Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/xYE6VYYfCRwAlFVGMWbp3Cf6oSE.roa
File: xYE6VYYfCRwAlFVGMWbp3Cf6oSE.roa (raw, json)
Hash identifier: 3P663vWRjEecLScML7oCf7liHjTxqce6JDmZZVHIV04=
Subject key identifier: C5:81:3A:55:86:1F:09:1C:00:94:55:46:31:66:E9:DC:27:FA:A1:21
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0189CFB9EAB4E1AA6268634B54432A243DFF
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/xYE6VYYfCRwAlFVGMWbp3Cf6oSE.roa
Signing time: Mon 07 Aug 2023 11:20:15 +0000
ROA not before: Mon 07 Aug 2023 11:20:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 195.242.240.0/24 maxlen: 24
195.242.241.0/24 maxlen: 24
89.46.8.0/24 maxlen: 24
93.114.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:b9:ea:b4:e1:aa:62:68:63:4b:54:43:2a:24:3d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Aug 7 11:20:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5813a55861f091c009455463166e9dc27faa121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:9a:7f:d5:3b:12:bb:5d:cb:e9:23:67:4f:
27:6e:1d:0c:f1:b7:5a:6c:eb:cb:0a:ae:d4:98:db:
5d:00:2a:9f:0f:a0:44:64:9d:e0:6e:54:a5:a0:ff:
57:96:12:1b:6c:2c:16:14:88:fa:ce:19:03:27:e8:
7f:3d:03:59:b3:5e:72:fe:08:6d:bd:70:55:b7:ab:
c2:c8:ce:af:6c:c7:3e:99:61:0a:d1:16:05:13:e8:
42:3c:e8:27:fe:fe:2b:ba:4b:9a:63:b6:f3:db:d6:
f3:55:1e:7d:e5:b3:f9:ad:51:e2:2c:ea:ab:0f:53:
d0:0e:b5:3a:85:6b:93:df:3e:84:8c:77:f1:e5:78:
ac:47:4b:eb:fc:cf:a7:35:13:35:b2:72:04:dc:e9:
53:15:20:f5:2c:d2:3e:91:05:b0:76:55:5b:21:0c:
15:5d:b2:cd:e2:fa:40:bd:62:db:4d:08:84:bc:1a:
fc:d4:f6:28:b2:bd:d6:66:f6:c4:24:ec:ec:c5:16:
b0:6f:8a:55:9b:20:36:d3:6b:35:f9:cd:5e:81:90:
51:ab:92:45:5f:23:c7:d0:bd:c1:73:07:3b:48:f1:
0a:4d:cf:9d:fe:52:3a:a0:9e:af:c4:d7:11:1e:f0:
c0:88:69:ff:1a:3d:c8:b1:25:2e:d3:5f:aa:5d:6b:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:81:3A:55:86:1F:09:1C:00:94:55:46:31:66:E9:DC:27:FA:A1:21
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/xYE6VYYfCRwAlFVGMWbp3Cf6oSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.8.0/24
93.114.60.0/24
195.242.240.0/23
Signature Algorithm: sha256WithRSAEncryption
44:00:c5:96:85:bb:9b:83:ab:f1:89:07:83:bf:1f:7b:17:93:
f2:80:8c:ca:7e:f5:a6:98:ca:6d:4f:5f:10:0d:f4:d2:2c:21:
a3:a9:f7:25:4c:e3:e4:5d:c7:aa:42:27:a6:2a:d0:5e:eb:c8:
5b:57:4c:9c:c6:a2:6a:78:dc:9d:d6:7d:90:4c:dc:5e:11:2b:
5d:d1:ec:f3:3b:0f:dc:72:2f:ce:57:b7:94:5c:10:5c:2d:8e:
be:72:d4:a8:b6:25:77:fa:8a:b8:92:a6:c0:af:91:c6:5e:12:
58:8c:05:d3:f2:30:b7:2c:08:b6:2d:ae:ce:b4:7c:b4:e8:48:
43:8a:cb:7f:d1:94:6b:6e:f9:5b:96:c0:61:e3:1a:cb:56:4f:
1b:02:d8:13:05:ee:cc:28:4b:33:e0:bb:73:9b:14:61:79:0b:
c7:fc:d6:00:94:4c:f0:4f:e8:ef:79:2f:5b:75:43:58:91:0a:
a2:12:b1:02:ab:ae:a1:05:3c:c4:7d:fc:fe:ce:48:b8:0f:6d:
fe:af:73:14:59:6b:53:5a:e1:d1:82:ad:de:6e:71:80:5f:07:
f9:52:ea:93:88:fa:73:e6:43:d1:91:5f:c0:94:d9:9b:5b:55:
43:02:23:85:9d:a6:76:0f:90:67:51:87:fc:10:8e:13:27:54:
ed:53:d4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 13:38:03 2023 by rpki-client on console-fra.rpki-client.org