Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/CRWdAA1Se702Q3HeAqH_5X201x4.roa
File: CRWdAA1Se702Q3HeAqH_5X201x4.roa (raw, json)
Hash identifier: N3JXLRPyi9eQKJs+CAXAUVrmLWsMgwEsnZv7TVAJZjY=
Subject key identifier: 09:15:9D:00:0D:52:7B:BD:36:43:71:DE:02:A1:FF:E5:7D:B4:D7:1E
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018B802A940598288671814A2D1F66D39685
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/CRWdAA1Se702Q3HeAqH_5X201x4.roa
Signing time: Mon 30 Oct 2023 10:39:15 +0000
ROA not before: Mon 30 Oct 2023 10:39:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.181.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:2a:94:05:98:28:86:71:81:4a:2d:1f:66:d3:96:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 30 10:39:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09159d000d527bbd364371de02a1ffe57db4d71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ff:89:f8:9e:bc:f5:ce:c9:12:78:78:f3:1a:
47:58:c8:1b:14:97:63:b3:03:18:96:93:75:97:ef:
7d:7b:4d:22:ab:f0:c6:11:00:8a:1f:ad:95:95:7a:
99:cd:18:fb:78:e5:95:6a:f1:c9:17:67:ea:e6:35:
6b:bd:bb:ef:c4:db:f6:73:32:a1:d7:98:5f:68:4e:
97:30:70:ff:de:da:7a:56:ce:b9:b0:0e:e6:ac:80:
bf:ae:f6:bc:38:7d:fb:e2:a6:f6:50:c0:58:f8:85:
9b:ed:00:c2:b6:c4:bb:ec:39:e0:20:01:77:6f:6e:
be:6a:33:09:d2:f9:4a:0e:1c:35:cb:7f:87:06:0b:
54:72:b2:fd:ac:98:ed:ce:86:a7:ba:e0:69:2c:c2:
d3:48:81:c1:0a:96:a0:63:2f:5f:7f:ca:4e:b9:df:
9b:21:58:bb:a7:08:7c:c5:86:1b:5d:69:96:ff:ed:
77:cf:bf:68:eb:7b:78:1f:d9:d6:78:18:16:21:02:
0c:e9:f9:bb:5b:b3:c9:b3:be:a2:30:0f:99:ff:32:
43:ee:22:a8:bf:de:fc:7e:f6:ae:e3:85:d8:ae:da:
b1:57:b7:bf:5d:8e:e3:1e:41:6d:ef:7d:12:f5:54:
7a:2b:45:ee:c7:d7:9c:09:e6:49:c9:fe:5f:28:7e:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:15:9D:00:0D:52:7B:BD:36:43:71:DE:02:A1:FF:E5:7D:B4:D7:1E
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/CRWdAA1Se702Q3HeAqH_5X201x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.61.0/24
185.81.180.0/23
Signature Algorithm: sha256WithRSAEncryption
43:38:8f:a3:ed:1c:0a:9a:8b:69:6b:db:55:94:ca:05:14:4e:
44:b0:81:2e:aa:2b:1b:3d:a4:2e:84:66:fb:c9:8b:13:06:3a:
db:6d:72:bd:22:b5:2e:87:8f:31:3b:44:ed:41:53:26:95:83:
66:c8:78:e2:af:58:f2:93:d4:81:f8:dc:5c:3e:53:24:22:4d:
8d:5f:da:6f:74:d0:37:21:6d:d8:fd:e5:f6:46:22:c7:8f:65:
a4:5d:56:b5:a1:6c:34:ed:80:dc:fc:f4:4a:7b:db:7b:9d:7b:
a5:5b:86:a2:fe:f6:1d:f0:b7:61:2d:95:20:69:99:43:f8:c2:
67:58:44:84:54:ae:3d:1c:54:99:c7:83:32:ed:91:0e:b0:97:
b4:61:3c:b2:e1:c2:67:0d:89:60:83:c8:8a:cd:ff:5a:59:f4:
8b:5c:b5:f4:2c:23:46:a4:fd:7c:31:2d:28:fe:5a:65:21:d7:
1c:7e:44:2c:35:4a:a8:8d:1a:f8:c7:b3:9f:90:c8:0c:83:33:
5f:7f:48:ca:69:6d:5f:85:56:60:c9:61:8a:56:0b:b8:0b:90:
6a:19:a1:21:b8:29:f5:03:2c:e1:e4:2c:0a:70:0e:de:df:40:
5a:9b:ed:7f:5c:74:af:5c:8f:66:ce:dc:45:60:1c:00:d9:87:
d8:f8:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net