Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/m9vA7_1IaTXjui1uNT3blpwBTRg.roa
File: m9vA7_1IaTXjui1uNT3blpwBTRg.roa (raw, json)
Hash identifier: hI0hp6dpqwowmDBzLhqE0BDDqSRjpHuLW7yQvovIvdY=
Subject key identifier: 9B:DB:C0:EF:FD:48:69:35:E3:BA:2D:6E:35:3D:DB:96:9C:01:4D:18
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570956AFD802085091A8F19201089FC1D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/m9vA7_1IaTXjui1uNT3blpwBTRg.roa
Signing time: Mon 02 Jan 2023 03:45:18 +0000
ROA not before: Mon 02 Jan 2023 03:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60337
IP address blocks: 93.170.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:6a:fd:80:20:85:09:1a:8f:19:20:10:89:fc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bdbc0effd486935e3ba2d6e353ddb969c014d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3d:f5:a8:72:75:7a:a9:22:c0:51:d0:2d:a8:
9a:3f:04:be:0d:24:ed:6a:89:32:53:cc:a3:97:e8:
b9:fe:f5:ad:0a:4a:3b:db:22:6d:94:d2:02:7b:74:
47:6c:52:0a:f5:b0:39:3e:1d:9b:56:d9:e0:38:9d:
87:50:84:84:d8:24:c1:2b:43:bb:33:b4:d9:ff:b2:
54:45:37:d7:60:0e:9a:0f:99:ce:1a:65:1c:c0:ff:
12:cc:7b:04:a8:6a:6b:a0:0a:e1:81:a7:c4:ae:cc:
e1:11:be:b4:64:dc:cf:de:86:06:e8:e4:da:47:f3:
dc:75:1c:a4:48:47:a3:2d:29:b2:76:70:22:bd:27:
4a:63:3f:b4:2a:32:84:e5:3d:ca:a5:bc:de:4c:dd:
6f:65:8f:5a:e8:7e:e7:ba:08:8b:58:4e:97:89:40:
e6:32:08:0a:1f:7b:17:81:c2:8c:dc:a1:3e:01:d4:
da:8e:8f:21:03:57:98:82:44:ce:b8:e4:98:ec:19:
5e:aa:4f:49:5d:40:a4:40:5e:cc:d7:5b:e2:a7:0c:
50:94:9c:9f:5c:d2:0d:b8:3d:87:1c:e2:88:f8:46:
e8:59:0c:98:f2:88:2f:62:a0:d7:36:2b:b0:e2:e6:
88:aa:15:7c:6a:41:ae:1c:6a:48:35:d5:f9:0d:33:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DB:C0:EF:FD:48:69:35:E3:BA:2D:6E:35:3D:DB:96:9C:01:4D:18
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/m9vA7_1IaTXjui1uNT3blpwBTRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:dd:fe:61:03:ef:cb:b6:90:c6:dd:dd:eb:a9:c4:1e:8b:3d:
a2:70:fc:12:9b:c0:ff:56:64:7c:65:51:ab:00:bd:66:5d:29:
1c:02:8b:04:50:02:83:0d:63:7a:2c:84:c4:d3:2e:12:c9:c0:
24:4f:34:9d:4d:b2:e9:b1:0c:23:2b:75:5d:99:e9:4e:5c:bf:
7c:41:3b:40:89:68:65:79:c9:2f:92:00:83:c7:4d:82:78:3c:
e1:56:de:d9:df:7f:9f:8c:8e:84:a0:d1:33:5d:a3:fe:bb:c1:
4e:29:34:e3:b3:9e:e7:b7:95:ab:c7:e3:76:27:d1:54:28:6a:
cc:fb:6e:5f:e5:6d:5f:00:d3:3c:c0:6b:72:15:fc:26:fb:15:
d0:5d:fd:3b:5c:63:a1:8e:cd:18:f5:58:32:38:78:b8:5a:00:
f5:65:18:98:70:4d:da:cb:aa:9a:b8:18:8b:17:76:75:6a:16:
cc:78:c6:bb:7e:46:09:34:6f:58:0e:d1:24:d9:b0:0c:03:79:
c1:c6:2f:28:eb:c4:53:2a:6d:9e:ca:b7:af:9e:1a:38:22:c4:
a9:34:7e:fd:c1:fc:31:f8:05:bf:8e:4e:c2:d6:32:bf:f3:c7:
fa:58:34:77:11:bb:12:a0:9e:89:c9:2c:be:c1:b0:21:e9:5f:
d8:3b:96:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:37 2024 by rpki-client on console-fra.rpki-client.org