Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x9rJ-Fpbx70mUvcFi__qdB5P6d8.roa
File: x9rJ-Fpbx70mUvcFi__qdB5P6d8.roa (raw, json)
Hash identifier: mwRpHKfXzv5r3MQwLx72iKDIQhOI9ft5rZJ1iEXUcq8=
Subject key identifier: C7:DA:C9:F8:5A:5B:C7:BD:26:52:F7:05:8B:FF:EA:74:1E:4F:E9:DF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E30CDCCE4C218CF96DDCA699DCA2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x9rJ-Fpbx70mUvcFi__qdB5P6d8.roa
Signing time: Tue 02 Jan 2024 12:33:11 +0000
ROA not before: Tue 02 Jan 2024 12:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16227
IP address blocks: 93.171.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e3:0c:dc:ce:4c:21:8c:f9:6d:dc:a6:99:dc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7dac9f85a5bc7bd2652f7058bffea741e4fe9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:78:3e:1b:fa:93:3a:5d:bb:8a:15:1f:7a:20:
65:de:e9:6f:f8:3f:2f:14:85:35:d8:b8:01:5f:f3:
ce:7d:04:58:35:0b:86:85:e7:64:13:df:06:41:73:
e7:01:d9:3c:8d:ea:f0:b1:73:27:a0:80:3c:90:aa:
89:54:a0:8e:64:a4:76:fc:2f:78:42:7f:79:aa:a4:
00:0a:74:2e:09:74:17:4e:13:62:1a:0b:4b:5f:50:
bb:67:da:6a:b9:3b:eb:98:95:19:97:b8:62:00:59:
7d:c6:81:80:51:eb:99:a6:04:f8:cb:bb:fd:44:82:
20:a0:53:17:e5:be:84:eb:ad:86:e8:84:6b:0e:30:
8c:b7:da:7d:df:72:5f:71:0d:6d:4e:c6:4d:f0:30:
89:b0:31:b5:9e:df:f2:e0:27:09:3a:04:e7:64:e2:
72:2c:05:97:95:63:05:be:93:54:c6:1d:30:8d:f0:
17:85:1e:b6:e5:fe:99:93:24:9c:5f:ee:c7:71:98:
2b:d0:98:8e:35:43:53:a2:03:6e:2a:eb:9a:47:88:
df:3a:0b:bc:7b:e9:4f:59:6c:45:b5:78:9c:dc:5b:
77:c6:32:37:57:c9:42:88:66:b3:df:b1:aa:78:a7:
c4:37:0e:89:f8:cf:4b:20:6a:04:14:21:de:e3:25:
a3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:C9:F8:5A:5B:C7:BD:26:52:F7:05:8B:FF:EA:74:1E:4F:E9:DF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x9rJ-Fpbx70mUvcFi__qdB5P6d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.244.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f4:47:a2:f4:2e:0a:54:79:bc:db:37:65:29:aa:d0:60:3c:
08:cd:fb:75:28:a4:66:7b:6d:00:50:97:1e:66:98:b0:98:1c:
ba:66:41:02:8e:8f:1c:89:27:72:f9:54:29:ee:57:a2:f6:0b:
0d:d2:c5:1e:df:77:c5:17:5b:90:ff:36:72:c6:26:6e:06:39:
4d:23:8b:a8:8a:91:68:c6:9f:eb:96:84:f6:36:92:fe:55:64:
56:e2:b8:36:e1:c8:2f:55:5c:1b:58:b0:ba:fc:b5:8c:4d:96:
77:dd:f4:42:59:d0:09:05:c1:27:49:cd:32:02:be:b5:e8:6b:
e1:17:3f:03:3f:09:6e:96:14:35:ca:f6:cf:96:cd:0f:7e:e5:
29:09:c1:b6:fc:2f:0d:34:3b:48:c6:5a:43:5c:90:97:64:78:
7d:5a:f6:e2:6b:fd:e7:4e:f3:de:a0:ec:d6:31:91:6d:97:57:
71:d1:39:44:80:15:fc:e0:e6:31:81:cd:35:2c:e3:62:63:13:
db:e2:41:2f:79:6c:ba:90:e4:c1:1c:23:8c:cc:e4:7a:e1:cf:
6c:d9:4d:f1:1c:26:73:a6:f6:4c:f8:f8:e7:10:97:81:b8:74:
e7:63:ea:e0:b4:d8:f7:88:da:4d:4d:fd:3e:03:8f:1a:bd:f8:
50:6a:03:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:53:00 2025 by rpki-client