Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1-nEiGbf_rTp6hybwEx4JXfnK2Vs.roa
File: 1-nEiGbf_rTp6hybwEx4JXfnK2Vs.roa (raw, json)
Hash identifier: vHoIHOnVNyj3VbK0Fiy1VPrIco/GM/T6NH3I77RD6Fg=
Subject key identifier: FA:71:22:19:B7:FF:AD:3A:7A:87:26:F0:13:1E:09:5D:F9:CA:D9:5B
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018B8CAE02E0B8CF358EA6F631EA3476F269
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1-nEiGbf_rTp6hybwEx4JXfnK2Vs.roa
Signing time: Wed 01 Nov 2023 20:58:16 +0000
ROA not before: Wed 01 Nov 2023 20:58:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 93.89.216.0/24 maxlen: 24
93.89.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8c:ae:02:e0:b8:cf:35:8e:a6:f6:31:ea:34:76:f2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Nov 1 20:58:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa712219b7ffad3a7a8726f0131e095df9cad95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:ef:7f:e2:92:32:d1:a1:c2:18:f1:b3:ec:
3f:b7:6a:fd:cf:33:66:fc:66:dc:78:e9:c5:2e:9f:
17:eb:48:fa:b2:de:e6:4e:89:a0:8e:05:9d:25:d7:
44:53:29:90:1e:1d:06:c2:c4:0c:e1:55:45:c2:a8:
0d:ab:4a:a6:a2:23:54:b5:d6:b9:7d:d1:b1:c1:37:
0f:1f:cc:82:d2:bb:73:17:b6:31:96:92:60:a6:93:
57:4c:bb:39:21:5b:33:12:b6:f4:4b:54:72:1d:d5:
7b:8e:f4:ce:b1:ce:c8:37:57:36:7f:de:38:b6:b2:
88:85:b3:6e:5e:9c:6f:29:83:8d:68:ca:57:2d:b0:
e3:2c:74:69:2e:37:92:17:85:0d:46:f7:c6:fe:63:
44:37:4a:47:46:1d:9b:55:31:7a:ec:f3:56:5e:d7:
ba:19:52:ab:f0:7e:31:66:d5:4b:52:a3:8d:08:b6:
dd:83:e0:d1:30:e7:c8:99:19:3d:76:50:e5:86:8a:
64:24:3a:aa:22:ae:81:70:6f:6d:cc:09:9e:0c:40:
a6:8a:43:5d:a3:6b:8e:8c:1d:ae:f8:f2:dd:7e:85:
fb:c7:41:01:2d:ab:76:2c:34:63:b5:5a:7c:04:25:
fd:cd:a0:3c:1c:aa:ab:f3:58:dd:89:1b:22:30:d0:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:71:22:19:B7:FF:AD:3A:7A:87:26:F0:13:1E:09:5D:F9:CA:D9:5B
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1-nEiGbf_rTp6hybwEx4JXfnK2Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.216.0/24
93.89.218.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:35:63:3b:17:c5:af:b9:2f:ba:13:a8:8c:69:64:d6:cf:8e:
62:d2:4e:4a:8f:a8:f4:04:b7:38:01:00:ff:03:dc:1c:9b:ff:
fd:23:26:c9:b9:b7:87:63:d6:37:b7:93:e9:5b:0a:63:4e:cc:
95:b9:9a:78:61:d5:11:6d:ed:aa:59:b9:45:dd:fd:01:20:05:
10:5e:e4:09:64:a3:46:2a:8b:30:f6:87:b1:4c:3d:2a:5e:5d:
d2:32:22:84:ee:98:9d:e1:a1:de:b7:b5:9a:c1:dc:b1:46:0b:
19:e9:2b:14:c4:2c:c7:fc:cc:06:1d:4e:05:82:f0:d2:5e:84:
8d:17:b5:0c:b5:8e:ea:78:b9:b9:2e:0d:05:26:83:75:83:b1:
df:19:15:27:8a:bc:d7:e7:be:56:fa:56:d0:d8:6a:60:2d:8e:
e0:b6:a2:25:9d:17:9a:d4:26:fe:e7:46:aa:c5:ad:b5:d4:ef:
33:56:5b:76:99:dd:28:a5:ad:91:a0:4e:23:31:08:7a:68:ca:
7d:f9:e0:92:68:f6:b0:c4:3b:e3:d5:2f:6c:95:9e:95:ac:4e:
cf:0a:be:de:0f:39:da:10:d5:f9:e7:c5:61:15:dc:49:35:9e:
17:4a:56:cc:6a:85:3a:a1:7e:1d:1f:f3:49:32:c0:25:2f:33:
49:74:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org