Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/29-cY9JspOSbbVWJIqIkEksDvkQ.roa
File: 29-cY9JspOSbbVWJIqIkEksDvkQ.roa (raw, json)
Hash identifier: lTG4g02+//61X5qRNTCoX2qfKwDLGeS2mvogi7iPYQQ=
Subject key identifier: DB:DF:9C:63:D2:6C:A4:E4:9B:6D:55:89:22:A2:24:12:4B:03:BE:44
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018AF4A77D6510D6F12F87B7ED147244984F
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/29-cY9JspOSbbVWJIqIkEksDvkQ.roa
Signing time: Tue 03 Oct 2023 08:28:51 +0000
ROA not before: Tue 03 Oct 2023 08:28:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.81.183.0/24 maxlen: 24
89.46.11.0/24 maxlen: 24
93.114.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:a7:7d:65:10:d6:f1:2f:87:b7:ed:14:72:44:98:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 3 08:28:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbdf9c63d26ca4e49b6d558922a224124b03be44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d9:81:49:21:a5:d8:4a:50:e4:02:34:e5:42:
ac:ad:c3:63:4a:45:50:05:e7:15:4a:8b:65:72:e1:
5e:ee:18:2b:40:9b:35:84:ac:ba:1b:97:a5:1d:9c:
7f:c6:c0:c7:26:e6:35:df:d1:bd:09:fc:cf:cc:e4:
ce:b6:1b:1d:b5:6c:29:e2:bd:e2:93:66:5c:e1:3d:
43:60:a4:a3:99:5c:39:53:0e:a3:8a:f0:45:95:9d:
8b:81:da:e8:b2:1d:c0:5f:48:3f:c3:54:2d:2f:80:
84:f7:e9:44:32:9c:89:56:db:88:5a:fb:8c:99:67:
e3:10:7c:d2:2d:7d:65:d3:d1:a9:7a:41:6f:8b:6d:
80:dc:6e:74:c2:d7:0d:8f:f6:a8:fd:49:fe:f3:ba:
67:8d:88:1f:63:52:61:52:ab:9e:16:59:a4:81:bd:
ca:c9:b7:1b:dd:d0:1b:69:e1:3a:d6:b6:89:9a:93:
50:c5:0d:f4:bf:18:06:f8:c3:a4:d0:2c:0d:ca:7d:
90:c1:7a:d0:b3:07:b1:aa:4b:ed:d2:46:23:1a:5e:
ef:4e:a1:37:80:aa:33:4d:73:4d:d6:89:87:25:f6:
e5:53:a5:08:6a:12:3a:98:ee:10:45:61:b2:ff:ed:
ea:a1:4f:67:ab:e5:bc:5e:d8:36:1e:03:9a:a9:92:
b1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DF:9C:63:D2:6C:A4:E4:9B:6D:55:89:22:A2:24:12:4B:03:BE:44
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/29-cY9JspOSbbVWJIqIkEksDvkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.11.0/24
93.114.62.0/24
185.81.183.0/24
Signature Algorithm: sha256WithRSAEncryption
51:24:5a:3c:d8:26:61:af:7f:eb:ac:08:2f:03:1a:92:08:e6:
8e:7e:8f:92:0f:e7:bb:e5:02:ee:99:1f:bc:95:b8:21:c5:5e:
67:f4:b0:51:98:c3:a5:fa:75:0f:44:b6:26:e3:82:ae:98:f6:
14:55:eb:55:e1:d7:c8:64:08:81:79:71:b6:7c:d9:60:f5:43:
fe:50:2d:6d:56:87:d9:14:57:9a:aa:3a:fa:9f:89:6f:e3:31:
ce:14:fa:0c:ad:ed:bc:04:75:c8:84:6a:bf:19:9b:33:c6:68:
74:ef:f4:e0:31:71:a9:21:b2:77:3f:09:cf:23:2d:0c:59:38:
3a:a1:b7:c5:fb:d2:c6:ea:0f:9e:1f:02:2c:c5:ee:12:02:5d:
b2:b2:f5:9c:42:7f:45:9e:ee:27:51:82:cf:bc:5d:e4:96:b2:
6d:e6:59:21:0e:c6:fc:35:8b:aa:89:31:2c:5b:cf:cc:bb:22:
36:f6:34:de:63:95:89:74:ee:0a:e9:a0:0d:dd:10:12:1c:c8:
c9:8f:18:56:13:21:94:c3:81:06:b8:0d:ed:18:3b:41:b0:19:
66:fc:2f:dd:d6:d6:c4:7e:93:7f:53:43:81:a2:69:8c:83:04:
23:84:ac:73:01:8b:5c:8d:7b:0d:51:5c:06:39:b9:68:af:7c:
fc:6b:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net