Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x7KiE4A89n7nfwumIk8yHUjfq2E.roa
File: x7KiE4A89n7nfwumIk8yHUjfq2E.roa (raw, json)
Hash identifier: m4ugWGII1znbh77fowIQjOfz2OzJ4SYd86crio7CHBU=
Subject key identifier: C7:B2:A2:13:80:3C:F6:7E:E7:7F:0B:A6:22:4F:32:1D:48:DF:AB:61
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095B099F583497CCF07F4F486D5C6C7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x7KiE4A89n7nfwumIk8yHUjfq2E.roa
Signing time: Mon 02 Jan 2023 03:45:36 +0000
ROA not before: Mon 02 Jan 2023 03:45:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209863
IP address blocks: 95.47.162.0/24 maxlen: 24
93.170.78.0/24 maxlen: 24
2a02:128:4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:b0:99:f5:83:49:7c:cf:07:f4:f4:86:d5:c6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7b2a213803cf67ee77f0ba6224f321d48dfab61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:04:ac:61:2d:34:c2:16:3f:b7:0e:a5:b0:
dd:dd:1f:d2:d0:cb:90:7e:30:52:f9:18:67:67:34:
86:d4:b9:0a:eb:1a:fb:4b:ad:4a:5b:ae:ed:cb:d2:
5a:3e:3b:42:31:3d:ee:b8:ac:67:15:5a:6e:3b:f4:
8d:3a:8b:21:d2:a8:ad:d9:1e:87:76:9e:a3:85:d9:
1a:dd:72:46:67:ce:db:1f:32:72:06:70:a4:87:f8:
8b:c7:f0:4f:40:e1:27:88:35:0b:95:78:53:86:fb:
66:f1:11:30:32:d2:73:8f:3c:22:a8:2c:c7:30:f4:
1e:4e:d1:d2:9a:da:ac:40:1b:30:ec:90:23:6f:4e:
74:7f:cb:fc:04:ff:9c:4e:20:8f:94:aa:ce:14:d5:
41:b5:4f:ac:2e:88:1a:9b:35:70:86:51:85:77:47:
9a:e5:c8:8c:66:2b:ec:26:6a:05:ea:e5:51:26:e7:
b1:4a:6d:2d:38:31:96:69:59:5c:07:1d:94:7c:f5:
64:2d:a6:03:bd:88:dc:46:52:36:b1:33:fb:1f:ab:
c9:31:40:31:0d:f0:fb:88:73:3b:94:7e:42:e5:da:
79:48:fc:0b:71:79:c7:2f:b6:34:c4:17:48:d8:23:
bb:3a:d5:db:a8:23:f1:6f:79:43:f4:b8:b1:2a:4b:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B2:A2:13:80:3C:F6:7E:E7:7F:0B:A6:22:4F:32:1D:48:DF:AB:61
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x7KiE4A89n7nfwumIk8yHUjfq2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.78.0/24
95.47.162.0/24
IPv6:
2a02:128:4::/48
Signature Algorithm: sha256WithRSAEncryption
8e:1c:39:cd:91:cc:ab:5c:87:e4:cb:cb:1e:2c:37:e9:cb:88:
c3:90:7b:b0:38:5e:21:21:0e:58:d0:29:61:03:35:22:37:2d:
3c:13:57:17:2e:4b:2d:81:46:8d:37:46:2a:b9:30:d2:41:51:
98:92:0c:67:c5:c9:f5:94:38:95:f7:32:60:c8:ad:e0:b2:bc:
c1:da:ef:7f:7d:b6:5c:f6:97:eb:2b:d4:82:ed:47:c2:c5:06:
20:ec:5f:0e:0c:68:ca:62:85:f4:6d:d3:05:e3:a0:a2:03:75:
7b:2e:b8:96:9e:f5:7e:34:e4:e9:01:94:b8:60:1c:ca:28:3c:
47:15:cb:cf:2b:c6:47:78:bf:8c:0c:2f:aa:e5:87:f6:e1:04:
b3:fa:3f:0b:99:10:7c:e0:0f:67:2e:d7:1f:d9:29:72:76:4a:
8a:92:9d:6c:3a:98:23:f0:09:8e:44:f6:72:f8:9f:5c:2e:5f:
65:8a:59:61:3f:b4:01:b2:ec:81:65:11:57:cf:88:58:69:6f:
75:b0:11:9f:f1:d1:3a:7e:e0:c7:ed:53:11:a0:14:b7:1e:df:
36:a8:2b:6b:89:63:53:36:bc:0a:08:95:fb:be:4c:f7:3b:40:
af:93:7c:21:02:da:f9:28:6a:c3:41:d9:84:dc:dc:f0:08:ba:
e2:71:4e:84
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVwlbCZ9YNJfM8H9PSG1cbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2IyYTIxMzgwM2NmNjdlZTc3ZjBiYTYyMjRmMzIxZDQ4ZGZhYjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPUErGEtNMIWP7cOpbDd3R/S0MuQ
fjBS+RhnZzSG1LkK6xr7S61KW67ty9JaPjtCMT3uuKxnFVpuO/SNOosh0qit2R6H
dp6jhdka3XJGZ87bHzJyBnCkh/iLx/BPQOEniDULlXhThvtm8REwMtJzjzwiqCzH
MPQeTtHSmtqsQBsw7JAjb050f8v8BP+cTiCPlKrOFNVBtU+sLogamzVwhlGFd0ea
5ciMZivsJmoF6uVRJuexSm0tODGWaVlcBx2UfPVkLaYDvYjcRlI2sTP7H6vJMUAx
DfD7iHM7lH5C5dp5SPwLcXnHL7Y0xBdI2CO7OtXbqCPxb3lD9LixKks4/QIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFMeyohOAPPZ+538LpiJPMh1I36thMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEveDdLaUU0QTg5bjduZnd1bUlrOHlIVWpmcTJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAXapOAwQA
Xy+iMA8EAgACMAkDBwAqAgEoAAQwDQYJKoZIhvcNAQELBQADggEBAI4cOc2RzKtc
h+TLyx4sN+nLiMOQe7A4XiEhDljQKWEDNSI3LTwTVxcuSy2BRo03Riq5MNJBUZiS
DGfFyfWUOJX3MmDIreCyvMHa7399tlz2l+sr1ILtR8LFBiDsXw4MaMpihfRt0wXj
oKIDdXsuuJae9X405OkBlLhgHMooPEcVy88rxkd4v4wML6rlh/bhBLP6PwuZEHzg
D2cu1x/ZKXJ2SoqSnWw6mCPwCY5E9nL4n1wuX2WKWWE/tAGy7IFlEVfPiFhpb3Ww
EZ/x0Tp+4MftUxGgFLce3zaoK2uJY1M2vAoIlfu+TPc7QK+TfCEC2vkoasNB2YTc
3PAIuuJxToQ=
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:01 2024 by rpki-client on console-ams.rpki-client.org