Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xiOzGqyIpOEBo4QoH6f6W0Xf0y0.roa
File: xiOzGqyIpOEBo4QoH6f6W0Xf0y0.roa (raw, json)
Hash identifier: gLDr8u8RmAHkgFXZ8rpTRaZEQ6XhUTgBc3ITwz5Lmo4=
Subject key identifier: C6:23:B3:1A:AC:88:A4:E1:01:A3:84:28:1F:A7:FA:5B:45:DF:D3:2D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0191463C7851248B605B7D1FFA967C7C76F1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xiOzGqyIpOEBo4QoH6f6W0Xf0y0.roa
Signing time: Mon 12 Aug 2024 10:57:33 +0000
ROA not before: Mon 12 Aug 2024 10:57:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208538
IP address blocks: 93.171.245.0/24 maxlen: 24
146.120.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:3c:78:51:24:8b:60:5b:7d:1f:fa:96:7c:7c:76:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 12 10:57:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c623b31aac88a4e101a384281fa7fa5b45dfd32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:fb:ca:76:46:ee:ef:6b:24:b3:25:ce:0a:
a6:4d:d9:7c:54:fa:b5:45:f4:d5:87:a3:b7:3b:b5:
6f:05:cd:1e:7a:4a:e0:79:7a:cf:a6:81:6b:df:93:
15:a6:d8:96:e6:19:24:f5:78:4b:4e:17:ac:bb:23:
d1:7e:a0:04:a6:e1:4b:70:09:0a:d4:bd:9c:12:4e:
bb:1a:38:43:52:25:fe:96:f1:b8:88:85:20:76:6e:
44:30:98:95:40:95:06:0d:1b:c7:b9:4a:7c:2e:92:
5d:56:d4:24:93:2d:72:6c:fd:f4:48:c6:1b:da:e0:
83:d1:a6:61:e5:c6:53:a8:44:99:fa:a9:49:42:07:
6c:16:2f:7f:60:ba:11:18:3c:71:ac:d9:dc:e6:8e:
dc:bc:de:7c:0b:77:8e:85:60:5e:41:e4:12:fe:ce:
6c:1a:81:cc:07:41:53:f2:9c:09:e8:9c:1a:7f:ea:
49:9a:09:c3:68:8b:87:ab:a1:03:fd:2e:fe:96:ba:
9f:60:aa:0f:d0:a3:b3:72:d5:6e:a6:08:44:ea:62:
d8:6a:aa:0a:73:40:2f:03:7b:e4:35:3c:95:1b:40:
f3:c8:72:95:54:80:29:4c:27:d0:46:51:dc:2f:94:
39:67:89:e2:11:f1:6c:73:3d:28:6d:b8:64:db:5c:
12:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:23:B3:1A:AC:88:A4:E1:01:A3:84:28:1F:A7:FA:5B:45:DF:D3:2D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xiOzGqyIpOEBo4QoH6f6W0Xf0y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.245.0/24
146.120.227.0/24
Signature Algorithm: sha256WithRSAEncryption
23:13:d4:20:8b:3d:42:ac:21:11:02:7d:4d:df:e4:23:c6:4b:
df:e2:46:df:21:18:22:65:30:e6:44:80:9e:9c:8d:41:5f:35:
bb:b3:41:aa:49:ec:68:d7:4b:7f:f5:56:28:c9:75:d4:c5:14:
12:c7:64:46:c6:45:cf:29:19:fe:30:4e:31:2e:6f:55:31:b3:
88:8f:ad:b2:7b:2e:7b:a0:43:ea:d8:be:f1:14:3a:78:71:ec:
f6:5b:4d:d1:11:8d:16:a4:7a:63:c7:c0:2c:3c:43:72:eb:82:
e8:ee:35:ab:75:6e:4a:e9:19:be:37:dd:5c:a1:d7:6a:78:91:
ce:08:19:87:51:df:4c:05:16:86:ef:54:3f:7a:df:18:04:6a:
0d:4b:27:98:a7:e5:4e:d6:38:66:de:0f:13:d5:6b:77:1a:f9:
b8:e4:8e:27:90:4f:f3:66:7d:e6:91:19:15:b0:6a:70:a4:ec:
6a:2a:72:23:a7:56:b8:07:02:e8:f7:8d:b8:4e:e9:90:d8:ed:
96:20:80:23:f2:ee:b7:bd:f0:6c:69:b8:98:35:96:b8:f6:4d:
9f:83:d2:fe:df:fc:29:51:a0:3c:39:8f:7f:45:e9:66:2f:a2:
3a:26:14:10:75:75:8f:f3:f5:e5:3d:6f:30:cb:f4:89:c1:d2:
0a:9f:b3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:56:39 2025 by rpki-client