Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/AAXtIDQsWBsO69-A8JqBr_16Q04.roa
File: AAXtIDQsWBsO69-A8JqBr_16Q04.roa (raw, json)
Hash identifier: UkdNgoFQT4XMB81wO83pZhE9Frc5EbUcEhDObsvS0po=
Subject key identifier: 00:05:ED:20:34:2C:58:1B:0E:EB:DF:80:F0:9A:81:AF:FD:7A:43:4E
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018AEF6E06D54A7EA690DF7332AE01F366E3
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/AAXtIDQsWBsO69-A8JqBr_16Q04.roa
Signing time: Mon 02 Oct 2023 08:07:59 +0000
ROA not before: Mon 02 Oct 2023 08:07:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211709
IP address blocks: 91.93.184.0/24 maxlen: 24
213.14.231.0/24 maxlen: 24
213.14.233.0/24 maxlen: 24
213.14.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:6e:06:d5:4a:7e:a6:90:df:73:32:ae:01:f3:66:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Oct 2 08:07:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0005ed20342c581b0eebdf80f09a81affd7a434e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:57:ae:1c:cc:11:a8:9f:a4:ac:83:c2:7e:92:
bb:7c:9f:b6:94:3a:0e:46:0e:c5:4a:21:68:1e:2b:
ba:0e:69:4e:97:30:e1:6b:a9:54:38:66:5e:0a:6e:
d6:19:e3:74:ce:e7:1d:cc:18:05:dc:c8:de:0e:d3:
a6:42:46:33:ca:f8:a7:8e:ad:a1:fd:9d:3b:16:55:
cd:8c:61:6b:15:24:a8:9a:b7:70:c3:3e:7a:42:90:
43:34:58:c9:2b:e3:9f:1e:b7:20:48:ae:7e:5e:3c:
e8:7f:ce:95:b2:b9:31:38:78:c2:b7:61:b1:0a:ff:
38:7e:b0:7e:a7:be:de:71:4f:0d:60:f8:16:8e:9d:
36:ca:03:9f:45:66:73:19:a8:cb:c1:12:f5:5e:04:
5d:bd:0b:45:97:87:85:2d:1d:9c:89:f6:ad:8e:e2:
19:ea:3e:b6:ac:80:4b:26:11:d2:ab:df:bd:79:10:
af:8b:ca:f4:25:ca:3a:6c:6e:46:a9:30:70:88:7d:
19:6a:f7:c6:62:b3:3f:50:e0:06:cd:c3:db:8f:8f:
d1:16:ac:4d:37:33:05:a5:93:0e:ea:31:b8:7d:f5:
ef:b7:b4:fb:51:1b:3d:70:23:a6:39:b0:ab:5f:9f:
c2:36:21:6a:c8:87:1b:20:be:ea:e9:df:c5:8a:eb:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:05:ED:20:34:2C:58:1B:0E:EB:DF:80:F0:9A:81:AF:FD:7A:43:4E
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/AAXtIDQsWBsO69-A8JqBr_16Q04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.93.184.0/24
213.14.231.0/24
213.14.233.0-213.14.234.255
Signature Algorithm: sha256WithRSAEncryption
01:11:70:02:2f:66:d8:5a:bb:59:86:34:6b:62:38:0f:4d:7e:
d6:2d:83:ba:e2:e1:9f:c5:c1:36:01:c2:1c:52:6b:e6:a3:55:
57:c0:2f:b1:f0:51:a9:82:99:ff:59:a8:91:f7:20:22:f7:43:
95:62:95:fc:be:0f:9d:83:e8:6e:48:0f:14:ba:bc:ca:a3:6f:
6f:67:e7:d7:fe:cd:a1:b0:d7:d2:b2:35:e9:30:11:c0:30:69:
2c:90:e3:aa:31:09:11:9e:e6:46:46:70:a9:5b:2c:4d:64:3f:
b1:85:63:17:41:91:4b:14:f7:e0:e3:94:c7:67:5e:59:d5:c7:
ae:17:a1:b1:01:9f:1b:25:ad:0a:d0:c2:8b:ef:14:2c:fb:67:
34:5a:bc:99:e3:43:31:25:59:10:7b:41:5c:13:fb:a1:14:6e:
a9:5a:c8:5e:41:d9:7c:08:81:d0:04:36:6b:a2:7b:0c:6a:ba:
4f:21:0e:f6:68:cc:74:27:a1:0c:b1:e3:16:79:2f:8b:cb:08:
26:16:50:c3:b9:39:3d:5b:d4:1a:8c:95:41:17:d6:2b:f4:cd:
9a:1f:9b:4f:d0:5a:4e:32:8c:51:59:84:bf:0f:af:b1:ae:4f:
eb:27:f4:5e:b3:f3:f2:4a:41:3b:0b:c2:b2:21:5f:e0:c3:64:
2d:c2:72:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org