Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x2foJBJaMAY92HCx3gEXwjqwjS8.roa
File: x2foJBJaMAY92HCx3gEXwjqwjS8.roa (raw, json)
Hash identifier: RGTxEZd/E2H0xgAUrLlP0/g78gCzVEkcIilEyQomWBE=
Subject key identifier: C7:67:E8:24:12:5A:30:06:3D:D8:70:B1:DE:01:17:C2:3A:B0:8D:2F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095201EFE5E5A59984EA411A572B1BE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x2foJBJaMAY92HCx3gEXwjqwjS8.roa
Signing time: Mon 02 Jan 2023 03:44:59 +0000
ROA not before: Mon 02 Jan 2023 03:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42350
IP address blocks: 93.170.89.0/24 maxlen: 24
146.120.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Oct 2023 09:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:20:1e:fe:5e:5a:59:98:4e:a4:11:a5:72:b1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c767e824125a30063dd870b1de0117c23ab08d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:f5:65:4c:bc:a3:65:6a:2b:e9:c6:96:02:
84:fc:47:00:7c:7b:ce:58:25:27:f0:20:80:50:c5:
1f:0e:aa:cd:d8:11:dd:1f:44:11:57:da:d3:ab:78:
e0:97:e1:92:3a:53:4f:ec:eb:68:4b:2c:bb:1f:89:
c5:a5:49:4e:e9:8e:0d:27:5f:5c:56:67:df:fc:f6:
3c:3e:5c:08:66:03:3c:15:e8:a8:d0:6e:e5:32:75:
0f:3a:bf:d3:52:21:5e:9e:7e:1f:d8:49:0a:e9:06:
54:af:01:2f:db:60:ed:d8:b8:91:46:c3:da:5d:27:
02:08:e4:01:82:ee:10:19:40:ec:26:dd:bd:42:24:
e9:d5:0d:e7:33:24:ab:1a:8e:63:0b:b3:f6:0b:58:
6b:10:aa:a6:65:d0:c3:52:8c:bd:8c:1a:48:97:67:
99:48:07:c2:61:6a:c5:2f:9c:e2:d1:9d:40:04:68:
1c:25:6b:bb:db:6a:43:90:2d:bd:a8:3b:14:48:6f:
6c:80:68:9a:01:c3:ae:4a:16:e6:b8:cb:a5:15:f2:
83:f8:54:bd:19:8b:05:61:ec:8f:5e:a6:af:29:cb:
3f:86:37:f3:2a:5e:22:ba:3e:4b:ae:f9:6f:67:bf:
00:9d:1c:e1:f3:1c:06:26:71:d4:54:1c:73:1c:39:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:67:E8:24:12:5A:30:06:3D:D8:70:B1:DE:01:17:C2:3A:B0:8D:2F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x2foJBJaMAY92HCx3gEXwjqwjS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.89.0/24
146.120.220.0/24
Signature Algorithm: sha256WithRSAEncryption
08:92:93:03:d5:71:23:f2:d0:50:9f:45:a8:31:56:3a:eb:83:
9f:e7:4f:7c:ea:33:c6:5e:06:85:20:58:5c:07:78:e4:14:0b:
11:c8:bf:b6:64:db:be:66:21:f4:7d:04:b0:a2:8b:77:03:09:
e3:77:ce:e7:ae:23:fa:67:4b:79:50:2e:49:3c:8d:9a:40:b2:
52:14:4b:3e:48:7c:7d:68:f9:10:56:9e:60:0b:e5:99:97:61:
e3:40:de:92:cb:4f:6c:39:4c:97:60:ed:2a:e7:20:00:e8:00:
3f:fa:84:1a:eb:7c:87:89:21:d8:fc:25:53:ae:a0:bc:54:0d:
7b:7a:41:77:5e:10:a2:45:9b:a6:16:e2:8e:aa:8c:22:a2:1e:
f0:dc:66:02:d2:a6:ed:86:54:91:e5:7f:60:56:46:a4:04:6d:
c1:f2:91:87:8d:33:ab:13:fe:5d:a8:ce:4b:c4:47:50:d2:9e:
b8:8c:93:9d:97:2f:8e:20:d7:a9:d1:75:5f:b8:d9:29:f5:11:
4e:79:b0:48:40:e5:36:4a:28:36:ae:e1:97:71:e6:63:f3:48:
dc:be:c4:a6:7b:2a:25:00:4a:35:a1:ec:88:48:f2:6e:83:da:
4c:60:e7:31:6d:09:d5:8b:b7:ef:66:ce:a6:93:b6:fe:fe:91:
5e:8f:ec:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwlSAe/l5aWZhOpBGlcrG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzY3ZTgyNDEyNWEzMDA2M2RkODcwYjFkZTAxMTdjMjNhYjA4ZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQD1ZUy8o2VqK+nGlgKE/EcAfHvO
WCUn8CCAUMUfDqrN2BHdH0QRV9rTq3jgl+GSOlNP7OtoSyy7H4nFpUlO6Y4NJ19c
Vmff/PY8PlwIZgM8Feio0G7lMnUPOr/TUiFenn4f2EkK6QZUrwEv22Dt2LiRRsPa
XScCCOQBgu4QGUDsJt29QiTp1Q3nMySrGo5jC7P2C1hrEKqmZdDDUoy9jBpIl2eZ
SAfCYWrFL5zi0Z1ABGgcJWu722pDkC29qDsUSG9sgGiaAcOuShbmuMulFfKD+FS9
GYsFYeyPXqavKcs/hjfzKl4iuj5LrvlvZ78AnRzh8xwGJnHUVBxzHDkijQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMdn6CQSWjAGPdhwsd4BF8I6sI0vMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEveDJmb0pCSmFNQVk5MkhDeDNnRVh3anF3alM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXapZAwQA
knjcMA0GCSqGSIb3DQEBCwUAA4IBAQAIkpMD1XEj8tBQn0WoMVY664Of50986jPG
XgaFIFhcB3jkFAsRyL+2ZNu+ZiH0fQSwoot3Awnjd87nriP6Z0t5UC5JPI2aQLJS
FEs+SHx9aPkQVp5gC+WZl2HjQN6Sy09sOUyXYO0q5yAA6AA/+oQa63yHiSHY/CVT
rqC8VA17ekF3XhCiRZumFuKOqowioh7w3GYC0qbthlSR5X9gVkakBG3B8pGHjTOr
E/5dqM5LxEdQ0p64jJOdly+OINep0XVfuNkp9RFOebBIQOU2Sig2ruGXceZj80jc
vsSmeyolAEo1oeyISPJug9pMYOcxbQnVi7fvZs6mk7b+/pFej+w6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:52 2024 by rpki-client on console-ams.rpki-client.org