Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6thd1UgrMCVVIkiGwYBrwznGU0g.roa
File: 6thd1UgrMCVVIkiGwYBrwznGU0g.roa (raw, json)
Hash identifier: rcDODj0Bel7yQYMfgn6N/Eewo2rppiegjISCUcHImt4=
Subject key identifier: EA:D8:5D:D5:48:2B:30:25:55:22:48:86:C1:80:6B:C3:39:C6:53:48
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570956767F9435927443E95E2A2EB76E7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6thd1UgrMCVVIkiGwYBrwznGU0g.roa
Signing time: Mon 02 Jan 2023 03:45:17 +0000
ROA not before: Mon 02 Jan 2023 03:45:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59825
IP address blocks: 93.171.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:67:67:f9:43:59:27:44:3e:95:e2:a2:eb:76:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ead85dd5482b302555224886c1806bc339c65348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:74:77:a3:12:5a:5c:bd:1a:b5:77:3c:3f:
2b:6a:a3:c0:46:2e:00:8c:f9:b6:5f:b8:b0:51:b7:
14:fb:8c:c7:d0:3e:18:f4:aa:2f:ec:4d:19:f5:76:
52:e8:07:ee:e4:6a:27:a9:f2:59:97:fa:68:72:77:
bb:60:2b:8c:a8:10:05:c4:4f:18:d3:4a:42:b2:79:
00:8d:a6:7b:f6:f0:b0:1a:5e:3a:94:97:92:bd:73:
f5:ba:94:e8:75:83:11:37:1e:3e:4b:9e:8e:0d:3a:
e6:48:6b:35:5a:87:3d:f6:c5:a4:03:78:f3:dd:11:
0f:06:c1:38:33:7c:62:aa:4d:45:79:11:c5:3c:fe:
93:2c:a7:e4:d0:b3:f6:29:0f:4d:8d:1f:0b:b5:6b:
94:44:a9:4e:7c:3e:2e:4d:e2:87:15:7b:1b:0a:46:
d9:7c:76:76:b9:62:06:fa:64:e3:28:bc:fa:51:4c:
35:a2:45:86:eb:5e:5b:78:93:0c:fb:63:0d:13:b4:
c5:1e:17:cb:a2:6e:ad:55:f5:9e:06:b4:2a:8b:51:
06:64:29:18:cc:84:3b:d0:47:68:7d:20:bd:a7:14:
da:cd:91:a4:f0:0e:5c:5e:6e:b0:03:61:19:f9:8c:
a9:f1:93:ee:03:21:b2:cc:86:96:c4:4b:3f:48:84:
a6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D8:5D:D5:48:2B:30:25:55:22:48:86:C1:80:6B:C3:39:C6:53:48
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6thd1UgrMCVVIkiGwYBrwznGU0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.173.0/24
Signature Algorithm: sha256WithRSAEncryption
13:87:ae:bf:1f:f9:20:4a:a0:7a:b5:eb:0e:48:5d:ff:4a:2b:
3b:2d:ad:0f:f6:be:36:92:cc:88:0b:62:b3:e0:8f:77:c7:70:
1a:55:be:f2:40:07:fe:9f:e8:4d:ea:2e:6b:07:8c:02:4f:35:
2d:87:83:93:5f:dd:47:c4:68:65:23:c6:81:c9:83:45:69:eb:
df:fa:e5:94:e4:27:5f:b1:57:3b:42:f7:aa:46:88:dd:71:77:
fb:f9:16:0e:f0:bb:ff:49:43:60:2b:a1:90:d3:87:32:38:56:
a5:45:6d:a2:4b:30:86:8c:a6:44:18:5f:59:2f:56:03:3c:8f:
b3:3b:3a:a9:15:c1:d6:99:70:43:81:c1:79:d0:70:7e:87:68:
a1:b1:1b:91:8c:52:e3:07:d8:75:2c:56:f7:a7:5d:e6:72:75:
5d:13:ea:8e:8a:c1:ec:79:ee:5d:52:0c:ad:f0:a6:1b:72:8a:
22:38:3f:76:29:1e:63:a3:8f:6b:99:c8:66:60:55:b4:64:e8:
3e:16:f0:41:ef:28:31:e1:ff:c6:f1:c1:fc:97:75:a0:fe:b9:
0c:87:f4:b3:95:0b:52:2d:b1:3e:c7:90:2a:2e:04:34:f4:1d:
1e:bc:17:4f:20:28:f3:f8:a3:9e:75:d5:95:30:cd:94:20:7e:
7f:8b:3e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org