Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/FtuRtpJTn1TXopmgq0uwaRNx67g.roa
File: FtuRtpJTn1TXopmgq0uwaRNx67g.roa (raw, json)
Hash identifier: V4hIBLot9/9lOnGQVNiT9lTsXKJMvnVahEf6f4HI8dE=
Subject key identifier: 16:DB:91:B6:92:53:9F:54:D7:A2:99:A0:AB:4B:B0:69:13:71:EB:B8
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0189FD3F117963C9AED2F684FA6013FBD776
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/FtuRtpJTn1TXopmgq0uwaRNx67g.roa
Signing time: Wed 16 Aug 2023 07:28:36 +0000
ROA not before: Wed 16 Aug 2023 07:28:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.243.179.0/24 maxlen: 24
91.243.176.0/24 maxlen: 24
195.242.243.0/24 maxlen: 24
185.81.181.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:3f:11:79:63:c9:ae:d2:f6:84:fa:60:13:fb:d7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Aug 16 07:28:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16db91b692539f54d7a299a0ab4bb0691371ebb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:38:de:7c:32:04:55:f1:78:80:59:fc:52:
8b:8f:fc:9d:0d:1a:26:5a:42:d8:57:46:d4:88:a7:
9f:1e:7e:90:15:f8:7f:be:89:cf:8c:21:cf:8a:33:
b1:f5:5c:dc:82:7c:ef:07:90:cb:60:fd:88:20:37:
f1:35:b3:48:3d:9e:d4:ab:c3:c4:ff:d3:c5:84:f5:
14:93:d2:25:f1:88:eb:09:6a:a2:49:bf:f0:9c:97:
f9:25:d9:cc:41:21:0e:a5:11:7d:34:a0:98:f5:90:
52:80:10:a3:14:ac:76:37:8c:92:5a:a7:bf:69:75:
15:fe:ae:e7:6c:73:91:d0:fb:5e:22:14:69:99:ac:
7b:52:14:48:0c:cf:9d:75:e5:1a:23:2a:26:45:1a:
c0:13:32:7c:5e:d7:37:57:ad:3b:f7:1f:ba:df:8c:
30:1e:f6:6f:e1:0e:35:1d:ee:3d:0f:04:4b:75:b4:
bb:f5:99:54:3f:31:94:3d:5b:0c:6e:39:1f:12:07:
06:6a:ec:4e:8a:32:9f:55:1d:ad:dd:b4:92:20:94:
9e:56:e9:43:20:69:ea:03:32:25:d3:89:b6:ef:ec:
96:b5:46:7e:e9:15:39:b1:2f:39:f2:5e:76:99:60:
f6:e5:56:a5:33:d7:c3:57:04:a8:5e:97:94:5c:af:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DB:91:B6:92:53:9F:54:D7:A2:99:A0:AB:4B:B0:69:13:71:EB:B8
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/FtuRtpJTn1TXopmgq0uwaRNx67g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.176.0/24
91.243.179.0/24
93.114.61.0/24
185.81.180.0/23
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:5d:26:eb:45:64:73:1d:9a:9e:b6:04:9f:77:89:04:ed:d9:
45:56:ab:1c:32:b9:65:08:9c:e6:6e:8c:ce:d6:2d:f4:c7:92:
25:35:b3:f2:49:1b:61:01:ad:70:51:14:c1:7b:ee:3f:fe:99:
bb:2b:10:02:c4:19:41:89:d1:cf:24:1b:33:84:29:7a:01:fe:
92:39:e6:3a:32:15:20:f4:ae:c1:07:ee:b6:dc:70:87:ae:62:
99:34:4e:fb:ab:25:fd:f1:3c:73:5e:f6:82:04:6c:a9:44:21:
fc:3a:eb:ab:eb:e8:8e:7c:8e:53:f8:4c:7d:1a:c6:6a:d8:7e:
b9:a2:79:29:ba:c8:c8:20:e1:1a:12:10:e8:96:9c:44:74:c6:
d3:b9:82:78:99:64:f6:5b:f7:a8:ac:2c:18:a9:31:05:18:98:
65:90:e5:b7:d5:8d:88:0c:05:31:63:49:3f:ab:7c:ef:f9:ac:
d4:88:46:a5:c7:3e:27:b2:64:91:e5:74:8c:a0:c4:6e:63:2e:
8a:cc:d2:b4:8d:99:7b:a2:cd:86:43:5b:f9:a4:0e:9a:84:ba:
f1:dd:43:6a:46:07:61:75:94:7d:04:b9:11:56:33:b7:17:8a:
4b:e9:5a:0c:04:f4:2d:19:90:ff:87:f6:88:62:62:62:75:e5:
4f:dc:bc:44
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYn9PxF5Y8mu0vaE+mAT+9d2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjMwODE2MDcyODM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmRiOTFiNjkyNTM5ZjU0ZDdhMjk5YTBhYjRiYjA2OTEzNzFlYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfs43nwyBFXxeIBZ/FKLj/ydDRom
WkLYV0bUiKefHn6QFfh/vonPjCHPijOx9VzcgnzvB5DLYP2IIDfxNbNIPZ7Uq8PE
/9PFhPUUk9Il8YjrCWqiSb/wnJf5JdnMQSEOpRF9NKCY9ZBSgBCjFKx2N4ySWqe/
aXUV/q7nbHOR0PteIhRpmax7UhRIDM+ddeUaIyomRRrAEzJ8Xtc3V6079x+634ww
HvZv4Q41He49DwRLdbS79ZlUPzGUPVsMbjkfEgcGauxOijKfVR2t3bSSIJSeVulD
IGnqAzIl04m27+yWtUZ+6RU5sS858l52mWD25ValM9fDVwSoXpeUXK8TRQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBbbkbaSU59U16KZoKtLsGkTceu4MB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvRnR1UnRwSlRuMVRYb3BtZ3EwdXdhUk54NjdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAW/OwAwQA
W/OzAwQAXXI9AwQBuVG0AwQAw/LzMA0GCSqGSIb3DQEBCwUAA4IBAQAfXSbrRWRz
HZqetgSfd4kE7dlFVqscMrllCJzmbozO1i30x5IlNbPySRthAa1wURTBe+4//pm7
KxACxBlBidHPJBszhCl6Af6SOeY6MhUg9K7BB+623HCHrmKZNE77qyX98TxzXvaC
BGypRCH8Ouur6+iOfI5T+Ex9GsZq2H65onkpusjIIOEaEhDolpxEdMbTuYJ4mWT2
W/eorCwYqTEFGJhlkOW31Y2IDAUxY0k/q3zv+azUiEalxz4nsmSR5XSMoMRuYy6K
zNK0jZl7os2GQ1v5pA6ahLrx3UNqRgdhdZR9BLkRVjO3F4pL6VoMBPQtGZD/h/aI
YmJideVP3LxE
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net