Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rK_l62Sy7O4S1xd7Q1xmIrghCL4.roa
File: rK_l62Sy7O4S1xd7Q1xmIrghCL4.roa (raw, json)
Hash identifier: 5uKfGiMNGoIo5bN57Kuz/X9VUjVoBhEW1GwC7SHBPFQ=
Subject key identifier: AC:AF:E5:EB:64:B2:EC:EE:12:D7:17:7B:43:5C:66:22:B8:21:08:BE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A19C55CBA2C57BCF0C34B8B9D827A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rK_l62Sy7O4S1xd7Q1xmIrghCL4.roa
Signing time: Tue 02 Jan 2024 12:33:25 +0000
ROA not before: Tue 02 Jan 2024 12:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58047
IP address blocks: 93.171.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 13:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:19:c5:5c:ba:2c:57:bc:f0:c3:4b:8b:9d:82:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acafe5eb64b2ecee12d7177b435c6622b82108be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:44:e1:bb:43:51:2e:ea:ff:f6:a6:a2:b2:
84:6d:15:af:73:56:a4:52:fa:3c:04:7d:b1:98:e1:
ea:e6:c4:46:06:41:d6:e7:89:d4:ef:75:09:0f:2a:
a4:45:53:ce:3e:e2:20:82:b5:07:17:93:f5:2d:e6:
3b:59:61:35:6e:ac:8d:80:d9:7e:c9:19:14:4f:ea:
c5:d6:1a:2e:23:b9:c1:3f:0e:22:93:5c:60:e6:1b:
34:ba:55:f6:19:e6:0a:b4:43:15:f1:f3:c8:ee:9a:
d2:e5:5a:53:d7:b6:36:96:e1:36:f1:8c:ec:7c:14:
f7:7c:39:93:50:e8:bf:b5:53:16:f3:8c:cd:91:dc:
a1:fd:a3:e0:55:ae:4e:0f:7c:2a:ed:a0:53:01:24:
4c:c2:82:90:78:05:fb:97:f9:f8:21:dc:65:ef:7b:
ad:4f:f4:46:67:31:d6:d9:15:2e:2b:06:c8:08:31:
f9:f9:4d:f4:9a:da:16:dd:a3:c0:af:34:4f:a4:ae:
db:1f:f7:f8:8c:09:d8:fd:a5:31:45:19:cf:85:c9:
66:66:0f:6a:70:87:49:fe:d1:ae:f3:15:13:a0:7d:
e1:73:13:9e:76:cc:3a:97:9b:f2:27:9e:2c:45:f4:
50:47:44:eb:2a:a2:90:1a:78:e4:8f:10:83:b7:fe:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AF:E5:EB:64:B2:EC:EE:12:D7:17:7B:43:5C:66:22:B8:21:08:BE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rK_l62Sy7O4S1xd7Q1xmIrghCL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5b:e6:37:4e:c7:75:05:8f:1d:66:3a:68:05:fb:36:1e:5e:
8b:e5:18:d6:f2:a7:a5:71:64:69:5d:0e:de:2f:60:cc:73:21:
77:69:e5:58:d2:f0:61:e8:dd:bd:c0:36:af:a5:a1:d8:1f:2b:
d0:e0:a6:28:6f:5e:92:f1:17:f2:7c:03:81:ef:a0:57:c4:88:
93:d8:39:e3:d8:64:ab:ac:3a:90:0c:05:26:cd:22:07:6f:5c:
ec:4d:b0:b0:ba:ff:5d:aa:ad:0f:34:98:ba:9d:33:87:63:b5:
46:99:3c:aa:e0:82:d7:bf:77:15:3d:15:05:82:0f:7e:22:a4:
b2:f4:ea:5f:3d:42:27:3d:94:34:4e:8f:62:1a:89:cf:3e:a0:
09:07:e1:ac:2e:e8:42:10:2b:21:76:19:fa:d9:5f:18:8e:f5:
8f:59:5c:9d:bf:3a:a0:4e:70:f0:5b:62:8c:07:83:d8:55:5f:
80:44:45:4b:38:bb:29:c3:5d:c7:99:94:b2:de:ea:80:5d:c4:
16:e3:02:b7:6a:fd:95:e0:f3:bb:96:bc:ac:c2:27:26:3c:f5:
ab:c1:1c:10:6d:3c:ee:f8:98:9f:16:ec:35:ff:3b:80:58:75:
97:60:80:78:64:eb:ec:71:fc:0b:44:4d:ad:fb:9e:97:4f:eb:
bf:09:38:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:07 2025 by rpki-client