Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9JBr4qHECkAasIKanVL0LGschBY.roa
File: 9JBr4qHECkAasIKanVL0LGschBY.roa (raw, json)
Hash identifier: pcu2tysgrumtDo+IFj3sTrV01UzvzyBgVjaK8XINYSc=
Subject key identifier: F4:90:6B:E2:A1:C4:0A:40:1A:B0:82:9A:9D:52:F4:2C:6B:1C:84:16
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018A2BD936B997C271042E7119B2563B248F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9JBr4qHECkAasIKanVL0LGschBY.roa
Signing time: Fri 25 Aug 2023 08:39:30 +0000
ROA not before: Fri 25 Aug 2023 08:39:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61390
IP address blocks: 93.171.40.0/22 maxlen: 24
92.38.33.0/24 maxlen: 24
93.170.108.0/23 maxlen: 23
146.158.60.0/22 maxlen: 24
93.171.182.0/23 maxlen: 24
146.120.120.0/22 maxlen: 24
146.120.236.0/22 maxlen: 24
95.46.116.0/22 maxlen: 24
93.170.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 10:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2b:d9:36:b9:97:c2:71:04:2e:71:19:b2:56:3b:24:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 25 08:39:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4906be2a1c40a401ab0829a9d52f42c6b1c8416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2a:b7:d3:33:9d:9d:0a:dc:3b:b9:29:df:8c:
1e:08:e6:b4:b7:82:bb:c2:db:8b:ca:f3:76:05:4e:
f1:2b:86:4f:e2:54:eb:be:dc:e3:06:07:ef:fc:4f:
53:68:e0:22:17:bc:9f:66:04:44:17:93:e3:2f:d1:
71:5d:ca:ce:a3:90:2f:69:0e:ba:e3:be:7f:32:bc:
e1:d1:73:85:b2:82:7d:bb:85:1c:60:a3:28:e8:ac:
6b:9e:a9:93:0a:87:5f:02:e6:25:1b:7d:55:20:d9:
69:db:3f:32:2b:d4:53:a1:a6:dc:11:25:6f:5d:06:
30:a6:3f:9b:9e:47:23:6c:0b:af:15:03:9d:61:03:
e9:28:db:a5:eb:ee:5a:20:9b:76:3b:6c:41:a5:0c:
b2:d3:fc:da:f6:40:52:3a:e6:f9:82:fd:7c:53:1c:
7a:e9:12:79:71:bc:e2:a3:4a:39:49:35:99:48:90:
55:84:68:4e:13:56:c8:f5:be:8c:b5:33:80:03:e8:
0a:28:53:de:e5:d4:f5:79:fc:bc:8b:04:7f:cb:f5:
23:6a:5a:b6:78:92:69:b3:53:e8:d5:a4:01:88:fe:
92:33:33:ef:52:ba:fa:0b:fc:0b:7c:e2:9f:e9:80:
3f:d8:c8:92:86:52:b1:78:1c:3e:a6:a7:6d:82:10:
2a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:90:6B:E2:A1:C4:0A:40:1A:B0:82:9A:9D:52:F4:2C:6B:1C:84:16
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9JBr4qHECkAasIKanVL0LGschBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.33.0/24
93.170.108.0/23
93.170.180.0/22
93.171.40.0/22
93.171.182.0/23
95.46.116.0/22
146.120.120.0/22
146.120.236.0/22
146.158.60.0/22
Signature Algorithm: sha256WithRSAEncryption
82:d2:b8:01:df:d9:cf:23:16:2c:37:38:f7:ff:f2:d3:3b:84:
c5:27:62:dd:01:cc:95:6c:3d:8a:c9:59:9d:ce:15:e7:1f:93:
4f:fc:e6:b9:8c:5c:97:27:fd:02:d2:18:90:fe:90:ab:b8:73:
35:71:08:a7:7c:5d:5e:71:b3:c3:f3:f2:84:05:01:e2:86:0a:
39:58:0c:7c:14:96:57:c0:88:75:46:8d:0e:93:ba:5b:b3:02:
5b:b7:8e:a1:39:25:3a:02:52:d1:d5:cf:bf:14:6f:15:d3:95:
49:f6:f8:4a:2a:05:39:0d:de:7d:35:6f:4f:1b:74:7a:c8:55:
e2:22:d0:75:4c:f6:90:62:e3:e4:67:3b:41:e9:cc:e0:38:19:
91:33:7f:13:12:69:ca:56:74:89:da:76:89:e9:af:19:52:c3:
0e:3f:ac:11:4e:72:ea:0b:9f:f2:a1:a6:c7:28:96:b7:9f:23:
84:8f:71:78:28:5b:b2:2f:40:17:53:eb:4c:64:29:15:e0:65:
88:f3:fc:4d:35:74:a8:6b:26:0f:c9:91:6f:2b:a5:fc:d8:2b:
50:ba:8c:33:b2:05:f2:97:01:92:53:75:2d:eb:06:15:f5:eb:
70:80:56:3e:f0:d9:6a:98:90:e1:79:ac:81:51:a4:69:87:f2:
82:88:db:e9
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYor2Ta5l8JxBC5xGbJWOySPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwODI1MDgzOTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDkwNmJlMmExYzQwYTQwMWFiMDgyOWE5ZDUyZjQyYzZiMWM4NDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSq30zOdnQrcO7kp34weCOa0t4K7
wtuLyvN2BU7xK4ZP4lTrvtzjBgfv/E9TaOAiF7yfZgREF5PjL9FxXcrOo5AvaQ66
475/Mrzh0XOFsoJ9u4UcYKMo6KxrnqmTCodfAuYlG31VINlp2z8yK9RToabcESVv
XQYwpj+bnkcjbAuvFQOdYQPpKNul6+5aIJt2O2xBpQyy0/za9kBSOub5gv18Uxx6
6RJ5cbzio0o5STWZSJBVhGhOE1bI9b6MtTOAA+gKKFPe5dT1efy8iwR/y/Ujalq2
eJJps1Po1aQBiP6SMzPvUrr6C/wLfOKf6YA/2MiShlKxeBw+pqdtghAqtQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFPSQa+KhxApAGrCCmp1S9CxrHIQWMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvOUpCcjRxSEVDa0Fhc0lLYW5WTDBMR3NjaEJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAXCYhAwQB
XapsAwQCXaq0AwQCXasoAwQBXau2AwQCXy50AwQCknh4AwQCknjsAwQCkp48MA0G
CSqGSIb3DQEBCwUAA4IBAQCC0rgB39nPIxYsNzj3//LTO4TFJ2LdAcyVbD2KyVmd
zhXnH5NP/Oa5jFyXJ/0C0hiQ/pCruHM1cQinfF1ecbPD8/KEBQHihgo5WAx8FJZX
wIh1Ro0Ok7pbswJbt46hOSU6AlLR1c+/FG8V05VJ9vhKKgU5Dd59NW9PG3R6yFXi
ItB1TPaQYuPkZztB6czgOBmRM38TEmnKVnSJ2naJ6a8ZUsMOP6wRTnLqC5/yoabH
KJa3nyOEj3F4KFuyL0AXU+tMZCkV4GWI8/xNNXSoayYPyZFvK6X82CtQuowzsgXy
lwGSU3Ut6wYV9etwgFY+8NlqmJDheayBUaRph/KCiNvp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:49 2024 by rpki-client on console-ams.rpki-client.org