Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/J2nyTpZkm3tl9pdw-mTRFC6j6hE.roa
File: J2nyTpZkm3tl9pdw-mTRFC6j6hE.roa (raw, json)
Hash identifier: 7Jk9v7wBXnQD4IaiSS/xv97zGBItcEYmiSPyrissl+E=
Subject key identifier: 27:69:F2:4E:96:64:9B:7B:65:F6:97:70:FA:64:D1:14:2E:A3:EA:11
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095BE743DF13402180D7CC834A79B07
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/J2nyTpZkm3tl9pdw-mTRFC6j6hE.roa
Signing time: Mon 02 Jan 2023 03:45:39 +0000
ROA not before: Mon 02 Jan 2023 03:45:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212210
IP address blocks: 93.170.94.0/23 maxlen: 24
95.47.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:be:74:3d:f1:34:02:18:0d:7c:c8:34:a7:9b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2769f24e96649b7b65f69770fa64d1142ea3ea11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f7:30:a9:23:1e:ee:55:6f:3c:17:e6:f8:69:
3a:80:3b:26:dd:47:fe:1f:df:57:b6:60:15:54:ce:
27:96:77:d1:7b:51:85:be:66:3d:91:cb:27:9e:0f:
76:6c:1d:96:40:83:9e:38:1b:9f:0f:db:bb:9c:d3:
96:4b:b0:17:f5:a5:57:aa:3d:26:62:5c:85:2e:3d:
3e:bd:5d:af:c7:31:6c:b3:74:58:dd:7e:de:b9:96:
d5:c8:7e:c1:b1:54:68:95:0d:ca:97:bb:e0:60:ca:
7d:fd:dd:74:c4:01:40:7b:f7:e5:da:96:91:95:94:
04:42:ec:50:22:52:75:26:b5:ea:7f:a8:34:8d:94:
b4:93:19:a7:38:cd:af:49:8c:ad:69:7b:c1:eb:80:
6e:76:70:cd:6a:f7:94:76:ed:2d:ed:3f:06:7e:1e:
47:68:d8:df:5b:10:67:81:aa:a0:e4:48:88:56:51:
eb:be:d8:ed:8c:7f:bc:42:51:8c:47:df:1b:3f:6b:
b2:80:f0:f4:25:bb:e2:0f:3b:7f:2d:f0:52:42:65:
45:1a:fb:6d:8f:08:15:20:e7:6c:07:9c:fe:82:39:
b9:15:73:7d:ff:cb:af:3d:f8:c5:5a:44:57:18:08:
ce:4a:2e:d6:b9:a6:a8:86:7d:7a:72:e1:eb:60:51:
eb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:69:F2:4E:96:64:9B:7B:65:F6:97:70:FA:64:D1:14:2E:A3:EA:11
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/J2nyTpZkm3tl9pdw-mTRFC6j6hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.94.0/23
95.47.174.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ae:4e:f5:0a:8a:ef:87:5d:e1:82:53:8d:b8:58:5d:5d:6a:
43:86:c9:4b:d8:82:85:f9:f6:a3:0b:79:54:6b:fd:78:87:4e:
ca:3f:f9:66:88:e0:67:91:40:2a:90:f2:0f:2b:5a:d1:e5:2c:
18:c2:b9:6e:40:97:1e:68:f1:e8:7a:fc:43:46:a0:72:a2:06:
8b:39:78:48:e5:70:dc:c2:e8:5b:8f:9e:5a:ff:98:0b:3c:4b:
2d:51:bb:41:8e:be:b3:14:84:d7:89:33:c9:5c:34:9a:c4:f4:
64:46:87:81:7d:35:ec:d6:c9:3a:3b:ad:9f:42:1d:50:ad:16:
ae:dd:a0:5a:6b:70:86:00:40:85:16:60:26:53:a2:26:eb:55:
a7:35:f1:32:42:67:fe:67:df:f4:12:bd:e9:57:54:b4:2b:4e:
d6:e6:da:fe:a4:f8:f7:4e:d9:79:97:41:de:0f:a9:a9:6a:e8:
26:f2:2e:d7:81:14:86:bd:32:06:9b:8d:df:1a:51:3b:d5:ed:
2e:5a:76:2b:c5:11:76:f9:c4:fb:f9:01:75:e7:05:a5:d4:df:
0c:b2:8e:4f:42:6a:3c:ab:38:59:8a:d2:58:71:d5:d3:24:f5:
6b:fc:c9:47:a6:e8:dd:f0:b3:e1:bb:99:0e:a7:3e:a6:db:ba:
3b:9d:92:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org