Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/q0fdzSC1cPmrS3ofLTcUfCwO4Ic.roa
File: q0fdzSC1cPmrS3ofLTcUfCwO4Ic.roa (raw, json)
Hash identifier: 2pBDCJKx7DUcfU2kpqRqp2QGB3PLWcj2JV8Dt39LU4k=
Subject key identifier: AB:47:DD:CD:20:B5:70:F9:AB:4B:7A:1F:2D:37:14:7C:2C:0E:E0:87
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A4AC6E9E68E4CFF80A88C0BE1B85A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/q0fdzSC1cPmrS3ofLTcUfCwO4Ic.roa
Signing time: Tue 02 Jan 2024 12:33:38 +0000
ROA not before: Tue 02 Jan 2024 12:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208876
IP address blocks: 93.171.4.0/24 maxlen: 24
95.46.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4a:c6:e9:e6:8e:4c:ff:80:a8:8c:0b:e1:b8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab47ddcd20b570f9ab4b7a1f2d37147c2c0ee087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:b5:da:52:de:51:15:d2:bc:7e:82:01:6c:
a4:09:e3:94:c4:65:0e:43:c4:d9:b8:2e:39:1b:1e:
3b:13:77:1d:64:be:df:f8:5c:59:82:74:d0:0f:30:
a0:42:85:cb:75:4b:87:43:94:66:0c:fc:f8:97:d7:
31:cb:90:84:fe:50:fd:db:9e:fb:cd:06:db:1e:21:
e0:fa:d5:07:91:5c:56:d3:22:13:34:5e:6f:5c:ca:
ff:19:3c:d6:14:a8:36:e6:49:c5:bb:6b:df:f1:48:
3a:94:21:1e:5e:ac:dc:20:aa:a0:f0:58:9b:d5:af:
f0:e5:26:6b:67:6b:04:0c:2d:9e:f2:71:b7:7c:57:
68:99:fc:c9:1a:12:d1:b5:8d:b6:da:19:3a:14:c4:
6c:5d:f4:0d:b4:a7:8f:9b:63:19:ca:7b:94:99:32:
ae:a6:2c:43:8a:31:34:88:56:8c:f1:28:30:e3:6e:
d0:5d:5b:d5:0b:bb:5a:95:b5:67:99:80:d6:ec:1b:
21:46:87:63:ba:02:c5:5b:41:0c:f2:96:3d:9b:4d:
b6:71:50:22:dc:2b:4c:21:e2:42:a1:5d:1b:21:93:
fe:86:be:f4:49:7c:82:3d:c5:15:cf:d1:ee:ee:65:
38:c7:43:b3:b5:da:d3:de:4f:a7:82:00:b7:f4:33:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:47:DD:CD:20:B5:70:F9:AB:4B:7A:1F:2D:37:14:7C:2C:0E:E0:87
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/q0fdzSC1cPmrS3ofLTcUfCwO4Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.4.0/24
95.46.8.0/24
Signature Algorithm: sha256WithRSAEncryption
83:12:db:68:57:5c:01:92:4d:0d:3a:59:d4:d9:ce:00:dc:ae:
b6:3f:67:81:64:90:1b:70:ed:ad:d4:61:0f:c0:9e:22:8d:35:
b4:66:8c:e2:7e:a3:5f:7d:87:64:65:8f:11:09:1e:7e:56:c7:
fc:39:89:f2:80:a4:0d:3f:a9:ce:59:c3:e0:0e:91:0d:a4:2c:
79:ce:68:b0:50:cf:38:a4:75:3d:fd:ff:37:17:ae:51:e3:6c:
01:6d:8c:ed:42:fd:13:75:59:47:28:44:8d:46:35:b9:1c:e8:
ac:0d:da:30:63:12:8b:7c:4a:8d:87:8c:0c:0a:3c:95:99:19:
f0:2f:83:f2:24:a8:e8:9a:de:8a:91:75:bf:00:20:4a:60:d1:
74:15:2c:55:8f:f1:09:e9:66:50:7b:22:b2:79:38:8d:31:c7:
c7:98:fd:2e:2c:ef:87:b9:af:f6:17:c8:39:4b:67:01:3d:2f:
00:8e:a5:56:4a:b2:3d:65:ce:02:ec:cf:47:8d:13:07:9c:13:
8b:8e:d9:82:f9:dc:59:85:55:56:74:fc:64:6d:49:15:39:41:
b8:6f:68:e9:c3:b5:21:c9:0b:50:26:cb:a2:6a:e8:7d:31:27:
50:1b:40:21:b5:5e:28:48:ce:4c:d8:85:6c:fe:d2:43:9f:e6:
a1:c2:31:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:57:23 2025 by rpki-client