Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7uwmtmbWqB7JSIEJEUAOW4qN6r0.roa
File: 7uwmtmbWqB7JSIEJEUAOW4qN6r0.roa (raw, json)
Hash identifier: rw4nTTBc6R0X2LQO6g454HPcwg/v2zLLbWo4q8bd7jM=
Subject key identifier: EE:EC:26:B6:66:D6:A8:1E:C9:48:81:09:11:40:0E:5B:8A:8D:EA:BD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095190C4DA60145FC39EED5DF632FE9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7uwmtmbWqB7JSIEJEUAOW4qN6r0.roa
Signing time: Mon 02 Jan 2023 03:44:57 +0000
ROA not before: Mon 02 Jan 2023 03:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41271
IP address blocks: 93.170.178.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:19:0c:4d:a6:01:45:fc:39:ee:d5:df:63:2f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeec26b666d6a81ec948810911400e5b8a8deabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:a6:86:cd:ec:fa:18:63:c7:e8:10:ae:c3:
92:4c:5b:d5:4d:3a:9a:83:fd:84:12:0d:d5:a0:1b:
bf:49:c0:06:ac:f2:03:dd:10:fa:91:61:16:29:bc:
47:ca:75:3d:b9:20:e5:85:18:29:4d:66:0e:2c:60:
8a:b0:b9:66:2b:96:31:85:4e:d4:24:bb:55:d7:52:
2c:d9:bb:ce:9d:6f:7f:23:bc:ac:49:fb:26:20:4e:
71:d0:ab:b4:40:b2:2a:29:0e:df:62:ca:c1:71:20:
50:17:81:f6:f1:8f:e1:5d:f1:5e:7a:83:1c:a8:cc:
e1:4f:b6:5b:1b:4e:39:22:e0:08:36:e6:6f:7a:70:
ff:da:19:f5:36:53:e9:36:34:bf:11:f9:22:17:85:
c2:37:6c:0b:86:ba:87:0f:1d:de:79:80:9b:33:c4:
a4:72:04:95:e9:4f:af:9d:89:57:b0:22:64:18:99:
3f:78:cf:60:ec:3f:a9:7f:4b:58:73:7f:9e:9f:ae:
38:6a:56:90:6b:46:f2:67:b7:55:ec:a7:bd:02:cf:
67:f1:ed:10:7a:a0:f6:7e:7e:08:25:ed:6e:e9:af:
e7:13:04:01:8b:49:e0:f6:a8:fc:bd:47:36:9a:d3:
4e:66:cc:bf:ee:ec:56:e2:80:8f:95:c0:1d:d9:13:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EC:26:B6:66:D6:A8:1E:C9:48:81:09:11:40:0E:5B:8A:8D:EA:BD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7uwmtmbWqB7JSIEJEUAOW4qN6r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.178.0/23
Signature Algorithm: sha256WithRSAEncryption
af:c3:73:80:a8:0b:0f:ff:8d:06:d0:2b:d1:c9:96:d6:e3:5c:
67:c9:aa:32:da:46:66:e1:c2:ab:f4:36:87:60:9d:11:df:d8:
84:2e:ed:aa:6b:9d:a5:45:4f:0c:0c:ea:a6:db:ae:c4:6a:f7:
10:86:6d:56:ce:a3:41:b3:91:72:32:cc:80:7a:7b:4a:0f:3d:
fa:cb:4d:b1:48:6f:de:ca:0b:0a:6e:90:71:e9:35:20:69:89:
91:e9:d9:7b:9d:ad:be:27:d7:42:e9:85:de:07:1e:00:3a:9a:
d0:ac:0f:49:84:fc:60:05:00:c7:19:50:6c:35:0e:f9:83:ea:
e8:15:fd:bd:ce:7f:6b:97:72:c1:de:7d:8a:40:a4:fd:28:d4:
7c:40:4c:55:38:32:07:bf:03:fc:2c:3a:10:ad:7c:8a:c9:98:
82:15:35:ef:d7:87:a2:3b:ea:99:7e:25:96:bf:ef:b0:c9:23:
96:ee:c9:9c:2b:3b:8a:3e:72:e6:3b:c0:19:4d:ef:1e:d3:49:
a6:e7:8d:28:ca:30:97:13:cf:98:f5:1a:b3:57:6c:fb:3b:54:
9d:82:53:42:c7:12:da:86:6f:36:fa:2a:aa:e6:fe:df:8d:49:
4e:86:8d:16:ec:12:92:c0:e2:c1:f6:fd:74:ca:70:74:60:59:
27:44:23:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:30 2024 by rpki-client on console-fra.rpki-client.org