a2:ce:a3:74:57:9f:95:1e:d9:72:9a:
71:08:77:4b:df:31:6f:bd:6a:ea:1a:8f:3d:53:a8:
0b:7b:fa:23:af:83:af:72:c4:c6:c9:69:31:2c:12:
8e:63:8f:80:1d:9a:37:72:7f:46:3b:ee:15:ba:7a:
28:5e:73:5f:38:26:1d:fe:f1:6b:a7:2f:79:8a:88:
e7:08:77:4f:bf:2a:a5:62:ce:89:dc:6a:2a:89:14:
89:5d:c5:a2:d6:e2:7e:56:40:f4:2b:8b:d4:c3:8c:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7F:0A:2F:79:E2:F9:07:6D:84:D4:61:73:A3:C7:63:74:E5:12:88
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/tn8KL3ni-QdthNRhc6PHY3TlEog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.241.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:07:76:2a:6b:30:ab:51:d1:7f:65:ac:a2:f4:8c:1d:ff:71:
40:90:97:a1:59:c3:72:99:9d:a1:6e:34:70:99:96:08:9d:74:
b0:38:20:b9:83:c6:9e:e4:c5:b9:e7:c7:00:b8:fd:a4:47:57:
b6:f2:71:5f:07:35:fd:ae:85:10:ab:3e:8d:6b:fc:11:84:68:
11:c9:7e:1d:06:91:ff:5f:94:93:77:bb:d0:95:5b:a5:c3:66:
2e:f3:78:e5:a4:ba:10:9b:11:55:e6:8c:58:ad:6d:1f:71:37:
07:d4:05:b0:6a:f2:f2:f4:3b:7e:c5:5a:8b:4e:f5:cf:ea:2c:
3b:db:34:a9:f5:72:b7:da:6d:51:4a:a0:fd:82:d0:3f:93:bd:
b3:dc:0e:ba:d6:77:5c:4e:af:4d:b6:1e:0f:ad:6a:91:45:6e:
1d:6d:8c:04:2e:88:51:eb:33:de:f0:61:ae:13:2c:df:e7:ed:
03:24:90:b2:e7:3f:75:d8:ab:0e:ae:1b:71:23:ae:21:53:3f:
58:ef:5c:fd:22:69:0a:cf:8c:da:28:a8:66:8f:fc:f0:61:1a:
3c:60:21:f7:d2:9f:05:b3:25:22:f7:eb:34:d9:43:c5:a3:a4:
34:bc:b7:0f:8d:33:c5:6b:a7:70:b7:e4:22:e9:c7:62:32:00:
34:0e:42:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:04 2023 by rpki-client on console-ams.rpki-client.org