Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/wxmkcYDC7nnjDdLFKEokOc0RXsA.roa
File: wxmkcYDC7nnjDdLFKEokOc0RXsA.roa (raw, json)
Hash identifier: kUTL3duZ+mHrrZ0z4fHSNx/JuXSUzHSnZQguSu3cjMw=
Subject key identifier: C3:19:A4:71:80:C2:EE:79:E3:0D:D2:C5:28:4A:24:39:CD:11:5E:C0
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018C634095D549F16A72E49FF593D049E99E
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/wxmkcYDC7nnjDdLFKEokOc0RXsA.roa
Signing time: Wed 13 Dec 2023 12:57:06 +0000
ROA not before: Wed 13 Dec 2023 12:57:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.242.243.0/24 maxlen: 24
185.81.181.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:40:95:d5:49:f1:6a:72:e4:9f:f5:93:d0:49:e9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Dec 13 12:57:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c319a47180c2ee79e30dd2c5284a2439cd115ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d2:34:85:a2:cf:20:84:35:68:58:5a:af:b7:
09:ee:93:bf:7c:1c:aa:77:a3:6e:ee:b7:66:32:86:
ae:f9:be:bc:cf:dc:6f:aa:6d:e1:73:38:81:9d:bd:
af:4c:33:d2:db:e8:13:d4:00:62:40:99:24:40:5c:
1b:78:00:2d:f7:d1:18:d4:e3:85:46:2f:7e:a8:df:
1c:08:b7:f1:44:29:7a:36:4b:24:6d:38:d7:eb:b4:
47:75:51:65:5a:14:15:a8:8b:74:a8:58:95:52:f4:
9c:60:c0:5a:cd:c9:ac:7c:46:7f:5a:13:94:43:64:
2f:7f:59:51:3a:96:f7:52:63:a6:c5:00:1c:77:ef:
b6:eb:4d:21:be:69:64:e3:bf:af:4e:4d:70:76:25:
79:99:03:ae:5c:d3:1d:4d:21:cd:98:20:42:0c:09:
18:47:e5:7a:26:cb:f3:f9:f5:ac:49:93:45:7b:28:
9f:e5:36:4f:39:c3:2c:76:97:d4:a1:c2:79:bd:66:
98:42:4e:f6:1b:d4:8e:0d:a7:57:ff:55:99:aa:c2:
ad:13:ed:47:70:7c:0c:50:26:dc:7e:d4:52:30:0c:
9d:5f:10:26:db:5c:f2:f2:64:38:e8:7f:07:ab:0e:
5f:9c:f1:12:5a:87:25:40:cb:83:82:f8:f1:e1:d2:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:19:A4:71:80:C2:EE:79:E3:0D:D2:C5:28:4A:24:39:CD:11:5E:C0
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/wxmkcYDC7nnjDdLFKEokOc0RXsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.61.0/24
185.81.180.0/23
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
70:78:31:77:e1:4d:ee:c5:1d:cf:fd:5b:3b:ec:70:00:85:7c:
64:4e:16:65:2e:34:10:4d:87:2a:c4:56:09:03:dd:16:a6:01:
aa:7e:15:e2:6e:23:fe:f2:53:07:76:0a:1c:ad:96:fa:cf:10:
a7:b8:dd:31:a3:ce:fe:6a:4a:a8:a1:b3:ec:54:15:04:36:29:
2f:90:15:c0:4c:b5:11:24:83:04:29:5d:c3:70:74:00:ae:d5:
62:b7:50:96:10:09:aa:bb:c9:79:c4:53:54:0d:2d:49:6c:d3:
ba:f3:b8:57:4a:3e:fc:4a:82:40:68:8c:67:ec:04:f5:fc:5b:
b9:3f:d1:a4:96:87:7e:ac:69:c2:ba:aa:8a:55:d6:35:0c:04:
f1:2b:39:63:ae:8d:47:ca:8b:82:94:c8:24:55:fd:06:41:1e:
9b:22:b4:e0:d1:b8:64:fb:83:d2:2b:8f:9c:44:4e:61:56:9c:
c3:a0:eb:e3:76:81:26:bd:3a:48:8e:31:a7:23:b4:c1:c1:16:
35:ad:fe:58:9e:aa:66:d1:16:55:63:2e:1a:6e:84:58:0c:bd:
b1:36:c1:76:cb:ea:2e:8a:07:19:60:ef:df:d4:92:e2:4b:3f:
f7:ea:7c:c9:1e:ca:fb:d9:e1:e5:3a:3d:76:30:97:ab:f3:9f:
e2:36:b0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:55 2024 by rpki-client on console-fra.rpki-client.org