Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QtiQn86Knv6JtvuWNyfN547u9q8.roa
File: QtiQn86Knv6JtvuWNyfN547u9q8.roa (raw, json)
Hash identifier: styJp+jkcV7G4KUA0Crsu8c/q0K1HfPYYR/XufEhBPM=
Subject key identifier: 42:D8:90:9F:CE:8A:9E:FE:89:B6:FB:96:37:27:CD:E7:8E:EE:F6:AF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E5DBCDE8B7891609089C16050CB0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QtiQn86Knv6JtvuWNyfN547u9q8.roa
Signing time: Tue 02 Jan 2024 12:33:12 +0000
ROA not before: Tue 02 Jan 2024 12:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34718
IP address blocks: 93.171.232.0/22 maxlen: 24
93.170.164.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 16:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e5:db:cd:e8:b7:89:16:09:08:9c:16:05:0c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42d8909fce8a9efe89b6fb963727cde78eeef6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:a9:83:a2:1b:24:12:57:a5:6f:3f:63:aa:
e7:70:0e:76:2a:e3:1b:3d:b7:f4:88:ce:e6:ea:1e:
fc:8b:d5:e3:15:e4:66:15:68:df:b3:c4:f0:a0:06:
1b:7f:97:f9:17:4a:8b:19:12:f8:57:73:be:bd:01:
18:5d:c9:47:e0:57:20:6a:b9:d5:7a:49:95:f3:ed:
ec:cd:7f:0d:e5:4c:1d:6f:f9:9f:96:45:9b:57:50:
ec:33:98:c3:85:00:bc:c0:27:7a:08:d1:08:39:aa:
bd:10:6f:b0:4e:2d:ac:88:77:c8:bf:da:b9:12:62:
ab:ca:7c:a2:60:d7:1f:10:30:f0:4d:1b:14:b7:c5:
ed:be:d5:0b:48:b4:e3:ce:bc:da:90:d9:48:d4:2d:
24:96:a4:9b:bf:30:e6:46:31:ec:04:01:3b:e1:8d:
0b:0a:2b:30:b5:a7:a8:dc:02:76:dc:cc:b7:a2:08:
9b:89:79:e7:0d:88:20:2d:b0:be:ea:64:15:ce:f9:
03:1f:43:7e:fe:f3:75:d2:04:6e:f7:94:21:e9:93:
13:7c:8e:f8:d8:63:da:e2:24:3f:d6:4d:c4:b5:d3:
06:ee:09:c7:2c:92:e3:c6:60:6c:8f:fb:c3:2b:ee:
97:3f:12:15:ab:95:04:e3:34:4e:86:88:16:c5:15:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D8:90:9F:CE:8A:9E:FE:89:B6:FB:96:37:27:CD:E7:8E:EE:F6:AF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QtiQn86Knv6JtvuWNyfN547u9q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.164.0/22
93.171.232.0/22
Signature Algorithm: sha256WithRSAEncryption
67:be:e2:e2:b8:cb:41:78:5f:5a:e6:13:1d:23:7d:72:e6:30:
a1:8d:cc:41:97:41:f4:42:a3:30:45:89:b7:53:33:f2:72:8e:
bf:e0:fe:53:09:4d:3b:73:30:a8:42:ce:f2:04:67:a1:ff:70:
6f:8a:7f:a5:d5:fb:9a:49:70:28:ed:8b:61:21:ac:10:65:1e:
e4:d1:37:b3:13:07:35:6e:42:92:ec:07:97:88:ef:b1:ad:fa:
c8:02:34:6e:78:ae:24:07:9b:28:2c:a9:9d:60:e8:42:ba:d9:
ed:49:5c:24:40:5f:4a:d1:1c:24:54:12:38:4a:19:4c:79:80:
39:96:a8:06:e0:ab:e6:a0:d8:33:46:42:bd:e1:8a:b8:a7:00:
4f:00:99:a2:35:4b:7f:d6:69:e9:c3:76:8b:e6:8f:a1:29:78:
f5:e2:da:8b:86:64:06:06:05:8a:6b:26:3e:c5:72:c9:f2:98:
2d:9c:f2:64:23:86:64:86:11:3f:ff:1f:0a:bc:bc:e9:41:54:
48:e4:7d:39:0c:27:c1:c1:d5:0e:6d:5a:1b:bf:39:c7:08:1d:
73:4a:9c:b1:17:de:81:e0:29:a3:eb:04:90:6b:6f:60:09:17:
a7:8a:7a:26:9d:b2:cf:35:c8:08:7a:ad:9f:54:42:ba:d6:6f:
bc:52:d2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:15 2025 by rpki-client