Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9MKp18UCJ3evW2kvff_roAPDg8Q.roa
File: 9MKp18UCJ3evW2kvff_roAPDg8Q.roa (raw, json)
Hash identifier: klVQNNCog6T/RdVPQ/oFttbjdudqcOJxhMN4TyUFD/Q=
Subject key identifier: F4:C2:A9:D7:C5:02:27:77:AF:5B:69:2F:7D:FF:EB:A0:03:C3:83:C4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A2CEF1B957C8E3E17C38D0D25B977
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9MKp18UCJ3evW2kvff_roAPDg8Q.roa
Signing time: Tue 02 Jan 2024 12:33:30 +0000
ROA not before: Tue 02 Jan 2024 12:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61989
IP address blocks: 93.170.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 13:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:2c:ef:1b:95:7c:8e:3e:17:c3:8d:0d:25:b9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4c2a9d7c5022777af5b692f7dffeba003c383c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:0f:c7:6e:ec:87:b6:87:71:e0:55:35:eb:
0d:e9:a4:06:e2:8e:c3:e7:92:f9:85:3b:c1:7f:3a:
f8:09:e8:45:4f:d1:4f:0d:b7:d2:19:bc:e3:26:cd:
37:64:ae:c2:b5:52:08:97:ce:3a:17:38:2b:99:79:
ed:ef:85:14:fe:17:85:4b:23:21:5b:af:db:fd:f3:
17:11:f0:ad:02:86:7a:db:c5:d9:c8:1f:d3:f3:cd:
29:dd:e8:4e:2c:5b:a2:a5:ac:77:a2:b6:38:a6:8f:
9b:96:9d:79:9c:d1:0a:39:06:2d:99:51:2d:f5:f7:
d0:e8:44:c2:da:b8:dc:58:13:02:28:ee:5c:11:fc:
01:40:70:2a:fb:56:af:29:37:31:e3:1e:24:4f:05:
2d:1c:4a:e3:06:7c:47:23:d5:83:d7:9a:a6:ca:dc:
79:9c:65:6c:86:97:da:ad:e1:0f:67:88:92:eb:56:
8c:0f:e9:3d:34:1e:54:5c:d4:b6:73:05:48:b2:49:
85:aa:fa:28:77:11:f3:23:06:10:2d:9f:3a:07:ea:
07:c6:3b:20:54:5e:60:c5:4b:07:1b:69:b0:99:2f:
f8:08:87:3d:94:4b:c4:ba:7c:9a:74:9c:cb:a0:1d:
fc:31:ef:c4:c8:8e:e2:a7:29:ef:7e:ff:f0:d2:d2:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C2:A9:D7:C5:02:27:77:AF:5B:69:2F:7D:FF:EB:A0:03:C3:83:C4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9MKp18UCJ3evW2kvff_roAPDg8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.83.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1b:a7:03:bd:bf:08:79:f8:da:bf:16:6a:b3:db:bd:78:c7:
49:02:8b:5d:64:8c:d4:9b:97:fa:15:33:6d:2c:94:01:23:a8:
5c:6c:94:9d:a8:d9:9d:f4:b6:b5:3b:ec:6b:fc:25:69:ed:54:
41:66:7a:74:71:ff:aa:4a:fc:64:26:24:c0:ac:6f:7f:2b:08:
1f:ea:b2:d4:bc:f6:c8:50:22:64:c1:e4:59:89:5a:83:37:91:
a1:79:f6:f5:a7:ef:13:31:2a:22:d9:e9:b3:c0:fc:14:86:8d:
72:f9:5f:f8:1e:99:44:20:5b:1c:01:4c:99:92:c3:d9:e6:1c:
fe:d2:1b:ac:39:65:57:6e:4b:33:50:c5:d4:fa:25:4b:b8:c5:
bc:6e:89:03:b1:82:89:bc:29:72:f5:40:c0:2e:88:9c:eb:06:
86:d1:61:3e:fe:bb:2c:99:39:90:a2:1a:af:a2:06:30:18:00:
c1:0a:bf:cd:7c:cc:b9:ef:59:7e:83:1b:99:22:ec:e7:09:cf:
42:a4:d5:47:b0:04:fa:99:dd:fb:41:cd:a5:c2:fb:55:59:80:
15:ad:48:64:f2:9b:f7:a2:04:22:4a:e9:ce:9c:e9:79:fa:33:
31:af:93:b1:df:89:53:60:fc:6a:78:bd:c4:3c:a7:f4:43:d8:
fc:51:2c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org