Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5IIlU4YD4LDOPIPycHKXdonxwf0.roa
File: 5IIlU4YD4LDOPIPycHKXdonxwf0.roa (raw, json)
Hash identifier: MZnMbElfQ9wkFgHxaEp4xSRDEEU0cywWnCvhmOUWB6Y=
Subject key identifier: E4:82:25:53:86:03:E0:B0:CE:3C:83:F2:70:72:97:76:89:F1:C1:FD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095136D21798F3412CE744857D11988
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5IIlU4YD4LDOPIPycHKXdonxwf0.roa
Signing time: Mon 02 Jan 2023 03:44:56 +0000
ROA not before: Mon 02 Jan 2023 03:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39631
IP address blocks: 93.170.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:13:6d:21:79:8f:34:12:ce:74:48:57:d1:19:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e48225538603e0b0ce3c83f27072977689f1c1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:0d:ed:0d:69:12:e6:ad:98:ab:76:37:be:
dc:51:83:42:e8:29:f7:51:7d:4a:73:54:cb:e8:82:
23:7b:1a:72:cf:50:d6:bd:f5:1f:6c:f9:a6:84:a8:
62:3a:98:9b:bc:7e:b5:71:a8:a2:8e:6e:d1:9f:ae:
6b:a1:61:97:d6:c1:bc:86:5e:ba:1a:ff:90:0c:66:
34:f9:52:e9:cf:ff:d0:c5:df:95:3b:7b:93:08:f2:
2b:53:6c:90:ea:cb:c5:71:c1:c2:05:dc:78:bf:ee:
05:b0:45:a1:9b:53:af:7c:8b:a2:e6:93:05:bc:62:
c8:06:4a:00:d6:6d:e0:8c:c0:59:a4:54:df:a8:f2:
be:ea:4b:8e:75:fd:c1:82:da:d2:90:4a:f7:86:90:
46:93:f7:28:b3:49:15:78:3a:10:bd:cb:56:bd:d2:
7a:c0:3d:cf:2c:54:dc:7e:e7:82:fd:be:91:23:14:
49:1a:66:2e:9e:0d:d6:5a:f0:be:ba:71:4f:8b:b6:
57:52:6a:b3:2e:21:b8:e1:ac:e4:a8:a1:94:de:2a:
1a:f4:aa:76:97:2c:0d:ea:d7:39:9e:5a:72:f6:87:
49:c5:26:be:a3:a6:6f:16:31:33:ef:e6:dd:8a:18:
34:a8:e3:89:b4:e8:fb:9d:58:f0:54:78:36:ac:ca:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:82:25:53:86:03:E0:B0:CE:3C:83:F2:70:72:97:76:89:F1:C1:FD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5IIlU4YD4LDOPIPycHKXdonxwf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a0:1f:bd:fa:2d:11:cb:13:e1:86:3b:7a:e0:c8:c8:6b:0d:
2e:1f:05:ba:7c:40:e6:b9:7d:d6:71:90:bb:03:f2:85:54:22:
e6:bd:14:c9:6d:15:80:9e:6f:ee:83:f5:8a:4a:49:54:ea:3a:
16:a3:09:3a:b3:15:b1:6a:8d:d2:da:64:d7:bb:ce:fe:08:2d:
53:59:a3:9a:6b:72:a8:20:2f:82:78:a5:6b:0b:6c:2a:b4:6d:
9f:f1:2e:50:7e:87:48:0c:9d:e7:9e:73:75:9d:12:38:36:48:
95:7e:1c:6d:78:57:11:99:1d:cb:04:1d:8b:22:64:5d:6a:34:
85:93:6f:1d:b8:bf:25:69:7d:95:69:3b:e5:3c:6f:4b:c7:d3:
1c:e6:d3:53:30:03:14:1d:ac:1a:f8:07:8d:9a:f5:3d:b5:ca:
81:86:f3:48:ca:71:e9:9a:d4:2d:dd:ab:c6:75:8a:8b:1e:80:
b2:88:b5:d6:73:d7:40:99:57:63:76:d9:34:42:d3:43:fb:24:
01:dc:ed:5e:22:ee:72:74:e8:ae:e3:49:e4:30:02:7e:c1:ce:
43:99:e7:e5:bc:f3:42:29:07:84:84:f2:d2:dd:f5:da:2f:c7:
35:de:34:85:ac:36:11:f6:d0:ef:f9:02:cc:79:19:ef:5c:03:
9f:2e:37:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:00 2024 by rpki-client on console-ams.rpki-client.org