Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/glx6c8ZifiO6dc9AgtVYeCYiQYg.roa
File: glx6c8ZifiO6dc9AgtVYeCYiQYg.roa (raw, json)
Hash identifier: YgOc0bg1WC+pgeBnbuAZZUwJ/94geZ9SEJenOKuBNLk=
Subject key identifier: 82:5C:7A:73:C6:62:7E:23:BA:75:CF:40:82:D5:58:78:26:22:41:88
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01902BFE2A4EB56C0D17ABF14999CEB819AE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/glx6c8ZifiO6dc9AgtVYeCYiQYg.roa
Signing time: Tue 18 Jun 2024 15:36:35 +0000
ROA not before: Tue 18 Jun 2024 15:36:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56428
IP address blocks: 93.171.137.0/24 maxlen: 24
146.120.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 07:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2b:fe:2a:4e:b5:6c:0d:17:ab:f1:49:99:ce:b8:19:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jun 18 15:36:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=825c7a73c6627e23ba75cf4082d5587826224188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0b:b3:ab:07:5c:de:53:a9:e0:21:3b:c9:dd:
3a:f1:a3:46:37:e5:ba:1e:54:a6:d9:ea:03:48:95:
20:ae:12:57:70:01:db:33:5d:fa:2e:dd:7d:f2:3d:
c8:90:19:e7:5d:99:8e:98:3e:50:3d:5f:5f:96:ba:
d7:f9:49:76:09:de:ba:f1:72:cb:c0:2e:1a:bc:a9:
fc:6a:d3:14:56:0e:aa:33:3f:f8:52:d8:bf:e4:bb:
30:4d:fa:6e:08:d1:1b:58:4a:91:d6:68:ae:47:c5:
2f:4d:bd:42:ca:47:f2:9d:11:a2:d2:07:3e:29:fa:
ac:52:88:4d:41:34:39:53:21:a0:1c:9c:db:40:7d:
83:1a:e8:72:ab:db:50:3d:91:01:e0:22:2a:89:0e:
5b:ca:73:1f:32:c6:6d:3e:9b:7b:be:f3:06:18:26:
d8:47:79:2d:c3:85:bd:a3:61:26:6b:8a:e0:56:b8:
bc:67:e0:cc:61:37:1d:13:7c:de:b4:50:7b:b2:88:
b5:b4:51:11:9c:cf:97:66:af:29:84:0e:80:95:05:
ee:9d:a6:01:1d:0a:5b:af:39:d4:14:25:1a:b3:50:
7d:5f:4b:b1:41:38:e8:a2:73:87:f4:79:80:89:e1:
4b:dc:4f:72:53:e6:c1:b0:76:4c:82:8c:90:0a:42:
af:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5C:7A:73:C6:62:7E:23:BA:75:CF:40:82:D5:58:78:26:22:41:88
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/glx6c8ZifiO6dc9AgtVYeCYiQYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.137.0/24
146.120.185.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e7:dc:62:ea:2b:5f:9a:e0:34:8f:9d:e3:00:97:c7:fc:66:
69:6b:40:8c:f8:f5:cf:20:fc:8c:bb:d2:b6:80:0d:bb:66:b7:
1f:6c:43:5e:25:dc:9d:c6:19:41:a5:b1:4f:0f:2d:57:44:bd:
de:97:21:4e:af:8a:c9:30:10:2e:3d:e7:0b:0b:33:b4:34:8c:
07:78:36:67:ca:b6:81:ad:83:db:88:a9:cf:02:55:0b:fe:bf:
3e:36:5e:0a:80:ff:f1:f7:62:eb:80:75:9a:cf:f1:e9:9a:e5:
a3:ad:52:74:a8:16:9f:9b:2c:9a:51:22:aa:d7:7c:30:f9:85:
d4:6a:d8:6e:79:40:02:7f:ad:08:91:c0:73:23:a8:19:e6:8b:
6d:5c:ae:9d:20:64:66:62:2a:14:15:11:07:14:9c:2d:22:2f:
40:41:5c:bb:31:1d:b6:67:a0:f6:56:ae:01:f3:ef:45:2c:6c:
07:27:4a:4c:df:1d:72:21:f6:c3:93:88:65:46:ed:8b:ea:8e:
ce:0a:2b:7c:57:c5:6d:f3:d2:a1:ad:ee:63:2b:51:33:71:01:
6c:f6:34:dd:25:a6:f5:46:29:18:3e:82:67:5f:9c:9f:a0:2f:
eb:b1:d3:d7:62:cd:7d:3a:93:33:07:8c:03:24:21:8f:3c:91:
c2:36:3f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:32 2025 by rpki-client