Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/rdr7D8_Dacy-pWvMPwXM6Z2fGuE.roa
File: rdr7D8_Dacy-pWvMPwXM6Z2fGuE.roa (raw, json)
Hash identifier: jX5Y16ampxQxSR+spEaD3uZc4IBlJiEOZajp8QwafQU=
Subject key identifier: AD:DA:FB:0F:CF:C3:69:CC:BE:A5:6B:CC:3F:05:CC:E9:9D:9F:1A:E1
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018CCAEADB59CDC68362438C5117BB88B081
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/rdr7D8_Dacy-pWvMPwXM6Z2fGuE.roa
Signing time: Tue 02 Jan 2024 16:03:58 +0000
ROA not before: Tue 02 Jan 2024 16:03:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 195.242.243.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 13:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:ea:db:59:cd:c6:83:62:43:8c:51:17:bb:88:b0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 2 16:03:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=addafb0fcfc369ccbea56bcc3f05cce99d9f1ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:70:b1:2b:3f:b0:c7:bc:1e:7d:39:c3:74:0e:
90:97:67:b8:bd:4d:51:67:fb:56:67:85:6c:85:21:
b7:5a:53:33:cd:2a:9b:1b:53:ce:05:ef:1c:d2:ba:
f9:28:70:c7:83:7b:dd:0c:55:19:ee:54:14:7d:0d:
ab:bc:d3:31:0d:44:66:63:fc:e7:c8:4e:a0:22:33:
a1:e9:f7:02:a8:65:db:80:9e:ea:62:c3:5f:e0:94:
98:23:f5:b8:94:2a:98:fc:eb:e9:56:27:fb:57:2a:
a0:95:a7:22:a5:86:66:ec:58:ac:1f:1e:b6:74:0f:
23:c7:cb:f2:fe:3e:8a:6e:27:7f:f1:9b:46:05:8e:
f3:5a:3a:8c:26:98:75:12:3c:c4:12:4a:19:f1:3d:
c3:4d:4d:90:6c:0a:48:7a:f4:84:19:c0:bb:fa:4d:
a5:f1:56:88:ca:35:2f:04:1f:5b:cc:6b:27:2e:16:
11:c1:9a:0e:a0:7d:9d:1d:48:7f:dc:18:a1:4f:43:
27:9b:26:79:a4:98:7f:99:0c:35:82:04:e3:9a:ef:
47:6c:41:97:21:12:10:bd:81:30:5b:fa:f9:d3:0e:
35:91:9c:55:48:dc:a4:94:9f:17:94:65:e8:1c:3d:
4a:24:9c:e2:42:68:d8:d9:13:82:af:d1:b1:2f:56:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DA:FB:0F:CF:C3:69:CC:BE:A5:6B:CC:3F:05:CC:E9:9D:9F:1A:E1
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/rdr7D8_Dacy-pWvMPwXM6Z2fGuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.61.0/24
185.81.180.0/23
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:0e:25:17:ee:c8:74:0b:11:c5:8d:e8:7c:3a:4c:6d:f9:57:
b6:ab:ce:b5:81:63:5d:03:c5:78:18:76:14:80:89:de:1e:1d:
08:ab:cb:95:e7:5a:34:b9:5e:74:53:25:bc:3a:b5:98:46:17:
db:a2:34:1c:87:92:ec:01:2b:13:4e:d3:13:84:e7:05:43:de:
3e:2a:01:2f:12:3b:3f:91:39:64:6f:31:32:ae:de:c0:f3:47:
9e:a3:fb:ff:1b:e0:9e:fc:12:f8:0f:6a:4b:70:bf:24:8e:f6:
fb:59:90:71:30:92:b2:78:f8:a5:d9:2a:7c:1e:d3:98:96:46:
d3:ac:1c:1a:fc:07:45:0f:94:f0:c6:1b:36:ad:ba:9e:8d:5e:
a0:ce:bd:58:a7:ed:75:d6:a0:4e:5c:2c:17:e5:2e:b3:e5:87:
ea:29:ff:5c:b0:0d:ff:1b:7b:5f:92:b8:cf:1a:01:7f:76:d8:
25:13:6c:e6:9e:e7:50:31:fa:f6:f7:0b:55:79:41:91:7d:3d:
a5:6b:61:f0:01:21:d4:1a:5b:bb:59:66:43:0a:8d:6b:c6:0e:
8f:d3:9b:84:8f:7e:0e:35:dd:7b:1f:b3:d7:3e:59:ae:64:96:
99:99:ff:f2:bf:b6:1c:bc:67:ca:87:fe:3d:3a:2d:f7:b1:6c:
fa:fd:38:66
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzK6ttZzcaDYkOMURe7iLCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjQwMTAyMTYwMzU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGRhZmIwZmNmYzM2OWNjYmVhNTZiY2MzZjA1Y2NlOTlkOWYxYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XCxKz+wx7wefTnDdA6Ql2e4vU1R
Z/tWZ4VshSG3WlMzzSqbG1POBe8c0rr5KHDHg3vdDFUZ7lQUfQ2rvNMxDURmY/zn
yE6gIjOh6fcCqGXbgJ7qYsNf4JSYI/W4lCqY/OvpVif7VyqglacipYZm7FisHx62
dA8jx8vy/j6Kbid/8ZtGBY7zWjqMJph1EjzEEkoZ8T3DTU2QbApIevSEGcC7+k2l
8VaIyjUvBB9bzGsnLhYRwZoOoH2dHUh/3BihT0MnmyZ5pJh/mQw1ggTjmu9HbEGX
IRIQvYEwW/r50w41kZxVSNyklJ8XlGXoHD1KJJziQmjY2ROCr9GxL1abKQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFK3a+w/Pw2nMvqVrzD8FzOmdnxrhMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvcmRyN0Q4X0RhY3ktcFd2TVB3WE02WjJmR3VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXXI9AwQB
uVG0AwQAw/LzMA0GCSqGSIb3DQEBCwUAA4IBAQChDiUX7sh0CxHFjeh8Okxt+Ve2
q861gWNdA8V4GHYUgIneHh0Iq8uV51o0uV50UyW8OrWYRhfbojQch5LsASsTTtMT
hOcFQ94+KgEvEjs/kTlkbzEyrt7A80eeo/v/G+Ce/BL4D2pLcL8kjvb7WZBxMJKy
ePil2Sp8HtOYlkbTrBwa/AdFD5Twxhs2rbqejV6gzr1Yp+111qBOXCwX5S6z5Yfq
Kf9csA3/G3tfkrjPGgF/dtglE2zmnudQMfr29wtVeUGRfT2la2HwASHUGlu7WWZD
Co1rxg6P05uEj34ONd17H7PXPlmuZJaZmf/yv7YcvGfKh/49Oi33sWz6/Thm
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:54 2024 by rpki-client on console.sobornost.net