Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/E-AJPdJj4_tS3m7eSFfFslSeTi0.roa
File: E-AJPdJj4_tS3m7eSFfFslSeTi0.roa (raw, json)
Hash identifier: N+FKxTe98u6EdLjiDVLs2+VhosrTLdd2BC4Gax3AbL8=
Subject key identifier: 13:E0:09:3D:D2:63:E3:FB:52:DE:6E:DE:48:57:C5:B2:54:9E:4E:2D
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0188D2A675FD59D7BB0E1765A27954A8F754
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/E-AJPdJj4_tS3m7eSFfFslSeTi0.roa
Signing time: Mon 19 Jun 2023 07:55:04 +0000
ROA not before: Mon 19 Jun 2023 07:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140155
IP address blocks: 195.242.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:a6:75:fd:59:d7:bb:0e:17:65:a2:79:54:a8:f7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jun 19 07:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13e0093dd263e3fb52de6ede4857c5b2549e4e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:11:ca:59:f2:9e:de:14:87:8c:b2:69:31:
14:f2:e1:f3:f5:22:c5:19:eb:9f:40:91:50:9f:3f:
81:32:89:55:89:8e:43:39:99:a3:94:59:97:4b:dc:
0f:aa:cf:7b:11:77:ba:12:ca:e3:d9:8a:65:d9:06:
47:b0:40:ed:a7:e2:5b:58:4d:c5:0a:ea:4c:f5:5b:
92:2f:17:7d:78:9a:10:37:a9:1d:43:58:0e:03:68:
96:84:46:d4:e6:97:a2:96:5b:8c:86:65:1e:8b:79:
4e:5c:bf:1b:aa:72:0c:a7:37:11:c8:82:f5:9e:b5:
47:f5:fb:cf:9e:50:fa:cc:ef:54:84:ce:86:53:9a:
2f:50:3a:a7:43:dd:90:84:c6:8c:18:89:5b:b6:de:
13:fe:55:c5:71:c6:f9:f3:ac:7f:a1:d2:c2:1f:d5:
98:3c:66:e5:f4:24:2f:5f:27:56:17:04:83:e3:9e:
82:48:e9:21:ca:ec:e9:68:c8:3b:07:7f:7c:aa:33:
7b:a2:c3:5a:9a:a7:15:c9:e2:ec:13:d0:50:d3:47:
18:b3:2a:17:7b:e5:06:43:31:2a:62:04:31:a5:e9:
8c:91:58:a9:eb:9c:5a:e8:37:f9:7f:8f:fa:d9:86:
a5:7d:2e:27:db:34:f2:d3:fb:80:65:f9:2e:65:cc:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E0:09:3D:D2:63:E3:FB:52:DE:6E:DE:48:57:C5:B2:54:9E:4E:2D
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/E-AJPdJj4_tS3m7eSFfFslSeTi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:99:ae:a5:25:f2:d8:b1:42:d5:4b:77:ec:1c:38:fa:fa:e7:
da:9a:e8:8e:3e:93:98:8f:37:69:d8:56:8f:a6:b5:61:3d:7e:
45:59:29:8b:05:c9:ea:48:98:48:20:63:56:a7:f8:e7:10:61:
d7:59:db:16:75:71:b1:15:ef:93:0b:c7:26:00:7f:42:88:c8:
2a:ce:3d:a7:8d:7d:ef:ee:7d:33:ec:d8:6b:41:33:28:c0:9c:
2b:c5:8c:13:5b:42:28:30:6d:85:59:aa:2f:fd:ac:d7:1a:72:
24:bf:e8:f4:b1:a8:95:b5:9a:8f:9f:d8:3c:07:ce:02:17:38:
66:12:94:d2:cf:b7:fb:2d:2a:34:82:dd:2c:03:e4:75:73:59:
59:50:1e:d6:20:2e:8d:45:e3:73:89:47:7e:a4:6c:e4:5d:50:
00:a5:e0:d9:9a:24:16:26:00:94:b6:42:91:79:b1:27:04:ab:
9d:d5:62:9e:28:e7:71:63:a5:a9:45:32:90:34:81:5a:3c:5e:
26:83:f2:b1:b3:cc:8b:d5:fa:a9:69:73:f9:8f:a1:f9:d7:8a:
ba:32:89:d4:92:97:60:85:ba:9b:00:a1:85:70:15:bd:25:2a:
e2:26:44:49:78:3b:02:13:74:64:ff:23:de:ca:39:b7:53:14:
85:aa:c5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net