Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZWlmubKgo16Yo1MSgt-F4Ok2Z1k.roa
File: ZWlmubKgo16Yo1MSgt-F4Ok2Z1k.roa (raw, json)
Hash identifier: /Aw1mCF1ZYm1BinWY4dMEhtwSqDeBBfqE40X0iFa9EA=
Subject key identifier: 65:69:66:B9:B2:A0:A3:5E:98:A3:53:12:82:DF:85:E0:E9:36:67:59
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570953C02BFE3E924FBB8F5D66374155D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZWlmubKgo16Yo1MSgt-F4Ok2Z1k.roa
Signing time: Mon 02 Jan 2023 03:45:06 +0000
ROA not before: Mon 02 Jan 2023 03:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48949
IP address blocks: 93.171.181.0/24 maxlen: 24
95.47.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:3c:02:bf:e3:e9:24:fb:b8:f5:d6:63:74:15:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=656966b9b2a0a35e98a3531282df85e0e9366759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:0f:b4:3b:41:0b:50:b0:dc:7a:36:84:2f:
ab:d0:3c:73:53:af:80:46:41:a1:5d:c1:79:ce:31:
e9:12:64:0e:87:fc:9f:6a:57:ab:c2:98:15:92:e2:
40:18:48:49:1c:da:d2:c6:15:20:73:94:f8:85:29:
7e:ef:9f:86:67:82:b6:eb:09:35:6a:88:34:7d:ef:
e6:73:d9:4d:c3:90:80:f0:3a:d9:52:96:6f:d4:8b:
ee:71:67:c9:32:f8:56:7a:0a:12:da:0f:b2:91:06:
45:ec:04:e5:2c:a1:f8:4a:d8:70:4e:83:84:d5:16:
12:93:d9:c3:ff:62:a3:03:7a:67:ba:92:70:61:52:
c1:f8:76:d2:d0:a3:7b:73:a3:be:b1:a4:44:34:26:
e7:b0:1b:27:14:2b:29:39:d1:1a:e8:0e:e0:a1:29:
eb:20:91:1a:53:e9:6f:97:76:ae:37:95:61:3b:c4:
9e:ed:49:c4:73:79:cf:73:2b:d5:c4:2a:0e:13:6c:
28:5d:f0:bb:ad:40:db:95:33:f8:73:a1:e6:ac:b5:
fd:db:d8:67:d0:77:b0:1b:9c:6f:3a:3a:7d:49:e8:
4a:28:a2:61:67:29:15:a3:5e:9b:37:5d:5c:50:a9:
12:49:5d:4c:c0:1c:d6:55:34:25:65:42:9b:07:eb:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:69:66:B9:B2:A0:A3:5E:98:A3:53:12:82:DF:85:E0:E9:36:67:59
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZWlmubKgo16Yo1MSgt-F4Ok2Z1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.181.0/24
95.47.176.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:b1:ca:7b:4d:1a:33:b3:60:70:4e:f5:ed:04:23:a0:d8:57:
66:be:7f:29:73:e5:c3:5a:ba:55:00:6c:04:32:19:82:0f:77:
17:33:85:46:d4:68:b2:d6:80:71:d3:7c:08:29:8d:0d:2f:10:
45:86:8f:18:a1:00:84:0b:b9:f3:34:c8:2a:7a:53:2c:e3:52:
61:80:f7:e8:b3:07:84:06:fb:f9:cf:c0:57:8c:f9:07:88:55:
a4:15:97:00:1c:f2:1d:fe:cb:b2:19:66:50:88:e1:6b:85:19:
8f:12:64:1b:1b:2c:53:ad:07:b1:6a:06:5a:0c:bc:3f:5b:c2:
bf:cb:5e:65:87:27:4c:ff:02:23:aa:59:2a:2c:3b:02:e7:c4:
08:b1:4d:87:1c:a5:e7:9f:f4:a4:8d:80:25:37:b0:a1:c4:79:
5f:e5:73:86:0f:a9:d7:a0:c0:cd:2b:60:92:6c:0d:83:0b:30:
4e:bb:c0:4e:18:0d:d2:ab:bb:74:b1:a8:16:ef:0b:55:82:b7:
2e:9c:28:76:93:42:36:de:7e:b3:2e:3e:aa:ef:2d:cc:36:d4:
e7:b0:f2:7f:8e:c7:ec:5b:ae:84:44:94:3b:7b:55:99:89:19:
81:42:59:41:90:f5:b5:64:b9:75:47:56:ad:fa:b9:6c:a1:68:
4d:b4:70:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:31 2024 by rpki-client on console-fra.rpki-client.org