Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/HRr45mlz-n_li-waWthItpmwzsk.roa
File: HRr45mlz-n_li-waWthItpmwzsk.roa (raw, json)
Hash identifier: +fqeAboP9pZPQoCTrTdXVctm4OszGzJqzhjyfbXpRSU=
Subject key identifier: 1D:1A:F8:E6:69:73:FA:7F:E5:8B:EC:1A:5A:D8:48:B6:99:B0:CE:C9
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018B6B568C8D056C5A30B46E6DF96F2E098D
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/HRr45mlz-n_li-waWthItpmwzsk.roa
Signing time: Thu 26 Oct 2023 09:35:16 +0000
ROA not before: Thu 26 Oct 2023 09:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.181.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
93.114.62.0/24 maxlen: 24
89.46.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:56:8c:8d:05:6c:5a:30:b4:6e:6d:f9:6f:2e:09:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 26 09:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d1af8e66973fa7fe58bec1a5ad848b699b0cec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c9:ed:d0:d9:e9:fc:34:80:32:5b:c6:e5:3b:
57:d3:02:ba:2d:d5:cc:78:56:79:8b:b6:ae:1a:cf:
9b:42:a4:71:e9:79:18:a2:ea:0f:a6:49:48:c2:fa:
e0:f2:10:1e:49:65:d6:f3:1a:41:d0:0b:55:65:4f:
b9:61:76:4b:d1:a2:5f:de:50:a8:a0:41:e3:76:52:
d4:bd:db:5f:33:f8:f0:3c:20:59:87:93:a4:19:81:
a7:44:fd:d5:42:65:eb:0e:5b:e4:58:07:6f:d7:4c:
6f:dd:ee:b8:c5:7c:9c:75:51:f4:d8:80:2c:e8:7c:
b8:7b:6f:17:df:f9:83:85:10:50:f5:47:20:0f:aa:
34:24:92:37:39:39:db:95:b9:50:f7:96:39:9a:47:
41:ef:b3:3f:af:eb:29:da:26:e0:d9:36:a1:cf:f5:
4a:08:d2:48:ae:42:6a:22:ba:f1:9c:7c:f8:92:46:
5b:f7:a5:d8:5f:e1:fe:c6:bc:0c:d8:8d:f9:ed:f9:
c0:b7:79:b5:c1:9e:63:fd:e2:a8:26:59:86:e4:3c:
98:98:97:e0:66:57:f3:3a:f2:f5:47:c6:e5:22:9a:
d2:cd:8a:5d:08:10:1a:3f:4b:a5:c9:1b:5d:e7:b2:
ee:84:4e:4b:48:64:90:54:d1:24:ef:9f:9b:66:2d:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1A:F8:E6:69:73:FA:7F:E5:8B:EC:1A:5A:D8:48:B6:99:B0:CE:C9
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/HRr45mlz-n_li-waWthItpmwzsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
93.114.61.0-93.114.62.255
185.81.180.0/23
Signature Algorithm: sha256WithRSAEncryption
43:b2:3e:d0:c0:75:05:54:f1:6b:5a:d0:45:9a:67:bd:f6:10:
ad:1b:f7:2a:9c:ee:29:19:fd:88:7b:28:a4:90:1b:eb:00:40:
b5:be:4c:74:9e:71:aa:35:d9:db:56:22:b2:29:bc:aa:9b:4f:
46:57:fb:20:ad:34:ac:e8:28:15:ad:2c:c4:68:28:fc:3f:70:
e8:72:aa:5c:62:fd:32:6a:77:e2:c6:a6:f9:73:8a:d0:11:33:
32:10:10:9d:f2:54:37:9c:c1:71:7a:6e:f8:23:22:f9:12:4a:
91:e7:c3:1a:39:92:e9:d1:c5:6f:29:78:9d:3c:50:af:64:8e:
b3:d1:c1:e3:5e:f1:11:b3:50:1e:6a:a0:37:6e:5d:37:94:2e:
b9:5b:9c:b3:c5:7b:a8:3f:92:34:2d:bd:ce:90:81:9a:77:0c:
e9:c9:51:c4:4e:f1:74:3c:b3:38:ea:12:4c:ae:77:07:eb:6f:
c0:7c:2c:ea:bb:02:6b:eb:97:56:bd:5f:50:b4:96:2b:a3:c9:
37:27:68:91:cb:fc:5f:ff:9a:cb:44:32:1a:0a:c9:b2:52:dd:
82:80:cf:5e:8e:12:6f:6d:51:28:55:51:f9:1e:49:0b:45:42:
1f:58:68:71:eb:06:1e:de:9a:c8:19:e8:a1:a3:34:6d:1d:ed:
b4:be:b5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net