Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/adxtcV3HvHxV1gob-j_2-syhzAk.roa
File: adxtcV3HvHxV1gob-j_2-syhzAk.roa (raw, json)
Hash identifier: APtMA7ZmZ0EirCtAGZ//J8NNK/aLQ28P1u05Nc6gEc0=
Subject key identifier: 69:DC:6D:71:5D:C7:BC:7C:55:D6:0A:1B:FA:3F:F6:FA:CC:A1:CC:09
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018AB2C0DB548EADCE7EB2C7A4AA5E65DE83
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/adxtcV3HvHxV1gob-j_2-syhzAk.roa
Signing time: Wed 20 Sep 2023 13:21:38 +0000
ROA not before: Wed 20 Sep 2023 13:21:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60573
IP address blocks: 146.120.172.0/23 maxlen: 24
93.170.2.0/24 maxlen: 24
95.46.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:c0:db:54:8e:ad:ce:7e:b2:c7:a4:aa:5e:65:de:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 20 13:21:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69dc6d715dc7bc7c55d60a1bfa3ff6facca1cc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:35:80:00:81:80:45:6f:66:cc:a5:2e:d7:61:
24:0f:e1:af:3f:6c:51:1a:8d:6d:e1:dc:14:7a:23:
b6:c7:9d:28:e0:71:59:dd:02:4a:29:85:6a:83:68:
3d:6a:90:ce:49:c7:56:9f:ae:58:95:32:ff:42:d3:
9d:55:98:0e:20:99:f2:96:e8:41:11:dd:31:9c:61:
b9:b9:bc:7f:f1:69:09:04:31:fa:21:cb:60:c0:1f:
cd:4d:f6:6d:c8:be:d1:79:ca:38:55:1d:83:07:71:
2e:2e:23:85:70:a3:d4:42:a0:d3:f7:4c:c7:b9:49:
9e:66:8a:4b:cc:99:c9:a7:e9:18:be:27:81:48:68:
45:cb:0d:4e:86:81:00:23:14:53:59:4e:50:46:67:
89:6c:54:8b:64:97:dd:9a:1d:b7:f9:4e:b0:e7:b2:
5e:a8:84:2a:51:a9:3d:e7:c7:fe:f3:48:32:aa:f0:
ee:85:69:24:de:51:8f:81:2d:1f:a7:72:72:a0:93:
7c:2a:17:14:bc:80:58:6e:17:5e:7e:cd:12:f8:03:
d0:94:ee:a7:8d:6b:2e:68:44:dd:1a:93:fb:64:93:
86:6e:ad:32:35:2d:25:b3:29:c0:f3:eb:c4:a1:40:
50:d4:1d:4f:d7:97:f3:99:3d:ea:88:cd:66:d5:d6:
53:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DC:6D:71:5D:C7:BC:7C:55:D6:0A:1B:FA:3F:F6:FA:CC:A1:CC:09
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/adxtcV3HvHxV1gob-j_2-syhzAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.2.0/24
95.46.77.0/24
146.120.172.0/23
Signature Algorithm: sha256WithRSAEncryption
59:fe:a6:04:16:bd:44:d1:e0:38:5e:22:80:d8:4d:13:52:f3:
ce:54:44:27:de:a7:ef:9e:2a:31:db:2d:12:2e:c8:05:21:3a:
f7:7a:04:e3:2a:6f:a3:67:5f:93:a0:07:bf:2a:02:c5:2a:a9:
e1:3b:ee:c2:43:9d:0c:9a:39:34:32:ec:90:72:00:cc:22:f3:
6e:f5:21:0c:9f:44:cf:ff:0d:28:aa:e5:75:9f:4d:d5:7e:0a:
2e:bd:16:0e:aa:6c:4f:a2:ee:37:fe:86:86:1b:7c:63:09:3f:
5c:69:34:4a:40:a3:ec:29:e3:81:4b:9b:d3:e3:07:e0:6b:81:
4a:30:47:8c:72:bb:d4:da:48:a5:2e:af:84:f6:22:bc:42:56:
f8:c9:b4:b6:b7:a2:c2:80:57:1a:55:69:7b:25:21:67:42:4b:
2a:33:a0:d3:9a:ce:1b:58:d7:63:24:3c:8d:c5:f1:b1:29:ee:
f7:7e:fd:59:f0:8e:92:65:60:09:82:b8:a9:ba:53:77:65:17:
85:58:35:c0:da:0d:40:bd:80:ee:3a:00:d0:3b:90:b3:1f:13:
30:09:e4:da:e7:7f:12:99:9c:23:cf:7c:90:27:29:08:13:35:
88:be:f6:40:bb:6e:5b:a6:09:23:a2:43:da:94:01:4b:47:4b:
5a:e5:7e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:00 2024 by rpki-client on console-ams.rpki-client.org