Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uegqG5QMLqYdOOCOHmBOrH6uvqA.roa
File: uegqG5QMLqYdOOCOHmBOrH6uvqA.roa (raw, json)
Hash identifier: sdsxizYYQ+UbaAfM2clyB7E9TjsWPno9E3AcGl3jGAQ=
Subject key identifier: B9:E8:2A:1B:94:0C:2E:A6:1D:38:E0:8E:1E:60:4E:AC:7E:AE:BE:A0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01894438AB74A9BC2C76B76EA9407B1243C9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uegqG5QMLqYdOOCOHmBOrH6uvqA.roa
Signing time: Tue 11 Jul 2023 09:11:51 +0000
ROA not before: Tue 11 Jul 2023 09:11:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56418
IP address blocks: 93.171.198.0/23 maxlen: 24
93.171.196.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:38:ab:74:a9:bc:2c:76:b7:6e:a9:40:7b:12:43:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jul 11 09:11:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9e82a1b940c2ea61d38e08e1e604eac7eaebea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3f:39:69:3a:42:5a:70:5a:57:71:d3:51:fa:
42:fe:a0:30:4e:20:9d:15:f2:d9:89:ce:b3:2d:ac:
5a:dc:c4:44:9a:64:df:42:9a:7d:f4:eb:1f:71:84:
83:da:67:79:38:71:41:6d:93:b3:2e:07:9e:58:bf:
ff:d5:29:5a:c0:d7:00:d6:dc:99:4c:dc:95:dc:c2:
31:d2:b6:41:df:e3:82:8b:45:96:50:29:0c:81:99:
c8:32:30:c3:e6:5a:be:b7:db:94:a6:83:1e:fb:1b:
03:76:e4:17:9c:ed:2f:da:9f:8b:0b:8a:c6:78:8f:
32:28:04:1f:38:33:3b:ae:5e:c6:70:24:e3:0f:4f:
00:f2:a5:2e:bb:a5:31:83:ec:f8:1b:41:1d:8d:5b:
d0:f5:86:31:bc:ef:04:a8:ff:e1:2b:ce:51:e6:c6:
6e:aa:cb:90:d7:36:d2:bd:a1:9a:73:df:e8:46:94:
88:b3:79:3f:a5:32:94:18:66:92:04:22:5e:95:2c:
5c:e3:48:05:95:36:6b:5a:ce:6c:fe:16:e2:e0:d6:
66:b9:14:e6:23:3b:67:7b:3d:87:7d:fb:d5:50:21:
1d:8b:fe:96:c8:be:24:39:4b:2f:22:45:be:30:32:
34:2b:2b:f4:5f:8b:46:cc:da:8f:1b:6a:a7:9d:02:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E8:2A:1B:94:0C:2E:A6:1D:38:E0:8E:1E:60:4E:AC:7E:AE:BE:A0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uegqG5QMLqYdOOCOHmBOrH6uvqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.196.0/22
Signature Algorithm: sha256WithRSAEncryption
52:45:08:02:6e:18:62:e1:ec:ac:10:ff:35:70:5a:5f:a1:b0:
31:7a:b3:43:86:fb:40:a8:0c:61:f6:85:29:67:76:79:07:59:
2b:01:c5:98:5b:7f:86:1c:85:30:a7:0f:68:1d:6a:2b:7d:82:
33:38:13:a9:c4:09:ab:f5:d6:5d:a9:28:87:62:74:37:3b:3b:
70:4c:5f:b2:5c:64:3b:45:7e:99:9b:10:1d:4e:9a:c2:11:dc:
d9:5f:a7:62:f6:92:c9:b1:4d:2a:4d:b6:8d:80:21:42:3e:c6:
f2:60:13:03:f0:32:a2:92:5b:ac:c8:f4:93:aa:b6:17:75:bb:
ed:05:47:0f:94:9f:3a:6b:c9:b3:77:33:6f:67:6a:b0:86:f2:
1b:36:f7:52:0a:43:af:aa:4f:f6:41:b2:53:de:61:33:9c:bf:
85:31:58:68:3e:e8:05:90:4c:2a:2d:ef:c2:99:1d:36:94:1c:
3d:20:b3:54:24:4e:7f:78:be:40:35:e6:c7:99:96:ce:db:69:
ac:71:10:38:3e:b1:67:b5:81:44:e5:8b:29:5d:2b:af:77:35:
88:e1:f2:5a:08:6b:f9:b4:5a:74:8e:3a:4c:7c:d2:8a:9b:3f:
66:4b:0a:7a:28:7c:94:7f:e2:65:70:ca:0f:7d:48:f5:66:8a:
48:31:86:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 15:27:21 2023 by rpki-client on console-ams.rpki-client.org