Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EGkN8TrJwiLzdJRmHnkfD8ReXS8.roa
File: EGkN8TrJwiLzdJRmHnkfD8ReXS8.roa (raw, json)
Hash identifier: A59IVbGHusPHtq87uJ+hF5y87ziHn2DaBtWrgu80xak=
Subject key identifier: 10:69:0D:F1:3A:C9:C2:22:F3:74:94:66:1E:79:1F:0F:C4:5E:5D:2F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570952E75BD33F3FE35215E225C2B6A53
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EGkN8TrJwiLzdJRmHnkfD8ReXS8.roa
Signing time: Mon 02 Jan 2023 03:45:03 +0000
ROA not before: Mon 02 Jan 2023 03:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44429
IP address blocks: 93.171.140.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:2e:75:bd:33:f3:fe:35:21:5e:22:5c:2b:6a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10690df13ac9c222f37494661e791f0fc45e5d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:3e:21:e7:62:88:32:7c:9c:48:60:f5:ad:
0e:c2:2d:ae:ed:17:25:56:66:e4:54:84:f2:e5:12:
14:99:59:82:b2:24:6e:cf:a4:2c:1d:a6:f7:94:06:
a8:d0:e1:0e:f1:47:cf:da:c4:4e:12:ae:a7:01:94:
0e:9b:70:4f:0c:e7:0c:13:fb:c3:73:8f:66:b4:1f:
fb:ab:a2:ae:8e:20:d6:4c:f7:01:0d:90:e5:08:64:
bd:bd:77:f3:3d:9b:3f:77:3f:87:f5:6f:ec:e6:74:
3b:5a:6b:b6:34:45:77:4c:e9:45:02:eb:9e:21:78:
ba:21:c3:c8:3c:46:c1:e5:2c:10:7f:8b:25:83:e3:
bd:3c:3e:07:01:49:e4:fb:99:45:0d:9f:37:59:2f:
0b:5e:a4:50:62:1d:d7:92:7e:92:24:79:fa:a7:a2:
03:f2:3c:76:57:39:ed:ae:3f:f4:50:0c:4b:15:ac:
10:bd:f4:2b:c4:bf:4b:32:33:5e:8a:3d:14:44:be:
7b:d6:61:4c:07:7d:b6:76:74:54:37:97:d2:89:95:
03:33:56:e7:16:c8:6b:ab:e9:d1:7c:8b:bc:fe:d3:
c1:e7:2e:f2:78:81:a3:5e:ae:ce:0e:65:d4:38:2b:
e8:70:dd:65:16:02:01:fc:cd:5f:c7:4f:8c:17:26:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:69:0D:F1:3A:C9:C2:22:F3:74:94:66:1E:79:1F:0F:C4:5E:5D:2F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EGkN8TrJwiLzdJRmHnkfD8ReXS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.140.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:9d:b8:e0:0f:85:9e:1c:3e:88:57:80:61:1a:fa:c6:70:d7:
96:01:75:1e:47:a1:4f:9f:42:09:b2:0d:59:ef:e9:09:59:38:
24:e6:f4:f1:c4:c8:8b:5a:5d:fa:1b:1c:26:86:7d:53:0c:9f:
d1:d6:77:1c:80:e2:a1:2c:02:38:a2:28:63:0e:0b:38:70:3c:
c8:9e:5e:dc:36:7e:83:3e:b9:12:ec:d9:b1:b1:5f:bc:87:52:
cc:20:17:ef:f8:a8:aa:10:d9:11:0e:01:fc:d4:05:ed:20:fc:
d7:e1:c4:7b:d3:24:fd:f5:f4:25:7f:3e:b3:22:64:89:56:57:
1b:5a:70:70:9f:d8:82:f6:db:8c:6a:85:7c:91:6f:65:e9:7b:
d5:29:a9:fc:af:2f:20:36:57:42:e6:a0:0e:20:18:68:f4:7e:
da:75:fc:96:cb:af:32:b0:35:db:12:4b:3b:cc:ca:c3:61:4f:
2f:87:30:1d:ba:60:99:f7:67:32:d2:a9:db:ab:01:72:16:3f:
fc:48:6b:1b:19:76:bf:ff:1b:32:fc:41:cd:d5:b2:40:e7:01:
da:37:62:39:c2:42:1e:2e:48:17:63:3b:04:79:f5:4c:f0:63:
d7:ab:db:4e:58:8c:bf:cc:17:1b:e8:75:4d:33:a1:9a:1c:90:
ef:3b:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 15:18:52 2023 by rpki-client on console-fra.rpki-client.org