Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/vXbK6SbHDUPEKnatK6OLOIMS1ls.roa
File: vXbK6SbHDUPEKnatK6OLOIMS1ls.roa (raw, json)
Hash identifier: wP0/EA2G/02Dy1EO34Cp3Uq99IqPaL8dxf77Deth2x4=
Subject key identifier: BD:76:CA:E9:26:C7:0D:43:C4:2A:76:AD:2B:A3:8B:38:83:12:D6:5B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570957481EDCAB2CA502D235EF24F064D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/vXbK6SbHDUPEKnatK6OLOIMS1ls.roa
Signing time: Mon 02 Jan 2023 03:45:20 +0000
ROA not before: Mon 02 Jan 2023 03:45:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61276
IP address blocks: 93.171.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:74:81:ed:ca:b2:ca:50:2d:23:5e:f2:4f:06:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd76cae926c70d43c42a76ad2ba38b388312d65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:6c:6c:29:74:3f:76:79:64:25:fa:8c:36:
b3:4f:d4:59:fe:43:10:77:2d:7d:49:a2:36:2e:e5:
de:7e:2b:fc:a0:50:c9:53:fb:21:66:aa:75:5d:25:
69:68:67:0d:5f:06:5e:07:27:32:e0:53:d4:51:8c:
bb:46:46:70:f6:ee:a7:f4:9e:a1:f8:91:a7:37:75:
55:b6:cb:a1:fa:c1:91:dc:5c:e0:ff:ba:d3:cb:a2:
b4:02:09:be:3e:25:3a:f8:45:ce:68:68:93:86:fe:
23:7c:f7:bf:eb:77:5e:68:00:74:32:61:f8:0b:87:
7c:70:09:3b:e4:36:74:8a:32:f7:5b:3e:c9:38:1d:
f6:62:eb:33:47:06:31:15:73:d0:4d:81:3d:03:18:
2e:f0:c8:4e:c2:fd:d1:72:1e:74:64:22:98:79:15:
11:f1:52:84:b5:78:cf:b4:ce:eb:bf:41:26:48:01:
e6:64:6a:11:da:cf:66:f3:0d:08:2f:ad:87:ce:73:
52:69:19:d3:02:fa:8c:a9:dc:47:c7:d4:68:d3:8b:
e3:56:28:22:bc:85:d6:a5:dd:75:92:ba:09:89:08:
9d:a8:1e:32:5f:51:c1:53:a2:59:20:f5:ca:83:17:
3b:56:bc:36:42:93:4e:60:f7:ce:80:a4:ef:c2:e8:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:76:CA:E9:26:C7:0D:43:C4:2A:76:AD:2B:A3:8B:38:83:12:D6:5B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/vXbK6SbHDUPEKnatK6OLOIMS1ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.206.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:0f:4b:cc:5d:0b:47:aa:b3:ba:6b:4d:c5:4d:b1:01:48:3e:
6c:a0:a4:8c:eb:db:f9:f8:3e:7f:0f:ff:21:a2:f9:bd:1b:2c:
97:27:52:7f:74:d6:73:9a:e0:a7:48:9d:27:7c:a3:c5:73:4d:
b8:ad:c8:0d:45:84:18:66:c5:87:89:61:f8:f7:07:62:76:b1:
11:1a:c3:da:a4:c4:81:f4:d3:9b:c4:54:99:ea:35:8b:7f:a4:
58:18:f6:a4:b0:3f:ab:3e:4f:36:53:94:0c:47:b6:7d:b3:e0:
96:d0:00:de:ab:88:6c:94:49:30:f1:22:e2:ec:bb:b6:13:c8:
9e:87:da:53:5a:f2:88:47:d3:49:d9:be:33:c2:13:ba:0c:79:
da:0a:24:b1:17:e4:57:4d:97:34:2e:f3:47:f7:d9:c9:ab:69:
f4:79:34:44:9e:f7:68:54:f4:49:d7:95:b9:ef:cc:f7:79:54:
24:29:c4:50:7b:7e:fe:7f:d0:95:ee:d5:9f:93:a6:57:0b:2d:
ec:22:d6:f5:fd:4e:e7:f5:e2:58:84:28:ee:74:1a:81:63:fa:
5d:90:56:50:b0:dd:ea:ae:fa:1c:f5:b8:e9:a0:bb:13:b7:0c:
9d:f3:b2:44:81:db:8b:4b:87:37:5c:28:6a:b2:a1:f2:3e:4f:
03:73:92:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlXSB7cqyylAtI17yTwZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDc2Y2FlOTI2YzcwZDQzYzQyYTc2YWQyYmEzOGIzODgzMTJkNjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprtsbCl0P3Z5ZCX6jDazT9RZ/kMQ
dy19SaI2LuXefiv8oFDJU/shZqp1XSVpaGcNXwZeBycy4FPUUYy7RkZw9u6n9J6h
+JGnN3VVtsuh+sGR3Fzg/7rTy6K0Agm+PiU6+EXOaGiThv4jfPe/63deaAB0MmH4
C4d8cAk75DZ0ijL3Wz7JOB32YuszRwYxFXPQTYE9Axgu8MhOwv3Rch50ZCKYeRUR
8VKEtXjPtM7rv0EmSAHmZGoR2s9m8w0IL62HznNSaRnTAvqMqdxHx9Ro04vjVigi
vIXWpd11kroJiQidqB4yX1HBU6JZIPXKgxc7Vrw2QpNOYPfOgKTvwugC4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL12yukmxw1DxCp2rSujiziDEtZbMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvdlhiSzZTYkhEVVBFS25hdEs2T0xPSU1TMWxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXavOMA0G
CSqGSIb3DQEBCwUAA4IBAQB/D0vMXQtHqrO6a03FTbEBSD5soKSM69v5+D5/D/8h
ovm9GyyXJ1J/dNZzmuCnSJ0nfKPFc024rcgNRYQYZsWHiWH49wdidrERGsPapMSB
9NObxFSZ6jWLf6RYGPaksD+rPk82U5QMR7Z9s+CW0ADeq4hslEkw8SLi7Lu2E8ie
h9pTWvKIR9NJ2b4zwhO6DHnaCiSxF+RXTZc0LvNH99nJq2n0eTREnvdoVPRJ15W5
78z3eVQkKcRQe37+f9CV7tWfk6ZXCy3sItb1/U7n9eJYhCjudBqBY/pdkFZQsN3q
rvoc9bjpoLsTtwyd87JEgduLS4c3XChqsqHyPk8Dc5Ii
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:52 2024 by rpki-client on console-ams.rpki-client.org