Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/9jGVBq3F3nFWKf1pO8xKvu9WVjs.roa
File: 9jGVBq3F3nFWKf1pO8xKvu9WVjs.roa (raw, json)
Hash identifier: UknO2/VUpIouYppyt9L7967Issf/KS2rv/QTKD4HPUE=
Subject key identifier: F6:31:95:06:AD:C5:DE:71:56:29:FD:69:3B:CC:4A:BE:EF:56:56:3B
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018B046DC1EEF86D7ED4099BFFF49B13DDF4
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/9jGVBq3F3nFWKf1pO8xKvu9WVjs.roa
Signing time: Fri 06 Oct 2023 09:59:43 +0000
ROA not before: Fri 06 Oct 2023 09:59:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.242.241.0/24 maxlen: 24
195.242.243.0/24 maxlen: 24
185.81.181.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
89.46.10.0/24 maxlen: 24
93.114.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:6d:c1:ee:f8:6d:7e:d4:09:9b:ff:f4:9b:13:dd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 6 09:59:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6319506adc5de715629fd693bcc4abeef56563b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:05:79:eb:7a:e4:04:47:76:cd:df:cc:f8:02:
51:60:d4:95:3d:07:30:10:a6:08:a3:1f:98:5e:51:
69:53:2e:0f:07:f6:9d:bf:b3:c6:cd:1c:78:e7:e6:
83:59:c7:99:ea:7b:35:5d:9c:1b:80:0a:a8:f9:ec:
f3:a7:39:10:57:2f:0a:66:7e:94:25:21:68:dc:fe:
56:6c:52:43:d5:91:42:74:1e:a1:7e:6c:44:58:f4:
2b:01:92:4e:67:07:da:8b:f6:0d:b9:bb:80:86:0f:
ba:b1:85:83:f4:8f:43:8e:2a:3e:b1:33:be:5e:03:
58:38:80:fb:cb:84:3c:4f:94:11:b8:e7:f0:03:46:
9f:3d:ab:05:f5:d5:9a:2b:b4:41:73:b2:6a:f6:c1:
6b:4a:b6:ea:bc:c1:1a:09:4f:e6:9a:48:ba:f6:ea:
f4:0e:96:f9:5a:be:55:e3:5c:e4:f8:6f:59:ef:23:
43:5e:c1:e4:a1:87:2f:3a:bc:7e:47:36:c3:89:10:
57:f2:ec:0b:5b:f2:77:c5:c1:93:8a:99:08:32:c3:
50:6d:89:2d:64:1b:49:10:5d:c4:d2:c7:5b:bb:07:
e4:c8:1b:a5:ec:90:9c:3b:cd:23:28:ba:8f:e4:c0:
c7:8b:81:9d:10:f0:f0:1b:5c:86:84:ed:07:e6:bd:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:31:95:06:AD:C5:DE:71:56:29:FD:69:3B:CC:4A:BE:EF:56:56:3B
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/9jGVBq3F3nFWKf1pO8xKvu9WVjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
93.114.61.0/24
185.81.180.0/23
195.242.241.0/24
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:6e:de:a5:03:7e:ad:17:de:09:6d:ca:38:4f:30:da:fd:29:
95:47:5b:6f:78:c1:b9:54:24:91:b0:0c:54:e3:ff:00:ab:dd:
17:7c:bc:27:57:b0:ec:c3:ad:1f:60:2e:c2:6a:02:ca:e1:a1:
d9:bd:a7:58:b8:a8:97:c8:78:2f:be:91:1b:d5:aa:90:8f:c1:
e5:5d:3c:bb:7f:3d:4d:ef:be:0d:88:65:2c:40:4b:96:54:13:
cd:65:5a:bf:67:0b:83:33:c7:29:3f:eb:a4:df:81:00:05:9d:
60:d4:71:6f:83:9f:f4:d6:7d:ce:81:4f:a2:39:87:ec:9c:c0:
92:41:99:5e:f4:ae:6c:2f:45:14:2d:17:5c:bd:34:1b:f9:80:
77:8f:1b:8d:9c:69:e0:ce:b2:9b:2f:30:0f:7e:01:75:85:12:
22:61:66:e6:a7:e2:4c:b7:8a:e4:e0:65:06:41:b2:23:c9:95:
d6:d7:48:f1:08:e7:e1:a8:c4:ba:86:d3:10:71:06:67:15:29:
d6:ad:85:3f:2a:e0:b7:b5:80:d7:99:40:22:bb:ff:60:94:89:
c3:f1:92:21:56:a3:2b:01:32:f7:56:90:b3:57:78:2d:35:f9:
7f:0b:f9:a7:25:81:4e:c6:c2:a6:97:fa:d7:5b:f5:89:ec:e2:
d1:64:43:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net