Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ItRWFyi7Rg6-kulAcepROasAkeM.roa
File: ItRWFyi7Rg6-kulAcepROasAkeM.roa (raw, json)
Hash identifier: KI8jLI8kR3PppohBDewuaPP2naPo5udo/JgNEH7EMN0=
Subject key identifier: 22:D4:56:17:28:BB:46:0E:BE:92:E9:40:71:EA:51:39:AB:00:91:E3
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570957C9172C55BD8E533EC142F9170E2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ItRWFyi7Rg6-kulAcepROasAkeM.roa
Signing time: Mon 02 Jan 2023 03:45:22 +0000
ROA not before: Mon 02 Jan 2023 03:45:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62006
IP address blocks: 95.47.103.0/24 maxlen: 24
92.38.43.0/24 maxlen: 24
95.46.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:7c:91:72:c5:5b:d8:e5:33:ec:14:2f:91:70:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22d4561728bb460ebe92e94071ea5139ab0091e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:38:5c:26:1a:e4:48:c8:36:c6:f9:d9:76:
78:e6:18:56:48:7f:84:01:5b:85:41:14:92:60:8c:
9e:83:cf:81:31:5f:df:49:45:89:84:69:4e:84:4e:
60:35:c5:5e:c1:78:79:58:fb:b9:05:dc:60:ee:bb:
cf:e7:d3:95:4c:95:ec:7b:20:a9:7d:98:49:26:08:
8d:d2:5e:51:ca:2d:42:53:ec:2d:cb:2a:8f:97:5d:
30:ef:97:ab:ab:f5:63:e8:93:5c:4f:04:85:e4:bb:
07:fe:c9:de:06:cb:ed:5c:fe:04:57:db:ad:05:c4:
6f:b0:c9:c7:44:96:6d:cf:41:cf:2c:6f:18:1a:9a:
d0:2d:05:c9:84:a0:83:fb:2f:c6:04:da:00:de:57:
5f:2a:ed:48:39:83:b2:18:80:99:f5:68:b7:05:fb:
cf:ff:43:1f:48:7f:ad:15:5e:c0:aa:51:c5:04:ed:
be:93:bc:a0:e6:d4:74:3d:4a:dc:57:f7:6c:b0:b6:
81:03:8e:14:dd:ef:19:15:82:a1:b5:f6:dc:b2:83:
5f:72:fb:c1:b0:07:e9:3b:53:b0:ed:75:33:08:b2:
13:b7:c9:8c:f8:de:9f:a5:79:d9:f2:43:2c:30:1b:
30:b5:5f:9f:55:2f:49:b0:68:13:8e:6e:51:6f:d1:
99:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D4:56:17:28:BB:46:0E:BE:92:E9:40:71:EA:51:39:AB:00:91:E3
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ItRWFyi7Rg6-kulAcepROasAkeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.43.0/24
95.46.105.0/24
95.47.103.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:79:65:7e:73:cf:f6:b1:2c:34:44:ad:9a:8c:d2:83:95:3a:
65:05:c4:a5:71:43:e3:bd:16:de:44:4d:3b:7e:b3:73:06:35:
d3:18:1b:1f:0d:fa:5b:4a:5f:4a:62:c8:a3:a2:92:69:37:b4:
dd:1a:49:db:7d:3e:a5:3d:d2:69:56:ce:24:b4:ff:fe:f0:c9:
be:43:83:12:7e:e1:b8:3a:2a:27:b6:56:9f:33:be:a7:05:57:
1a:f5:b9:1c:6a:d0:32:fa:0d:8d:fb:0e:45:ae:a6:b6:ac:a9:
50:e3:d7:91:32:81:35:6d:db:af:48:d7:f9:03:9b:a7:60:2e:
ca:53:ab:d4:46:b8:6d:83:79:c6:cd:11:46:c1:0b:ad:78:08:
97:55:a8:29:85:64:d3:e2:98:f0:cc:32:26:78:bf:8c:e2:8c:
3b:30:7a:bc:80:43:8f:2f:c5:39:70:35:0d:2d:ad:6e:19:58:
ad:0d:42:22:5e:0f:57:f4:da:86:73:c3:0a:7e:6b:88:5d:2c:
89:16:4e:78:1e:fa:e5:ed:42:2d:48:6e:03:0b:4b:6a:8f:a0:
72:d9:1b:52:ed:ed:27:62:61:24:9c:b3:54:5e:d0:4e:1c:fd:
5b:17:fd:26:12:e6:eb:e2:d3:4e:0e:ce:6c:5d:e0:90:b0:90:
04:ba:3f:d6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVwlXyRcsVb2OUz7BQvkXDiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmQ0NTYxNzI4YmI0NjBlYmU5MmU5NDA3MWVhNTEzOWFiMDA5MWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3s4XCYa5EjINsb52XZ45hhWSH+E
AVuFQRSSYIyeg8+BMV/fSUWJhGlOhE5gNcVewXh5WPu5Bdxg7rvP59OVTJXseyCp
fZhJJgiN0l5Ryi1CU+wtyyqPl10w75erq/Vj6JNcTwSF5LsH/sneBsvtXP4EV9ut
BcRvsMnHRJZtz0HPLG8YGprQLQXJhKCD+y/GBNoA3ldfKu1IOYOyGICZ9Wi3BfvP
/0MfSH+tFV7AqlHFBO2+k7yg5tR0PUrcV/dssLaBA44U3e8ZFYKhtfbcsoNfcvvB
sAfpO1Ow7XUzCLITt8mM+N6fpXnZ8kMsMBswtV+fVS9JsGgTjm5Rb9GZOwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCLUVhcou0YOvpLpQHHqUTmrAJHjMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvSXRSV0Z5aTdSZzYta3VsQWNlcFJPYXNBa2VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXCYrAwQA
Xy5pAwQAXy9nMA0GCSqGSIb3DQEBCwUAA4IBAQA7eWV+c8/2sSw0RK2ajNKDlTpl
BcSlcUPjvRbeRE07frNzBjXTGBsfDfpbSl9KYsijopJpN7TdGknbfT6lPdJpVs4k
tP/+8Mm+Q4MSfuG4OiontlafM76nBVca9bkcatAy+g2N+w5Frqa2rKlQ49eRMoE1
bduvSNf5A5unYC7KU6vURrhtg3nGzRFGwQuteAiXVagphWTT4pjwzDImeL+M4ow7
MHq8gEOPL8U5cDUNLa1uGVitDUIiXg9X9NqGc8MKfmuIXSyJFk54Hvrl7UItSG4D
C0tqj6By2RtS7e0nYmEknLNUXtBOHP1bF/0mEubr4tNODs5sXeCQsJAEuj/W
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:24 2023 by rpki-client on console-ams.rpki-client.org