Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZVUQvY-a-IzEW41dYBChTL4PJr8.roa
File: ZVUQvY-a-IzEW41dYBChTL4PJr8.roa (raw, json)
Hash identifier: 6KKF+41dVJsCAMNP5X/4HiP4uSrufdMGPW1ZRBradMI=
Subject key identifier: 65:55:10:BD:8F:9A:F8:8C:C4:5B:8D:5D:60:10:A1:4C:BE:0F:26:BF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570957859FE995C6EFA20A6ECD56A6F32
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZVUQvY-a-IzEW41dYBChTL4PJr8.roa
Signing time: Mon 02 Jan 2023 03:45:21 +0000
ROA not before: Mon 02 Jan 2023 03:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61384
IP address blocks: 93.171.170.0/23 maxlen: 24
93.170.132.0/23 maxlen: 24
93.171.250.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:78:59:fe:99:5c:6e:fa:20:a6:ec:d5:6a:6f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655510bd8f9af88cc45b8d5d6010a14cbe0f26bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:5e:0f:97:1e:09:fe:e2:f0:74:b5:96:3a:
72:7c:5f:02:8b:ff:e0:0f:42:8a:6a:67:c6:f1:32:
fc:7c:da:25:68:86:b5:e0:a2:15:f1:32:73:fd:b0:
e7:b3:ef:bc:4e:fc:97:09:18:d0:61:ef:2b:e6:ee:
83:84:f4:b2:94:7b:ee:3b:e8:e6:34:41:aa:04:17:
04:a0:80:bc:79:ae:7a:32:d5:b5:53:7b:43:35:46:
63:cd:09:f8:85:e2:49:5c:87:a5:47:b2:34:e9:e0:
f4:a2:4e:6e:aa:0a:b4:5d:e3:3b:77:43:aa:e9:4f:
73:56:dd:4a:69:30:fd:73:76:ed:49:f7:f4:8f:a3:
2c:1f:d0:95:c3:f7:41:bc:f7:72:e1:40:8f:ff:c6:
12:45:aa:2a:bb:6e:48:6e:d0:2a:46:73:6a:b0:66:
53:ad:46:1b:9b:0a:4d:58:62:38:90:d9:f9:a7:75:
76:e0:72:45:4e:a3:5b:93:80:37:eb:a1:87:7e:ab:
99:96:67:c9:eb:42:0c:3e:a5:0a:6c:68:ba:87:8b:
a8:48:1f:40:05:dd:f7:e6:ad:5a:31:e4:9d:b9:2e:
5a:f1:a0:61:4c:62:0d:7f:53:71:87:3e:4d:81:87:
eb:7e:23:b8:72:a2:7d:f2:15:1c:e9:1b:2f:ef:fd:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:55:10:BD:8F:9A:F8:8C:C4:5B:8D:5D:60:10:A1:4C:BE:0F:26:BF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZVUQvY-a-IzEW41dYBChTL4PJr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.132.0/23
93.171.170.0/23
93.171.250.0/23
Signature Algorithm: sha256WithRSAEncryption
af:28:a2:1a:25:66:97:af:f9:41:67:b9:f8:20:16:87:d9:76:
16:ad:76:da:b2:ba:28:18:7d:04:5a:b3:3c:2a:f7:b1:7e:9c:
70:13:60:dd:9f:17:23:64:3c:d0:45:49:b7:ff:77:58:73:e0:
a2:b5:13:0a:9a:e1:e3:1a:09:a7:38:ec:58:e2:98:2d:1b:55:
91:41:73:08:88:2f:58:00:98:e9:4c:ec:ea:ea:a3:05:ce:1d:
67:e8:36:e7:93:bb:f9:56:e0:4e:4e:34:8c:8d:29:8e:50:b0:
18:16:47:0a:ba:11:c0:9b:2d:67:2c:0a:b5:78:7f:3e:b6:4a:
9d:9f:5d:ea:3c:8a:08:b4:dc:5c:ba:69:7f:e0:bd:7d:ce:32:
81:75:45:95:16:53:e6:af:c3:a7:6d:6b:2c:2b:21:cc:75:57:
a7:97:49:81:09:04:d8:9c:77:c2:90:8c:5f:c3:38:d4:11:c0:
96:c7:8d:95:5f:a7:4e:e5:0b:95:37:5b:88:27:8f:dd:fa:52:
c4:bf:67:1b:7f:3e:dd:db:16:66:7c:8a:c8:f4:88:98:91:a9:
f3:d8:0b:8e:5c:1f:82:7d:4e:81:50:a9:28:c1:c1:d8:de:99:
1e:a8:56:a8:f9:6d:8b:d7:d6:e0:a6:a0:b7:4c:bf:66:fe:b3:
90:c0:ce:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:37 2024 by rpki-client on console-fra.rpki-client.org