Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5WjSj8NzFW07RHh-rNbuE1DtwJs.roa
File: 5WjSj8NzFW07RHh-rNbuE1DtwJs.roa (raw, json)
Hash identifier: HyXuinhM6RD/Wd4uS2mxyL9GcfmR/9YVSdWgFcxhIj0=
Subject key identifier: E5:68:D2:8F:C3:73:15:6D:3B:44:78:7E:AC:D6:EE:13:50:ED:C0:9B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570950F4238B7D34E7BA1443A58E5083E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5WjSj8NzFW07RHh-rNbuE1DtwJs.roa
Signing time: Mon 02 Jan 2023 03:44:54 +0000
ROA not before: Mon 02 Jan 2023 03:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35004
IP address blocks: 93.170.116.0/22 maxlen: 24
93.170.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 16:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:0f:42:38:b7:d3:4e:7b:a1:44:3a:58:e5:08:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e568d28fc373156d3b44787eacd6ee1350edc09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:a6:60:35:36:6c:c2:ba:7e:fb:0d:aa:03:
a3:7b:bd:1c:de:c5:1e:2e:23:bf:cd:d3:59:6b:76:
e9:8a:1a:8a:4f:11:41:61:0e:1b:02:d5:a1:0b:4c:
5c:ec:ef:9b:21:17:aa:df:3f:ed:bd:87:0a:5c:19:
6b:a9:9b:c2:8c:76:67:37:80:71:e1:67:84:34:4a:
8d:b2:3a:d8:df:cd:8b:9f:13:95:71:ae:e1:d8:82:
6b:14:cd:f6:55:18:47:92:2b:e7:ef:05:b0:c3:92:
f9:dc:eb:df:17:7f:3c:6f:51:d9:be:1d:bf:95:fc:
05:15:2e:d9:3a:9b:11:af:62:3b:8c:71:2e:1a:19:
0c:1b:80:d8:24:6c:c1:d5:2a:8c:a2:8e:03:69:f4:
8f:da:a8:78:fe:41:c3:65:30:11:65:30:62:da:b6:
b5:d4:21:74:fd:94:60:e9:54:d7:38:82:4a:63:ca:
88:3d:52:d1:e7:fc:98:5e:c5:dd:59:87:7e:ad:ec:
ec:1c:05:71:9f:cb:c2:46:ac:29:b2:12:38:bf:f0:
4a:71:1d:c6:56:fd:06:a3:f6:71:4c:08:fa:95:87:
e3:51:47:48:b5:05:42:16:17:2b:92:7e:5f:3c:22:
65:81:30:c9:2d:37:a4:71:97:1d:24:b7:8c:1f:92:
12:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:68:D2:8F:C3:73:15:6D:3B:44:78:7E:AC:D6:EE:13:50:ED:C0:9B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5WjSj8NzFW07RHh-rNbuE1DtwJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:ee:a9:35:d0:e9:76:df:cf:20:51:a3:0b:a5:5c:c7:22:7e:
18:4f:a7:e0:de:43:73:0d:c3:62:4e:45:b0:10:4e:97:01:26:
2f:31:d5:01:56:88:22:36:ea:75:02:b0:d2:30:fe:51:30:d1:
be:90:cb:20:c5:84:08:ab:80:b8:d2:7d:f8:2f:2c:82:6c:43:
22:1a:1a:f3:76:07:35:44:db:c4:d0:31:32:15:f9:03:e1:39:
0d:dc:9b:2d:9e:29:59:93:8f:12:a7:65:b3:0b:e1:81:66:e0:
bc:98:38:14:46:80:e8:df:02:b7:6e:8b:c2:b0:cf:71:a3:df:
eb:8f:de:bf:e2:b0:9b:08:35:20:6d:d5:b3:42:27:4b:3b:be:
1f:fc:ad:1d:74:6f:a9:e9:14:5a:6f:2e:d7:b6:4f:3b:6d:af:
3e:1f:c7:73:15:df:82:5e:77:de:61:b1:13:c9:11:06:6a:8a:
fb:25:51:f5:09:91:3e:16:f3:ef:5e:58:40:60:7a:d6:22:87:
9a:df:4e:11:ab:77:0d:71:44:fd:85:2f:8b:b8:67:28:ab:18:
ec:ed:88:8a:12:72:06:c6:fd:60:6d:31:9e:66:27:ec:43:44:
94:e5:4b:e7:bf:ff:d5:2c:31:10:58:c0:ae:0c:35:59:3e:c8:
77:6a:10:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:49 2024 by rpki-client on console-ams.rpki-client.org