Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/s2IV5U6L0H3Fe6M-XDfe4X-fe_g.roa
File: s2IV5U6L0H3Fe6M-XDfe4X-fe_g.roa (raw, json)
Hash identifier: xOiSlAQtxCSwDXy43Mrq3tgGq9NyKIermR8GRbgKLCU=
Subject key identifier: B3:62:15:E5:4E:8B:D0:7D:C5:7B:A3:3E:5C:37:DE:E1:7F:9F:7B:F8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29EFC17B1FF9535E6CF171343FD34C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/s2IV5U6L0H3Fe6M-XDfe4X-fe_g.roa
Signing time: Tue 02 Jan 2024 12:33:15 +0000
ROA not before: Tue 02 Jan 2024 12:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42704
IP address blocks: 93.171.177.0/24 maxlen: 24
93.171.205.0/24 maxlen: 24
93.170.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 15:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ef:c1:7b:1f:f9:53:5e:6c:f1:71:34:3f:d3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b36215e54e8bd07dc57ba33e5c37dee17f9f7bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a2:2c:6e:d5:d9:d6:21:c1:c7:ff:d8:2d:27:
9e:d5:6e:ea:36:ff:b8:8a:d2:62:7d:17:6f:6e:d1:
9b:18:5a:8c:ef:27:6d:c7:d6:9e:7b:2e:89:ff:8f:
c5:f8:19:c5:b7:77:a0:66:6c:6d:e5:e4:a4:21:bd:
d1:1e:2b:8d:50:c0:46:f5:21:56:3d:0e:0a:6c:66:
b1:22:d2:0d:21:dd:54:c9:d4:87:d7:0d:7e:24:bb:
39:81:61:d1:fa:16:0c:04:0b:b8:18:5a:54:75:b1:
17:df:ba:5a:9a:68:f2:cf:27:37:3f:d6:d6:8b:03:
6d:11:34:ac:70:f4:76:00:ce:23:88:f1:a1:8f:16:
80:7e:9b:8f:f4:85:8a:0c:2d:2d:9e:d7:eb:0d:fa:
15:7a:4f:ea:7c:fa:43:3b:d8:11:0e:8d:99:87:90:
1a:16:77:4b:68:94:11:9c:29:d0:b7:5f:a6:0b:99:
22:b5:43:1c:3f:34:d1:e0:c2:77:cf:20:03:ed:59:
42:e5:94:68:cd:f7:f8:3c:e1:9c:88:84:0f:c6:75:
5a:c1:ae:d4:bc:81:4a:c1:73:eb:98:a9:fe:a6:ca:
12:33:b5:52:ff:d2:c0:db:d4:29:38:6e:e3:b6:51:
21:8e:06:40:ef:2f:fd:9c:42:ed:61:27:1f:71:a6:
1b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:62:15:E5:4E:8B:D0:7D:C5:7B:A3:3E:5C:37:DE:E1:7F:9F:7B:F8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/s2IV5U6L0H3Fe6M-XDfe4X-fe_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.174.0/24
93.171.177.0/24
93.171.205.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e7:01:00:c7:e6:0a:4f:b7:45:57:c5:b8:09:c3:34:ea:a3:
8a:ae:87:8f:1c:61:98:f0:42:f6:ef:df:60:3e:fd:b9:84:1f:
0e:ef:e1:92:11:da:b5:f9:ed:99:26:f6:e7:12:b1:5c:d2:07:
03:9e:55:25:4e:a7:db:96:1c:b8:b2:ac:25:62:ae:0c:3f:de:
9f:ab:cd:39:70:ee:58:9c:c0:02:37:c6:26:47:37:e7:08:4a:
16:14:e7:3f:8b:90:16:b7:77:45:06:35:8a:e0:ca:40:29:b0:
f8:40:ec:3c:6a:cc:1e:17:bf:3c:90:fd:37:2b:ca:f8:58:54:
a1:56:0a:65:75:d1:7d:33:a7:ad:9b:e5:12:f9:85:0b:12:15:
0f:15:18:87:78:ed:31:d0:ba:19:52:ea:9c:c9:1a:ec:f1:7a:
6a:f7:7e:4a:17:bf:2b:e4:36:d6:36:c8:93:80:1d:0d:44:17:
55:d4:ef:b0:d0:57:38:b6:6f:70:7b:82:ff:d1:48:4b:6f:6f:
d4:3a:4e:a2:b8:3e:0c:4f:66:df:99:04:0d:be:20:70:38:e5:
5e:4b:a0:f0:e9:f6:ec:51:ed:55:19:6c:b1:d4:23:f1:f9:b7:
78:bf:e0:4e:10:86:51:b4:89:c1:0b:2d:47:b6:d8:76:54:db:
10:84:b6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:45 2025 by rpki-client