Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/vA-DFl5YqK_tlpbV__VYuc0RjYs.roa
File: vA-DFl5YqK_tlpbV__VYuc0RjYs.roa (raw, json)
Hash identifier: mV4e8+vNq81co71UgJ9nXjG6sKVFMctm6OnhIGi303A=
Subject key identifier: BC:0F:83:16:5E:58:A8:AF:ED:96:96:D5:FF:F5:58:B9:CD:11:8D:8B
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018AF4A77D046A83519BF2D5323F755231EC
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/vA-DFl5YqK_tlpbV__VYuc0RjYs.roa
Signing time: Tue 03 Oct 2023 08:28:51 +0000
ROA not before: Tue 03 Oct 2023 08:28:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.243.179.0/24 maxlen: 24
195.242.241.0/24 maxlen: 24
195.242.243.0/24 maxlen: 24
185.81.181.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
89.46.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:a7:7d:04:6a:83:51:9b:f2:d5:32:3f:75:52:31:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 3 08:28:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc0f83165e58a8afed9696d5fff558b9cd118d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:a7:52:a7:19:c5:a7:ca:49:c2:d8:70:62:
3c:84:7e:7f:fb:f7:b3:cc:ed:e3:82:47:48:95:8a:
da:a4:6a:e7:88:92:34:0a:be:e1:4f:95:4e:de:5d:
a1:6c:0a:92:36:77:51:63:b0:bc:0c:89:e2:5d:ad:
4c:c7:d4:d8:23:36:0d:86:ec:74:a4:3c:5e:78:48:
96:23:61:ae:2e:13:f7:e1:e4:8d:ef:41:b4:14:1b:
ed:9a:89:2d:c1:1e:07:7e:64:15:58:10:0f:39:1c:
02:e5:e1:e6:3a:19:57:08:82:be:a9:ec:30:96:31:
03:9f:9f:2c:b1:2d:33:9d:01:ac:6a:d7:8c:1a:2d:
0a:3c:75:d6:db:a9:55:80:b3:2f:b4:da:6b:00:b3:
9b:a9:b8:33:b6:36:fa:74:a5:6e:8b:8d:22:3c:f9:
b1:b5:4a:4d:a6:69:f9:58:66:aa:12:ce:33:02:19:
3c:e3:56:4f:47:b6:69:76:b5:fd:87:a8:95:de:18:
de:ad:4f:8d:ae:f8:2d:61:bd:38:1f:ec:65:54:28:
53:86:88:10:1e:c5:4a:60:9b:a8:bf:fc:48:3a:f3:
a4:af:d1:0d:77:b4:3c:39:10:ec:2b:5c:ab:a0:ad:
a8:7a:1a:19:8b:c9:90:a4:f8:2b:8f:92:0e:17:14:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0F:83:16:5E:58:A8:AF:ED:96:96:D5:FF:F5:58:B9:CD:11:8D:8B
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/vA-DFl5YqK_tlpbV__VYuc0RjYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
91.243.179.0/24
93.114.61.0/24
185.81.180.0/23
195.242.241.0/24
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a4:4c:99:47:d1:fe:cb:3e:c1:09:55:f5:0c:e0:09:a4:3d:
ca:f2:1d:dc:dd:bd:a5:b4:1f:b9:be:a4:1a:cb:2e:9c:d0:5a:
d3:e3:15:93:03:c3:0b:48:2b:f6:b9:2a:35:64:e7:96:62:c2:
e5:46:d2:73:cb:8d:95:76:39:ba:cd:3b:aa:f5:ad:7d:fb:63:
fc:4e:72:6f:fa:8e:b9:1d:6d:2a:2a:20:a6:86:ef:50:0a:9a:
a3:6a:e1:aa:51:de:ef:f6:1d:23:a9:b6:d9:24:0b:a0:79:d8:
f3:ae:58:73:42:41:7a:49:cf:26:f0:e1:04:0d:98:a0:d9:a0:
68:63:56:eb:76:65:f9:de:2e:d2:b7:30:9a:49:5c:0a:79:74:
1a:f3:32:65:89:42:38:c7:b3:d2:11:81:03:bd:41:59:75:f7:
15:1b:8f:59:ed:3c:d1:8b:ab:62:b8:21:0e:4b:c2:9a:7b:1f:
4c:c5:91:c5:35:b7:76:61:31:63:ac:c6:aa:ce:8e:29:f2:66:
1d:a1:08:38:52:96:a4:83:87:7c:99:73:4d:b3:d0:8c:ca:5f:
19:75:74:85:24:4e:fe:9b:e1:84:59:c1:5d:56:0c:4d:cb:13:
0d:7d:70:00:28:84:bb:42:10:d5:a4:31:f2:02:38:15:1f:45:
8b:79:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 10:38:56 2023 by rpki-client on console-ams.rpki-client.org