Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/zdXrD1TbX0EgCXHcwKVm6vGL3rc.roa
File: zdXrD1TbX0EgCXHcwKVm6vGL3rc.roa (raw, json)
Hash identifier: jqyklgZLtzeLrfRQtEezgQ1N2QABCMCAabqQsDVlsVI=
Subject key identifier: CD:D5:EB:0F:54:DB:5F:41:20:09:71:DC:C0:A5:66:EA:F1:8B:DE:B7
Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial: 0188BA1FC15C70B9BE0D67BC8EEE9A36796E
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/zdXrD1TbX0EgCXHcwKVm6vGL3rc.roa
Signing time: Wed 14 Jun 2023 13:37:03 +0000
ROA not before: Wed 14 Jun 2023 13:37:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199102
IP address blocks: 93.189.224.0/24 maxlen: 24
93.189.224.0/22 maxlen: 22
93.189.226.0/24 maxlen: 24
93.189.225.0/24 maxlen: 24
93.189.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:1f:c1:5c:70:b9:be:0d:67:bc:8e:ee:9a:36:79:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Validity
Not Before: Jun 14 13:37:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdd5eb0f54db5f41200971dcc0a566eaf18bdeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:59:d8:35:b8:39:c2:60:31:3d:8a:cc:82:c0:
35:9d:8f:49:7a:7a:60:fe:41:42:98:50:a1:43:56:
b6:e6:b8:b4:aa:0d:ef:1a:08:88:6b:22:00:f6:6a:
d3:e1:8e:70:01:7e:27:b5:c2:80:0c:be:9c:18:ab:
45:2d:4f:63:1f:d8:05:5b:7b:96:81:b1:60:db:90:
08:e6:90:7a:d7:00:70:dc:b3:18:ce:fa:99:02:a1:
d5:24:f4:8a:67:d3:bb:77:0f:5a:d5:ae:20:44:19:
16:2a:e0:52:62:df:89:56:ce:cf:f7:57:b1:c4:36:
76:be:36:7d:b1:8c:f4:a5:99:33:9b:17:24:6c:fc:
74:04:8a:89:3c:88:65:25:aa:09:a0:04:0d:9c:be:
f6:28:e3:78:d6:64:78:e4:cc:9e:c4:ee:ed:8b:b7:
ba:8d:3a:07:f9:c7:c5:b5:4d:7d:30:89:54:48:88:
8e:cd:b0:66:8e:8a:ab:b4:18:03:3b:5d:2a:60:ac:
47:a3:1a:cb:f2:46:d4:97:60:3d:a3:72:6c:7c:c4:
98:35:ea:0f:f9:20:26:bf:81:96:cf:56:e4:c4:6c:
d4:17:e0:cb:22:ee:f9:5d:08:b4:72:c9:9b:b4:89:
81:e7:1b:bf:90:b4:a0:01:41:7c:4f:6c:4b:a4:1c:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D5:EB:0F:54:DB:5F:41:20:09:71:DC:C0:A5:66:EA:F1:8B:DE:B7
X509v3 Authority Key Identifier:
keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/zdXrD1TbX0EgCXHcwKVm6vGL3rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.224.0/22
Signature Algorithm: sha256WithRSAEncryption
41:68:c8:b3:bc:71:e5:58:d0:5c:c9:cc:8a:67:61:30:dc:41:
7b:95:fd:71:0b:fc:50:14:b3:e0:85:54:ec:cd:20:ef:1e:dc:
c6:6f:69:56:9b:aa:54:12:61:27:0a:61:60:30:2b:1a:e3:7f:
1a:7a:e5:87:3c:55:29:03:5b:af:aa:10:35:2b:c4:1d:41:07:
0c:fe:08:0f:5e:0a:69:ec:5a:c8:2d:a6:01:d2:41:f9:3d:db:
c9:36:a0:26:f9:1b:d0:8f:00:27:95:ce:99:bd:e8:48:93:61:
4c:c2:c0:3b:aa:2d:a8:cb:14:e6:e1:5c:a0:1b:83:d5:3e:2c:
e5:ff:c0:ee:83:7b:de:76:93:fc:9e:51:3e:bd:e8:1b:fd:6a:
f8:42:4e:9b:5b:d9:01:f7:d8:bb:a5:b9:47:f7:df:23:96:3f:
50:72:1f:d0:ca:6a:b6:53:3b:57:f0:e6:3e:bd:ac:ba:af:59:
e6:fc:5d:80:20:e2:ec:2f:75:d4:17:25:e3:ec:37:b1:e5:18:
e7:6a:2c:02:38:63:eb:cb:f7:16:70:3c:5e:91:49:8a:d1:13:
b5:e8:3e:f4:82:6d:90:e7:2b:c5:c2:8f:1f:79:cf:4a:72:17:
52:9e:d1:39:9c:be:4a:90:33:59:62:4b:0c:a5:70:05:60:0e:
d6:ef:4a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:18 2023 by rpki-client on console-ams.rpki-client.org