Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1-0IST90rOmTCPzx8yBsY4JSBSE8.roa
File: 1-0IST90rOmTCPzx8yBsY4JSBSE8.roa (raw, json)
Hash identifier: VNJQKxESy1bjNFdsGSm4cPoctuKYN+azjJj02UtzOU8=
Subject key identifier: FB:42:12:4F:DD:2B:3A:64:C2:3F:3C:7C:C8:1B:18:E0:94:81:48:4F
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018B81A3C6E3258F037F277D300E7B3D8AED
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1-0IST90rOmTCPzx8yBsY4JSBSE8.roa
Signing time: Mon 30 Oct 2023 17:31:15 +0000
ROA not before: Mon 30 Oct 2023 17:31:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400402
IP address blocks: 93.89.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Nov 2023 10:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:a3:c6:e3:25:8f:03:7f:27:7d:30:0e:7b:3d:8a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Oct 30 17:31:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb42124fdd2b3a64c23f3c7cc81b18e09481484f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:54:d2:c5:72:fd:ef:c3:e0:d8:0f:61:94:
5c:34:a9:32:19:56:8b:93:0f:90:be:5c:0b:e0:45:
5a:39:14:9b:03:24:ee:79:dd:b0:9a:b5:90:d1:10:
30:1e:cc:d1:98:07:ab:19:e2:e7:fb:e2:c4:d1:8a:
23:f1:e7:4f:e0:fe:b1:ca:b3:d7:0c:fa:17:61:5f:
4c:80:e8:f2:76:c8:6d:c0:68:c6:a5:fe:0f:94:97:
15:21:3b:5e:b9:c5:92:39:c5:62:9a:45:65:30:50:
8a:c7:92:3f:51:1e:33:64:1e:96:18:60:23:15:8b:
16:62:03:a9:7e:75:bc:7f:39:4c:08:98:29:5e:de:
df:c0:92:d2:fd:b9:c0:cc:90:02:db:f6:cb:11:46:
33:8e:ac:ac:7b:06:ff:d8:21:c5:5c:8a:44:be:ca:
e5:42:67:4b:0b:37:40:fd:12:76:2a:de:94:9e:77:
92:4d:f7:9d:5c:f0:fc:5b:37:d9:e7:64:19:34:f9:
cc:35:69:8d:80:6a:59:36:4b:0b:71:6e:41:0c:91:
4f:6b:85:ef:82:56:79:9b:ad:61:f3:23:ae:ce:df:
8a:36:d1:de:78:97:d4:53:e4:79:c9:08:29:a3:43:
ec:c1:7e:7f:c6:86:98:d6:de:6c:4e:ad:70:51:12:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:42:12:4F:DD:2B:3A:64:C2:3F:3C:7C:C8:1B:18:E0:94:81:48:4F
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1-0IST90rOmTCPzx8yBsY4JSBSE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.212.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c7:12:96:a6:4a:d7:93:04:df:8c:44:09:70:d8:53:93:bf:
bc:a8:c3:81:6f:d6:e2:ca:68:13:41:44:18:94:7c:f1:5d:1f:
a3:ca:8e:7b:86:85:d7:b7:15:66:eb:b3:72:77:7e:e5:eb:60:
69:ac:23:e1:37:77:4c:89:8e:fd:f6:c0:f9:8a:3a:6e:8d:8b:
af:ed:3c:0c:ec:52:2c:b3:9f:f2:d8:23:28:6d:6f:08:74:49:
5a:e9:15:5b:35:8a:57:86:76:45:5e:45:70:1a:60:87:e2:ce:
58:51:6c:13:10:d7:0d:8b:59:9b:41:81:47:3d:bb:64:4b:5e:
39:e0:99:54:6c:51:82:b4:aa:af:dd:75:09:54:99:7d:9b:d3:
5e:c9:bc:9f:6f:78:ff:d4:ed:9b:af:a5:a7:ff:d1:af:46:3e:
ea:dc:53:32:34:13:10:b8:52:16:5f:db:b1:47:88:a3:9a:f5:
0c:b2:9a:d3:c9:b5:05:0a:7f:d1:66:2e:f2:8f:29:34:fb:bf:
86:24:9f:03:eb:e2:f0:ed:1e:35:95:60:9c:11:2d:08:02:43:
90:23:0e:75:b8:6d:f3:d2:d5:6e:63:f2:89:38:a8:56:14:67:
90:01:58:72:91:a3:12:3d:c1:d8:b0:9e:e0:85:93:30:4d:12:
09:8f:c4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org