Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/kUvTnq3H9NNJWkl2KvvQmXCr1PQ.roa
File: kUvTnq3H9NNJWkl2KvvQmXCr1PQ.roa (raw, json)
Hash identifier: mTFxZa3ng0WQJJyl7QppwnoP9W9gFsRWK0L1IfYnFbQ=
Subject key identifier: 91:4B:D3:9E:AD:C7:F4:D3:49:5A:49:76:2A:FB:D0:99:70:AB:D4:F4
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01887102DA11E1D03DFA994EAA6EA407D534
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/kUvTnq3H9NNJWkl2KvvQmXCr1PQ.roa
Signing time: Wed 31 May 2023 08:53:12 +0000
ROA not before: Wed 31 May 2023 08:53:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 185.81.180.0/23 maxlen: 23
89.46.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:02:da:11:e1:d0:3d:fa:99:4e:aa:6e:a4:07:d5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: May 31 08:53:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=914bd39eadc7f4d3495a49762afbd09970abd4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:fa:04:59:01:80:e3:65:28:7e:f9:17:8c:
5a:54:03:e9:13:f9:89:a9:20:5c:6a:00:65:83:3f:
74:ef:39:84:9d:50:b1:29:60:59:b8:37:c8:ba:3c:
62:f8:ff:ec:68:68:12:de:44:ff:c7:2d:7c:89:d9:
3b:3a:1a:51:7b:fc:6e:04:5e:70:c2:ab:8a:1e:d4:
56:51:32:35:17:26:59:d6:51:db:4f:43:56:76:24:
e5:86:61:18:e0:b1:2c:e8:22:f3:f4:f3:8e:ec:c4:
76:5a:c7:1e:6b:05:13:ff:e5:fb:22:5f:6f:33:cb:
60:6b:2d:74:4d:75:f0:f9:b5:bd:6a:98:ed:0f:cd:
1e:bb:62:a4:12:8c:e3:e6:93:80:ba:a6:b5:81:df:
33:6e:70:7e:73:c2:ba:21:46:0a:97:ba:3d:85:2f:
5b:7e:cb:86:17:9f:22:9f:89:54:ea:20:b8:b4:7c:
d8:0b:11:63:02:8f:88:43:9d:a0:c3:f9:b7:82:07:
13:c6:3c:ec:a2:9d:8d:55:08:14:ce:a1:3f:e5:1a:
3e:46:3e:7e:bb:26:44:29:8a:1d:48:81:e8:1d:be:
a4:43:82:b4:e7:81:0d:d8:8e:5b:79:d4:dc:e7:5c:
47:11:fc:5c:73:6c:16:86:ea:06:09:21:c1:94:2c:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4B:D3:9E:AD:C7:F4:D3:49:5A:49:76:2A:FB:D0:99:70:AB:D4:F4
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/kUvTnq3H9NNJWkl2KvvQmXCr1PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
185.81.180.0/23
Signature Algorithm: sha256WithRSAEncryption
73:86:c7:ab:3e:4f:5d:16:0c:e2:a5:b2:87:a3:6d:9b:7d:01:
d9:95:6b:3d:c7:ba:45:28:68:a9:fd:ba:a7:2f:11:bf:22:91:
c7:ea:7a:34:20:2e:48:21:3e:8b:a6:fa:b0:3a:b0:57:49:5a:
2d:1c:e6:ff:27:bb:5e:5d:b3:e0:3d:26:95:25:4c:8c:b9:99:
c1:40:ce:89:b8:aa:39:ba:de:98:0d:8a:45:ed:5f:9d:95:c2:
60:e1:30:8b:fc:7b:b8:05:21:95:0c:76:bc:c4:67:0e:a1:b5:
b8:5b:74:2d:85:2b:06:1b:0d:be:b2:51:d9:0d:06:89:5b:d7:
fb:e6:6c:2c:e6:c1:c9:09:0a:8a:b6:ba:7f:13:6f:88:f1:58:
fb:44:e1:de:47:a6:23:b7:a8:d9:3a:78:f1:ca:5d:37:81:7f:
43:d0:5a:50:0a:36:3e:41:33:4e:e2:ff:0e:e3:9d:42:70:5c:
49:3a:bd:d5:ad:2c:2d:4d:48:fc:7c:50:48:34:c9:22:3a:c0:
63:aa:e2:18:20:03:f1:66:3f:3a:b5:e2:ee:5b:07:8c:8d:ec:
c6:e0:5e:b3:b3:22:21:1d:59:67:b1:25:f7:76:18:7e:c9:24:
ac:2e:e8:2b:8a:ce:8e:94:74:a1:66:19:25:b1:31:4a:0d:cd:
e4:a4:9a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net