Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/egaZL5DJq90XPb1WrQKZ-3JiBpY.roa
File: egaZL5DJq90XPb1WrQKZ-3JiBpY.roa (raw, json)
Hash identifier: +Kz6ROIJ7CdZOX1l8ClUWJzefAgWKyMW5+XJjm78gDU=
Subject key identifier: 7A:06:99:2F:90:C9:AB:DD:17:3D:BD:56:AD:02:99:FB:72:62:06:96
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709578D649F607FD6B0A6E98EE85772B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/egaZL5DJq90XPb1WrQKZ-3JiBpY.roa
Signing time: Mon 02 Jan 2023 03:45:22 +0000
ROA not before: Mon 02 Jan 2023 03:45:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61390
IP address blocks: 93.171.40.0/22 maxlen: 24
92.38.33.0/24 maxlen: 24
146.158.60.0/22 maxlen: 24
93.171.182.0/23 maxlen: 24
146.120.120.0/22 maxlen: 24
146.120.236.0/22 maxlen: 24
95.46.116.0/22 maxlen: 24
93.170.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Aug 2023 13:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:78:d6:49:f6:07:fd:6b:0a:6e:98:ee:85:77:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a06992f90c9abdd173dbd56ad0299fb72620696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3b:6c:23:64:c7:6a:42:2d:e7:c5:e4:20:2d:
6a:8a:8b:1b:96:43:c1:99:8c:7f:60:ff:c9:4c:58:
52:73:dd:8d:4f:c2:ea:89:9b:c5:ea:26:a8:f9:a6:
2e:69:9e:5c:90:e2:dc:c7:ed:e7:75:c0:e7:a7:0e:
d8:90:38:03:8d:e7:c8:09:a4:02:5b:60:27:8b:35:
50:8f:46:52:f3:65:67:51:1c:9f:94:c8:8c:ee:97:
cf:a3:ec:65:e8:30:27:44:89:20:48:5e:ff:1d:fb:
2b:e6:8d:cd:06:f9:48:f7:6f:08:b7:0e:98:a7:56:
cd:91:b3:80:f2:b7:89:1d:de:cf:19:a7:0b:4d:e9:
e1:ef:8f:dd:74:af:5e:a2:b6:f3:a6:bd:9b:da:e7:
05:c2:08:81:56:64:a3:b3:95:d5:d3:94:b6:2c:25:
24:9c:62:77:2b:d2:e1:dc:2b:cf:b1:6c:43:7a:7a:
2f:7d:52:b6:bb:29:30:18:3b:6b:6c:52:c3:20:38:
9f:84:01:01:bd:39:77:28:f6:bd:42:a4:78:cc:50:
15:b7:e8:9e:39:87:ff:84:f5:0e:e9:55:a2:ad:2c:
e4:2a:84:57:6a:75:bc:c1:e3:68:76:e5:98:9f:e9:
a9:61:08:b8:c6:00:cf:49:06:38:8e:a1:ca:29:e3:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:06:99:2F:90:C9:AB:DD:17:3D:BD:56:AD:02:99:FB:72:62:06:96
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/egaZL5DJq90XPb1WrQKZ-3JiBpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.33.0/24
93.170.180.0/22
93.171.40.0/22
93.171.182.0/23
95.46.116.0/22
146.120.120.0/22
146.120.236.0/22
146.158.60.0/22
Signature Algorithm: sha256WithRSAEncryption
81:c0:84:cd:85:1f:17:ac:b1:38:52:c2:56:3b:27:8b:47:88:
57:f3:9a:6b:2b:63:02:3b:8c:b7:24:33:e2:53:8a:53:e0:ec:
3c:e1:cc:04:3a:7e:70:a2:d6:e3:85:96:95:4c:84:3a:cd:b8:
e2:cb:97:d1:83:ff:f9:62:00:c4:53:a6:54:e2:00:39:6c:aa:
92:4e:f5:df:e2:39:a5:ec:c4:8b:74:de:39:1a:0f:fb:ce:66:
fd:4a:15:4d:0c:70:95:7c:94:b1:9e:5d:80:d8:51:9f:21:44:
0f:ed:26:8b:68:fd:90:24:fa:3f:9c:b0:3d:85:b6:e1:1e:a9:
a0:77:72:72:75:31:5c:f4:ea:5c:be:e9:c1:c3:2e:30:b2:b7:
84:c8:b6:74:16:bd:97:d2:24:79:9f:b9:3c:5d:50:84:b1:b9:
54:8c:33:a2:74:18:14:9c:78:8e:a9:6b:85:0a:b8:bb:17:b4:
42:7a:66:5c:52:6b:87:89:93:4c:da:de:26:f3:8b:bf:1b:ab:
62:c2:17:d7:70:6b:16:84:24:09:c9:87:91:9d:c6:b6:a5:2e:
7e:46:fc:09:ff:dc:8d:47:72:71:39:1d:14:28:a4:34:29:5a:
4e:7a:62:9b:7e:51:ee:fa:12:8d:c7:db:65:8f:aa:e5:43:0b:
52:f7:cb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:51 2024 by rpki-client on console-ams.rpki-client.org