Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/2oKBf3LBgs40G6TBgNVseIjeydY.roa
File: 2oKBf3LBgs40G6TBgNVseIjeydY.roa (raw, json)
Hash identifier: Yc7DDacYQLrinShzijYTaqkjlcgbX5KVaDv2bPdk6as=
Subject key identifier: DA:82:81:7F:72:C1:82:CE:34:1B:A4:C1:80:D5:6C:78:88:DE:C9:D6
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0187E697AC4100D8E374D776199CD89360CD
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/2oKBf3LBgs40G6TBgNVseIjeydY.roa
Signing time: Thu 04 May 2023 11:48:32 +0000
ROA not before: Thu 04 May 2023 11:48:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 93.89.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Jun 2023 15:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:97:ac:41:00:d8:e3:74:d7:76:19:9c:d8:93:60:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: May 4 11:48:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da82817f72c182ce341ba4c180d56c7888dec9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:eb:98:08:85:38:1b:ae:cb:60:a5:5e:a3:05:
91:1f:9e:8e:c6:09:1b:41:95:80:05:5e:77:be:69:
58:a7:38:33:04:c9:56:0a:d6:1f:cb:1d:b5:45:32:
1c:48:d2:7c:ae:6d:a8:17:4b:20:d2:15:84:a4:f2:
48:c6:fe:33:1a:d0:eb:6c:4a:1e:90:df:17:f0:3b:
c0:d8:6f:76:f9:41:20:ab:f6:15:e3:8e:8c:79:87:
f3:dc:14:81:34:11:83:bf:6d:35:de:52:7f:c1:6d:
72:08:3e:d5:2b:6a:0d:79:8b:f3:ff:5b:dc:82:68:
bb:8c:59:ab:39:af:ae:72:e7:81:4f:90:de:07:4c:
c8:2a:dd:d5:98:0b:3b:95:19:4a:0a:51:f1:19:6f:
9a:1c:e3:47:83:f2:36:24:d9:c6:4d:79:e8:35:21:
3e:62:84:df:6b:21:3d:62:e9:7f:6d:40:38:c5:fb:
f6:81:c9:4b:3a:83:8c:37:cd:2f:88:79:71:f3:e2:
95:60:b9:16:78:9f:e0:38:dc:fb:88:08:f3:e0:9a:
b9:6a:ec:91:b9:b5:c4:f0:fb:af:32:4c:44:52:34:
c9:9c:f8:e5:6f:19:f4:22:24:3a:50:51:b2:a3:ec:
fa:fa:b5:8f:94:1c:34:b3:ee:aa:ab:1b:05:ca:68:
f4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:82:81:7F:72:C1:82:CE:34:1B:A4:C1:80:D5:6C:78:88:DE:C9:D6
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/2oKBf3LBgs40G6TBgNVseIjeydY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.209.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:7e:5f:fd:5b:5e:8b:cf:6f:21:6e:68:b7:03:66:79:b9:fb:
8a:58:b6:f9:e5:94:de:69:ed:88:56:72:4c:c0:c6:21:f8:3b:
4d:0d:46:07:21:ad:0d:e3:2c:5e:3d:a4:75:e0:76:d6:60:18:
3a:fe:c9:16:e5:ad:39:41:9b:0f:8a:9d:64:2c:35:ed:0a:cf:
8d:fc:bf:13:ee:0f:3d:ee:15:21:8c:88:29:8e:bc:14:6e:f7:
64:2f:4d:b2:0b:79:e1:26:b0:a7:aa:bb:2f:d9:34:4f:56:26:
b6:11:2c:b7:eb:79:20:1c:63:e9:e5:35:da:0f:7e:e5:76:36:
7b:a8:03:7d:f6:33:dd:ff:86:cb:54:47:9b:f4:39:be:0a:ae:
0a:12:87:6a:fa:c3:1c:0a:a5:e7:07:6e:66:06:f3:76:01:16:
cf:2b:27:ca:fc:5a:a7:f2:fa:32:f9:35:70:af:c3:07:de:02:
9b:05:01:7e:ba:a6:47:3b:99:31:ce:f1:6e:a2:e9:37:31:a3:
a3:ab:b4:c8:77:4a:e0:68:70:c3:b0:89:84:24:c6:49:d5:31:
34:1d:52:f9:ef:a3:b4:8d:e7:2b:5a:e7:12:e2:f1:2f:91:de:
37:6d:6d:af:cd:a2:60:a8:eb:0b:e1:42:47:06:4f:70:78:8f:
6e:74:5b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org