Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/o36_NIr4aTqENyDBYBt0GZgW2lM.roa
File: o36_NIr4aTqENyDBYBt0GZgW2lM.roa (raw, json)
Hash identifier: tBDxaM042rb5sdII2vgYBrFQdue8dQG8fSmzqN8k164=
Subject key identifier: A3:7E:BF:34:8A:F8:69:3A:84:37:20:C1:60:1B:74:19:98:16:DA:53
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A0881DEA644612251465073F127E4
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/o36_NIr4aTqENyDBYBt0GZgW2lM.roa
Signing time: Tue 02 Jan 2024 12:33:21 +0000
ROA not before: Tue 02 Jan 2024 12:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50182
IP address blocks: 93.170.246.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:08:81:de:a6:44:61:22:51:46:50:73:f1:27:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a37ebf348af8693a843720c1601b74199816da53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3a:d3:59:ea:88:38:d6:04:df:33:80:19:f0:
3c:e6:49:de:13:ab:be:6d:65:6c:e7:7d:d0:e4:90:
13:b2:96:b9:24:8a:42:90:a1:f8:f1:7c:ed:5a:20:
b7:cd:1f:59:1d:ee:46:11:04:12:c5:38:a3:a3:55:
d2:d6:21:cf:43:e3:b8:bf:9b:15:19:ec:0b:4e:0b:
99:d9:de:70:99:f1:c0:62:16:aa:69:b1:05:06:8e:
c8:a0:07:6f:42:7b:90:28:fe:29:9d:1e:43:08:66:
fb:44:6a:f4:2b:62:37:52:ed:b9:f0:8b:62:25:a3:
c7:4c:9c:d6:b0:b6:41:b0:6d:b8:05:62:8d:0f:9c:
c9:2e:2b:8a:95:b2:61:7b:69:ea:ad:72:15:8a:62:
dd:fc:73:8e:3f:9c:b5:a6:2a:73:e6:3b:80:2f:48:
90:ce:b6:f3:35:2d:a3:9a:b0:f4:03:b7:e6:89:2c:
d1:b2:94:b4:4a:2a:34:ed:a1:2a:50:f5:00:74:30:
0b:b7:f2:9d:f9:3d:8d:24:7c:57:26:07:53:61:e8:
31:6c:5d:91:c6:5f:f2:57:5e:a9:32:87:98:8a:e5:
f1:a0:b3:e2:e0:29:49:09:13:c2:0e:b8:b5:e4:24:
13:38:a7:e3:2e:00:85:ff:1a:b7:cd:af:ec:94:f3:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7E:BF:34:8A:F8:69:3A:84:37:20:C1:60:1B:74:19:98:16:DA:53
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/o36_NIr4aTqENyDBYBt0GZgW2lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.246.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:bd:9a:cd:12:95:c4:fe:8e:3f:ac:7e:a9:fa:0b:6c:46:26:
2a:4a:20:d2:ce:bc:88:cf:66:6f:e8:fa:c4:cd:6f:76:0f:c3:
f9:e5:1b:fb:19:b8:b9:0c:56:76:d0:d0:10:dd:d2:ea:20:68:
49:fb:be:41:db:52:d4:a8:eb:67:6a:93:48:95:5e:e2:62:46:
db:3f:0b:04:4b:30:ac:7e:5e:56:3f:40:15:a2:ad:da:f5:4e:
91:cb:24:fa:46:01:7d:03:27:f2:b9:25:8b:0c:c0:7d:de:9e:
63:09:6e:26:7e:66:c5:28:36:a4:ac:b5:cb:2e:b1:da:e8:3e:
4e:0c:56:de:10:65:d7:74:53:bd:08:65:d9:79:3e:c9:23:8c:
19:97:e3:4d:eb:fe:a4:38:68:ac:fc:d8:39:e2:95:e9:a6:bb:
0c:55:0e:58:86:99:12:cf:b0:82:e7:3f:a2:c0:91:fb:f5:17:
10:b9:33:13:f3:b8:b6:b9:fa:06:73:93:4b:9d:9c:04:62:fb:
20:b7:c0:97:25:1e:4a:c2:b8:72:be:fa:bf:9f:e8:3e:85:53:
2e:59:39:ed:94:cb:f5:d4:ee:33:43:cc:5b:7c:da:8b:2d:96:
2c:af:b5:ab:9d:d3:8c:f3:7f:86:6c:69:80:8b:20:9b:7b:b2:
b7:48:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:32 2025 by rpki-client