Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AgyukYLtgTj5a4O0iVfpLmSq1LY.roa
File: AgyukYLtgTj5a4O0iVfpLmSq1LY.roa (raw, json)
Hash identifier: DHC4o1z4Davflt7+S1XrKiBkNIXKFmxHZvzPPQvsYW8=
Subject key identifier: 02:0C:AE:91:82:ED:81:38:F9:6B:83:B4:89:57:E9:2E:64:AA:D4:B6
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570955FCDBCAEFBF47114724BDEA9C608
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AgyukYLtgTj5a4O0iVfpLmSq1LY.roa
Signing time: Mon 02 Jan 2023 03:45:15 +0000
ROA not before: Mon 02 Jan 2023 03:45:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58047
IP address blocks: 93.171.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:5f:cd:bc:ae:fb:f4:71:14:72:4b:de:a9:c6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=020cae9182ed8138f96b83b48957e92e64aad4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:ce:18:1c:7f:c2:8f:57:0e:0b:00:e7:f7:
ab:41:20:c3:a0:40:56:7f:4d:74:e2:4f:c4:14:cf:
e2:a4:aa:8b:3f:b6:28:33:f7:c0:07:31:fe:d9:dd:
b3:50:1f:0c:f0:0e:c8:fc:c1:1f:5d:18:eb:b2:e4:
96:ed:a8:39:cd:3b:da:86:80:d9:c4:aa:80:04:fe:
96:8d:49:c8:1e:23:6b:ca:dc:1b:9c:ae:b3:6f:30:
59:62:3d:5b:a9:cf:63:e8:ac:ce:af:30:b8:3d:28:
6c:59:e1:f3:c9:88:f3:58:2a:5a:c4:92:ca:4d:ad:
b5:c6:f6:ea:83:5f:dd:ed:8a:f8:3e:b6:4c:54:37:
f6:6c:25:51:27:1b:a8:75:40:58:04:31:2c:12:44:
1e:bd:14:fc:1e:5d:6c:24:a0:94:88:63:e5:00:1a:
59:7a:21:cf:81:32:82:a2:45:f6:e6:3d:a7:51:87:
ec:c4:02:2d:a5:cb:10:53:71:44:10:23:b0:bb:06:
0e:3a:c7:4c:a5:77:30:a1:04:6e:ea:c9:57:9e:d4:
66:19:cc:a1:71:1a:97:be:35:12:66:a7:24:f4:70:
85:c6:0b:d6:8e:32:bd:98:21:0e:53:59:ef:d1:85:
e5:97:fc:c1:a8:4d:73:a0:72:cf:ca:ab:c4:0b:8f:
9a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0C:AE:91:82:ED:81:38:F9:6B:83:B4:89:57:E9:2E:64:AA:D4:B6
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AgyukYLtgTj5a4O0iVfpLmSq1LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.168.0/24
Signature Algorithm: sha256WithRSAEncryption
08:eb:4a:c1:1e:35:ff:20:5c:9e:3f:a6:78:c0:89:7e:b4:42:
a4:7f:11:26:1a:5e:0c:83:ad:2d:da:8d:f3:21:5f:c6:ba:c1:
79:e8:c8:20:c1:1f:d7:5f:64:1c:98:28:62:d0:53:ff:a1:8f:
8f:80:ac:2d:cd:e9:9c:48:5b:85:08:3b:e4:51:1e:d1:b9:fd:
dd:d3:87:cf:a3:8f:c6:01:d2:55:88:fe:b1:e4:a4:56:2b:32:
0c:e2:c7:1a:9b:3e:0c:4e:ea:d0:0f:21:17:06:d0:33:4c:ff:
40:c7:a3:c0:d5:c6:62:61:63:57:16:14:77:58:14:3d:c8:a8:
31:1c:e4:ba:71:44:c1:ab:3b:00:0d:08:b9:03:53:a6:0e:6e:
d9:52:2c:ea:b3:75:15:76:bb:52:99:74:51:c3:e4:e1:df:8f:
fe:4f:4c:4f:1a:b9:06:ff:fe:9e:59:57:64:fe:20:3f:8f:8a:
fd:de:04:1f:34:8a:58:97:01:ba:04:72:ba:c2:9f:03:ad:1a:
19:d3:f9:19:43:02:88:ed:e8:8a:33:63:2e:af:af:82:72:ab:
49:46:ca:65:56:a4:a0:0b:9e:3d:8b:d9:14:fd:17:ee:f5:3e:
39:e2:11:37:4d:80:a7:8d:66:82:f9:01:14:bd:67:86:38:20:
c2:67:c6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org