Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Z2xzXk_7uU0nAZf5ZP-bNTNLnMk.roa
File: Z2xzXk_7uU0nAZf5ZP-bNTNLnMk.roa (raw, json)
Hash identifier: DKEnOV7CT+Y9VvfpMoxIjkKkEe3cEMyl/zKbEZJBWRE=
Subject key identifier: 67:6C:73:5E:4F:FB:B9:4D:27:01:97:F9:64:FF:9B:35:33:4B:9C:C9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709570A0D7768C1E38F4BC4975076118
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Z2xzXk_7uU0nAZf5ZP-bNTNLnMk.roa
Signing time: Mon 02 Jan 2023 03:45:19 +0000
ROA not before: Mon 02 Jan 2023 03:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61123
IP address blocks: 93.171.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:70:a0:d7:76:8c:1e:38:f4:bc:49:75:07:61:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=676c735e4ffbb94d270197f964ff9b35334b9cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:31:d3:67:ea:66:d9:35:50:85:f0:b6:e1:
0c:2d:fa:81:5e:b4:6e:c6:4e:7d:21:80:6b:f0:55:
40:2e:ad:d8:63:c3:1b:fb:72:3b:a3:d3:dc:b8:5a:
9b:01:06:b9:d4:93:31:53:8d:e5:e0:35:e6:e8:20:
b6:c1:b1:74:e1:69:59:96:93:8f:f2:69:51:23:36:
b1:fb:63:35:57:cd:3b:46:e1:3b:7e:f6:20:a8:67:
15:6d:db:3d:88:f6:8d:43:0c:da:16:62:41:d3:55:
50:92:22:46:20:a8:b1:9b:23:dd:50:68:f3:59:9b:
ee:25:58:57:aa:ce:63:73:ff:ef:76:64:3b:71:82:
20:6d:60:85:78:2a:77:fb:7d:c3:99:55:7f:eb:02:
4e:ab:4d:01:18:23:7b:e0:7b:88:d9:82:f5:2a:10:
34:64:82:bb:db:e6:6b:17:1e:ea:74:8c:e7:2e:f1:
fc:3f:ea:87:00:1e:b1:59:b4:5c:81:67:41:95:a8:
87:c8:a1:06:a7:5b:ea:22:60:38:26:64:cd:e3:42:
04:73:4d:cd:39:bb:ae:fc:3f:21:9a:95:4b:eb:9a:
38:6b:fa:aa:40:42:48:81:10:46:70:7f:75:ac:eb:
c4:19:ef:8b:32:60:6c:e5:a7:d4:e0:a6:52:f7:14:
77:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6C:73:5E:4F:FB:B9:4D:27:01:97:F9:64:FF:9B:35:33:4B:9C:C9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Z2xzXk_7uU0nAZf5ZP-bNTNLnMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.219.0/24
Signature Algorithm: sha256WithRSAEncryption
20:fa:b2:75:eb:53:73:d6:ec:11:c0:01:c2:93:de:4c:0d:db:
d0:4d:05:0c:2b:7e:09:7b:6e:4b:ee:4f:7a:96:be:0f:ff:c4:
c6:78:2e:da:6e:93:c8:f3:5c:0d:54:15:02:2c:e7:ea:a8:0c:
ae:7e:7a:1c:a6:52:88:f3:cd:de:ed:82:a7:3a:17:1e:80:30:
ab:95:1c:15:cb:02:54:72:8b:ae:90:d0:43:b3:93:01:0f:6f:
6c:65:d0:e2:68:39:da:04:f1:1b:33:7d:f7:3c:d1:3b:8c:04:
39:71:c1:e1:d4:a1:89:1c:b7:8e:6d:82:84:f8:7a:a9:7b:f3:
27:34:19:27:3e:24:6a:5a:c1:74:fe:20:e8:d8:1d:49:b5:63:
ce:e3:37:27:5b:9b:70:40:9e:b5:28:f7:27:ac:1b:13:5e:0f:
15:37:4e:f2:0e:c7:52:42:e5:71:ec:dc:f9:01:96:52:65:62:
66:72:67:78:28:6f:03:5c:12:d7:3c:03:80:96:4a:b5:9e:80:
b0:70:98:bc:cd:82:2a:6b:9b:3e:fc:1e:67:cc:50:0b:26:f4:
7b:ac:59:dd:04:f6:5b:f8:96:8f:23:dc:29:c9:82:09:fb:6e:
77:88:0b:e9:77:60:4d:3d:e2:1f:01:59:4f:54:9c:83:84:b7:
ee:66:0e:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlXCg13aMHjj0vEl1B2EYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzZjNzM1ZTRmZmJiOTRkMjcwMTk3Zjk2NGZmOWIzNTMzNGI5Y2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdcx02fqZtk1UIXwtuEMLfqBXrRu
xk59IYBr8FVALq3YY8Mb+3I7o9PcuFqbAQa51JMxU43l4DXm6CC2wbF04WlZlpOP
8mlRIzax+2M1V807RuE7fvYgqGcVbds9iPaNQwzaFmJB01VQkiJGIKixmyPdUGjz
WZvuJVhXqs5jc//vdmQ7cYIgbWCFeCp3+33DmVV/6wJOq00BGCN74HuI2YL1KhA0
ZIK72+ZrFx7qdIznLvH8P+qHAB6xWbRcgWdBlaiHyKEGp1vqImA4JmTN40IEc03N
Obuu/D8hmpVL65o4a/qqQEJIgRBGcH91rOvEGe+LMmBs5afU4KZS9xR36wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGdsc15P+7lNJwGX+WT/mzUzS5zJMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvWjJ4elhrXzd1VTBuQVpmNVpQLWJOVE5Mbk1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXavbMA0G
CSqGSIb3DQEBCwUAA4IBAQAg+rJ161Nz1uwRwAHCk95MDdvQTQUMK34Je25L7k96
lr4P/8TGeC7abpPI81wNVBUCLOfqqAyufnocplKI883e7YKnOhcegDCrlRwVywJU
couukNBDs5MBD29sZdDiaDnaBPEbM333PNE7jAQ5ccHh1KGJHLeObYKE+Hqpe/Mn
NBknPiRqWsF0/iDo2B1JtWPO4zcnW5twQJ61KPcnrBsTXg8VN07yDsdSQuVx7Nz5
AZZSZWJmcmd4KG8DXBLXPAOAlkq1noCwcJi8zYIqa5s+/B5nzFALJvR7rFndBPZb
+JaPI9wpyYIJ+253iAvpd2BNPeIfAVlPVJyDhLfuZg7q
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:00 2024 by rpki-client on console-ams.rpki-client.org