Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UJb-xjHKn84Uqm9P-qjOHvMLafo.roa
File: UJb-xjHKn84Uqm9P-qjOHvMLafo.roa (raw, json)
Hash identifier: QsxqVs3JomVdMjRWkKSH0H09dPF0TdzoBh3kCV8Ns2Y=
Subject key identifier: 50:96:FE:C6:31:CA:9F:CE:14:AA:6F:4F:FA:A8:CE:1E:F3:0B:69:FA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709584EAB9C89702AF80EDBF0694A844
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UJb-xjHKn84Uqm9P-qjOHvMLafo.roa
Signing time: Mon 02 Jan 2023 03:45:25 +0000
ROA not before: Mon 02 Jan 2023 03:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62360
IP address blocks: 93.171.232.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:84:ea:b9:c8:97:02:af:80:ed:bf:06:94:a8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5096fec631ca9fce14aa6f4ffaa8ce1ef30b69fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:dd:c2:47:9f:cd:3d:87:ef:6a:28:ea:c2:
9f:a1:6e:15:65:8f:81:68:ca:4d:7f:c1:5e:f1:ea:
81:fd:05:bd:ca:18:14:ee:5b:bc:54:1d:0a:fa:56:
69:f8:90:d1:aa:0c:bb:33:d5:7e:e4:0d:9d:fb:0a:
a8:69:eb:23:42:9e:21:49:13:60:0d:51:e9:a4:4d:
bf:c5:c1:30:77:94:42:2c:c4:54:71:6b:66:f3:36:
cf:92:ba:59:c9:16:93:e4:d5:f5:cf:31:5a:aa:93:
62:ed:53:1e:bb:c1:c8:e2:e6:6d:40:76:ce:af:c7:
39:e1:95:f0:f9:4a:67:c0:55:46:97:77:8c:21:ae:
b2:e1:f9:64:4f:63:18:7d:98:c3:86:8d:47:f3:3f:
5a:4c:6e:26:c2:4f:79:72:cb:bf:d8:5c:48:c5:7f:
9e:e5:a2:d4:a3:6c:7b:67:cd:8b:83:76:96:c1:25:
40:7f:35:ae:97:ce:e4:dc:18:be:0d:4a:43:d1:9d:
ff:4d:6d:da:69:f0:dd:74:c1:56:04:a4:c3:52:8a:
19:b3:2a:cf:30:72:6b:91:35:5c:33:78:7d:b6:18:
34:7d:d6:42:2c:f9:c3:52:a6:fb:63:29:3d:a6:ec:
42:9b:0b:2a:9b:c3:e0:e0:d7:26:5f:28:46:b8:3c:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:96:FE:C6:31:CA:9F:CE:14:AA:6F:4F:FA:A8:CE:1E:F3:0B:69:FA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UJb-xjHKn84Uqm9P-qjOHvMLafo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.232.0/22
Signature Algorithm: sha256WithRSAEncryption
72:ad:4e:01:ec:38:f8:a7:44:39:2a:45:81:b2:da:04:53:cb:
bb:b4:32:6f:f8:08:b0:81:cd:6a:27:c3:27:cc:fa:78:75:49:
dc:a5:40:1f:66:15:f6:ed:fd:0b:e0:37:d7:f2:ec:f7:a0:56:
15:dc:26:c8:68:0e:6f:9f:5c:4b:f0:70:2e:38:67:74:18:4e:
1d:97:04:8a:48:ca:e3:7d:ee:f9:db:2d:40:61:b8:6b:b0:b1:
be:3b:55:30:33:0a:f7:d2:5a:69:2b:33:49:57:9f:1c:5c:f7:
cd:98:eb:8c:c2:bc:93:79:b0:48:41:15:ed:8a:84:07:88:98:
59:23:0b:f3:21:3c:28:1c:cd:b3:80:82:29:b5:ac:c9:05:d8:
98:da:31:55:5f:a6:1c:3d:89:36:eb:44:31:a9:86:0c:a0:68:
44:ed:58:1f:8f:1b:d9:bc:8a:ac:dd:77:fa:be:39:08:49:c4:
cd:c5:59:5a:d6:bd:ec:59:2e:c4:45:60:c0:04:ee:18:2b:a2:
3c:f5:e5:09:5e:21:03:66:29:70:94:a8:80:45:96:10:f4:35:
ea:a6:30:79:f5:b7:55:18:c5:4b:c7:92:f0:02:f1:d4:a3:5b:
71:7d:d7:bd:06:a6:5e:6c:55:81:57:98:eb:5d:05:7b:fe:98:
59:2f:ff:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:42 2023 by rpki-client on console-fra.rpki-client.org