Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6oQuWyG4q58mj-owwUTim6nWJwk.roa
File: 6oQuWyG4q58mj-owwUTim6nWJwk.roa (raw, json)
Hash identifier: q/0ZTd2Us0gCsUBGfWlyaANhzwQRb+g17m1bZ+4NRcE=
Subject key identifier: EA:84:2E:5B:21:B8:AB:9F:26:8F:EA:30:C1:44:E2:9B:A9:D6:27:09
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0186933F070B2B41FC40493AF24BDBCB7CE9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6oQuWyG4q58mj-owwUTim6nWJwk.roa
Signing time: Mon 27 Feb 2023 14:20:26 +0000
ROA not before: Mon 27 Feb 2023 14:20:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50716
IP address blocks: 93.171.72.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:3f:07:0b:2b:41:fc:40:49:3a:f2:4b:db:cb:7c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 27 14:20:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea842e5b21b8ab9f268fea30c144e29ba9d62709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:fd:08:f9:7a:00:46:26:45:67:d3:92:02:
60:65:e5:58:3e:1a:e3:e9:c0:98:69:6e:1f:3d:5b:
f9:49:71:af:fc:1e:ac:79:9c:9e:4a:63:46:63:34:
46:cb:42:cd:7e:e7:8b:af:c4:d2:60:4f:4d:a2:65:
84:df:01:83:b2:6c:2a:11:57:a0:49:0d:43:00:5a:
6c:df:5a:e4:4e:83:0b:0f:87:0f:50:7e:e7:3e:7e:
1a:b4:43:ba:41:fb:4a:1e:5f:d0:71:4e:24:71:c1:
e4:01:03:3e:39:54:2d:03:48:13:32:bb:33:de:82:
a8:9a:e4:d7:2c:7e:5f:74:1b:48:a8:80:85:45:08:
cb:c7:c2:59:fc:20:df:a2:9e:aa:b8:49:2b:20:74:
10:20:33:6e:30:39:fe:76:b2:f9:8d:38:e9:3e:ad:
bc:b8:05:ea:df:f4:93:99:f4:ee:b9:91:eb:d2:11:
ca:a4:33:f3:84:3d:0a:25:59:b0:83:7e:1f:3f:a2:
2a:81:d9:94:56:01:45:b9:49:74:d7:5b:78:60:9d:
aa:d2:08:a6:fe:c2:89:f3:94:7b:84:d1:df:08:31:
3e:de:d0:ea:e6:a5:6e:96:58:c6:f4:0a:f6:91:58:
00:99:8e:ed:4a:9e:78:a3:f2:c8:af:5a:e7:47:5d:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:84:2E:5B:21:B8:AB:9F:26:8F:EA:30:C1:44:E2:9B:A9:D6:27:09
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6oQuWyG4q58mj-owwUTim6nWJwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.72.0/22
Signature Algorithm: sha256WithRSAEncryption
89:57:47:d1:21:09:04:4e:2e:e0:a9:c8:3d:d3:43:7e:78:aa:
b5:35:b5:4a:19:cc:60:9f:ba:fc:1b:9e:96:82:2b:e2:2b:13:
b5:97:b8:0f:6a:c8:50:3a:15:a5:0e:05:66:95:9d:a2:73:c4:
d4:30:0e:d1:e8:ec:87:65:8a:90:b0:e7:5c:43:76:33:4f:5c:
70:e4:53:c9:f3:d8:70:28:13:21:6f:3b:5a:70:8d:1d:67:ff:
29:44:e5:08:a5:80:60:31:7c:49:6d:7f:f6:b1:1c:cd:fd:8c:
01:98:c3:bc:61:9f:75:ef:64:b7:75:33:4c:ab:d3:8e:81:38:
28:a1:cf:f0:9e:15:a4:f1:8a:c8:d3:89:7d:84:02:92:c5:68:
9b:e4:88:5e:df:7b:32:85:ca:c3:e0:8a:2a:70:37:cf:07:1e:
cd:d6:d2:c2:a1:2c:00:32:3d:5f:4e:db:26:4d:d3:f2:f1:fa:
37:c1:0f:9b:ac:63:1c:03:b9:9a:5f:1f:91:ed:ec:b6:0d:c7:
16:1d:c7:f6:eb:6c:43:36:34:bd:b9:dc:6e:ed:cc:a6:a2:5c:
c3:26:8b:84:76:fc:2c:fd:d2:3d:52:95:ea:5c:ca:9e:32:be:
d1:07:e8:48:6f:9b:50:1b:73:a0:99:bb:23:71:09:eb:91:95:
01:2c:7e:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaTPwcLK0H8QEk68kvby3zpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMjI3MTQyMDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTg0MmU1YjIxYjhhYjlmMjY4ZmVhMzBjMTQ0ZTI5YmE5ZDYyNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2v9CPl6AEYmRWfTkgJgZeVYPhrj
6cCYaW4fPVv5SXGv/B6seZyeSmNGYzRGy0LNfueLr8TSYE9NomWE3wGDsmwqEVeg
SQ1DAFps31rkToMLD4cPUH7nPn4atEO6QftKHl/QcU4kccHkAQM+OVQtA0gTMrsz
3oKomuTXLH5fdBtIqICFRQjLx8JZ/CDfop6quEkrIHQQIDNuMDn+drL5jTjpPq28
uAXq3/STmfTuuZHr0hHKpDPzhD0KJVmwg34fP6IqgdmUVgFFuUl011t4YJ2q0gim
/sKJ85R7hNHfCDE+3tDq5qVulljG9Ar2kVgAmY7tSp54o/LIr1rnR11BTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOqELlshuKufJo/qMMFE4pup1icJMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvNm9RdVd5RzRxNThtai1vd3dVVGltNm5XSndrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXatIMA0G
CSqGSIb3DQEBCwUAA4IBAQCJV0fRIQkETi7gqcg900N+eKq1NbVKGcxgn7r8G56W
giviKxO1l7gPashQOhWlDgVmlZ2ic8TUMA7R6OyHZYqQsOdcQ3YzT1xw5FPJ89hw
KBMhbztacI0dZ/8pROUIpYBgMXxJbX/2sRzN/YwBmMO8YZ9172S3dTNMq9OOgTgo
oc/wnhWk8YrI04l9hAKSxWib5Ihe33syhcrD4IoqcDfPBx7N1tLCoSwAMj1fTtsm
TdPy8fo3wQ+brGMcA7maXx+R7ey2DccWHcf262xDNjS9udxu7cymolzDJouEdvws
/dI9UpXqXMqeMr7RB+hIb5tQG3OgmbsjcQnrkZUBLH4R
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:30 2024 by rpki-client on console-fra.rpki-client.org