Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/de4uYwxyVoWd5leBfzwlURLjlUk.roa
File: de4uYwxyVoWd5leBfzwlURLjlUk.roa (raw, json)
Hash identifier: Ls9TIYY/p+014UXSvQPtfqKl6q4Jw8n5O07xXUx/SnQ=
Subject key identifier: 75:EE:2E:63:0C:72:56:85:9D:E6:57:81:7F:3C:25:51:12:E3:95:49
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E1D144D9388CA18B5BD899857639
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/de4uYwxyVoWd5leBfzwlURLjlUk.roa
Signing time: Tue 02 Jan 2024 12:33:11 +0000
ROA not before: Tue 02 Jan 2024 12:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12593
IP address blocks: 93.170.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e1:d1:44:d9:38:8c:a1:8b:5b:d8:99:85:76:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75ee2e630c7256859de657817f3c255112e39549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:1b:9d:f2:f9:ef:18:13:d7:9a:c6:a0:85:
b8:a1:f1:86:c9:b3:fb:7f:6a:02:64:07:f6:63:d1:
01:69:36:46:42:99:38:23:13:75:b7:ff:08:9f:c7:
49:c0:63:ff:3d:34:c4:0e:c3:4c:27:82:63:9e:b0:
15:a3:f1:0a:1b:48:d9:4b:d0:9f:e2:ab:d3:4b:86:
c2:01:9d:54:71:3a:ad:f6:00:a6:4f:08:db:bb:2c:
f9:52:b9:e5:be:23:3c:d1:53:58:08:2e:b9:b6:61:
80:e0:83:cb:0c:09:f6:03:2f:cc:79:0c:31:9d:a1:
2f:00:85:81:70:ba:2b:a0:83:0e:b8:55:69:4d:24:
be:76:01:bf:9f:bf:71:48:aa:00:05:20:1c:6f:a9:
46:0f:29:ca:33:b9:f3:5b:0b:1c:5d:2a:b0:da:e4:
25:8a:aa:38:fc:be:51:3f:3b:2a:c5:cf:bf:31:42:
57:0a:63:c7:77:5d:fd:1d:69:71:cd:cc:a1:54:04:
56:0a:84:3d:8e:c8:b8:3c:6b:92:c3:82:9a:13:64:
3d:32:57:dc:e7:ee:f7:c2:71:ae:bb:6f:20:8b:4b:
86:b8:a7:73:02:50:8c:08:8b:f0:f3:27:82:1f:1e:
1e:60:0c:92:6e:2c:4e:b9:8a:86:fd:53:97:61:75:
a2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EE:2E:63:0C:72:56:85:9D:E6:57:81:7F:3C:25:51:12:E3:95:49
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/de4uYwxyVoWd5leBfzwlURLjlUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.54.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:1d:09:97:1b:d3:ed:16:7f:f0:35:f9:52:b2:33:11:85:ba:
f9:94:bc:2c:b4:80:1a:c2:6e:b7:9f:50:6d:a3:83:06:b1:c5:
ab:87:c3:3d:22:0f:f3:d7:36:4e:a5:f6:dc:dc:a5:93:f9:b8:
ac:40:9d:b0:ad:a5:d4:69:5d:a4:dd:16:e0:a2:b2:74:33:7a:
15:c8:d7:92:ac:e2:45:14:08:c0:9a:da:2d:ab:9f:dc:a4:4c:
81:b7:e4:2e:92:77:f0:6d:b5:49:30:e5:42:e8:e8:5a:6c:b2:
73:6a:39:c5:14:15:cf:99:66:56:54:44:c7:c7:22:5a:35:c0:
d3:53:56:cb:d2:96:2f:ca:2e:dc:6a:dc:75:47:80:df:e2:9f:
9d:ff:01:9d:a6:1a:ec:57:3f:dd:3a:89:d5:da:8a:f3:e1:dc:
d8:ba:d2:50:62:ac:ca:d8:74:87:2b:31:d8:4b:50:ae:16:d3:
fb:2f:2e:dd:8f:38:be:7b:f4:cd:1e:6f:53:8c:da:bc:a8:e0:
40:fa:3b:aa:16:01:0d:a4:9b:88:d1:4a:2e:10:bf:18:92:91:
c2:cb:d3:b9:f0:0e:a7:16:5e:b7:0b:b0:46:8f:b9:d7:e8:27:
4a:06:94:1d:5d:0c:b7:56:a5:1e:c9:02:20:0c:17:ca:25:b8:
b7:b9:9a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:39 2025 by rpki-client