Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7zoimUl4sZtDf4Q_gpB3Y7NfL1U.roa
File: 7zoimUl4sZtDf4Q_gpB3Y7NfL1U.roa (raw, json)
Hash identifier: bJEpW/WLmIJdlXiy+oqxEDgJa4NXYwg38glWwWBuC/k=
Subject key identifier: EF:3A:22:99:49:78:B1:9B:43:7F:84:3F:82:90:77:63:B3:5F:2F:55
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A36DE054E7CDD6FD63F3BCEF83658
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7zoimUl4sZtDf4Q_gpB3Y7NfL1U.roa
Signing time: Tue 02 Jan 2024 12:33:33 +0000
ROA not before: Tue 02 Jan 2024 12:33:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200218
IP address blocks: 93.170.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 12:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:36:de:05:4e:7c:dd:6f:d6:3f:3b:ce:f8:36:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef3a22994978b19b437f843f82907763b35f2f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:66:39:41:31:ee:cf:a9:e5:52:20:45:21:
44:4e:75:6d:a1:5b:33:27:50:ab:58:8d:28:db:07:
8c:6e:5c:a3:60:e6:c3:8c:0f:74:e0:ad:a4:e9:96:
8b:94:7e:9f:2c:2f:a4:40:e5:eb:b8:a3:d4:76:f1:
3c:1f:55:ea:ef:a7:8b:75:ef:32:45:dc:ed:9a:f5:
c1:ff:25:81:f5:56:3d:0d:3c:d5:35:9b:1d:5c:32:
15:2b:3f:32:f3:70:ea:88:f1:da:b7:7d:82:c1:58:
50:f5:35:c4:fe:48:6b:17:93:fb:72:1f:8e:03:83:
34:ea:4a:c9:c5:7f:79:a4:d4:db:31:1f:10:42:01:
c9:93:20:78:8e:46:01:2f:a7:81:84:20:b6:91:75:
39:09:64:31:b4:1e:a7:bc:25:ce:b2:bf:dc:dc:4d:
96:40:1b:a3:48:4d:3a:69:c1:2c:4f:07:77:da:05:
fd:a2:70:fb:55:f6:20:1d:8b:06:dd:c5:9e:e0:eb:
19:3f:1e:70:5d:d3:80:90:d4:6e:cb:79:c3:d3:eb:
2a:52:80:79:6d:da:28:a4:56:5b:b6:03:29:58:97:
bd:a6:e0:cf:b0:af:4b:5f:70:f2:a9:91:99:bc:95:
d6:d5:aa:97:fc:7b:81:bc:73:79:a5:6e:de:0a:4e:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3A:22:99:49:78:B1:9B:43:7F:84:3F:82:90:77:63:B3:5F:2F:55
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7zoimUl4sZtDf4Q_gpB3Y7NfL1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.212.0/22
Signature Algorithm: sha256WithRSAEncryption
26:a0:b0:76:86:9a:74:97:37:1b:e8:fb:fa:e2:20:4b:7f:4c:
e6:54:12:d2:28:02:97:af:f0:dc:da:d9:3d:3c:bb:d1:e5:15:
90:1b:19:c3:55:3a:9c:3c:0a:6b:12:98:c2:eb:24:60:a3:17:
97:d9:2b:f8:e2:0d:4a:86:cc:41:97:6b:6a:c1:3f:93:13:6b:
9f:7c:ab:b2:52:01:d5:f1:55:b8:b9:dd:38:a2:01:29:b6:88:
0b:13:54:b7:82:4d:e7:58:96:1f:15:41:35:d1:42:84:cb:6d:
b8:5b:71:d0:17:31:18:cc:43:80:fc:1e:76:dc:b5:65:fe:6e:
fd:47:98:d8:45:b6:f3:c8:d2:51:f7:f7:39:ff:da:28:8d:76:
32:bb:05:29:46:bd:b9:83:f5:5e:c5:d9:90:a7:2e:a8:02:4e:
fe:16:be:be:5c:51:57:6d:58:b8:b2:25:a6:95:04:05:6f:b8:
f3:df:65:c2:46:61:7d:a8:e8:26:a6:f0:76:bc:1c:fa:78:02:
44:77:8a:7c:41:e0:99:cc:d3:82:50:e9:ee:b7:81:16:e3:1c:
a5:59:6f:e7:ba:d5:9d:8c:6b:d7:02:91:05:26:54:3a:c9:d8:
47:68:b1:69:5f:e4:52:d8:df:57:8d:fa:5e:41:f0:f0:dc:0f:
21:f6:05:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:02 2025 by rpki-client