Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/2w-8rUGog75h9IauVlDcIguQtMk.roa
File: 2w-8rUGog75h9IauVlDcIguQtMk.roa (raw, json)
Hash identifier: E/i9JBlaHX0m5kqyvlo4ua9mAcP5DE2pudFfUyhJhZ4=
Subject key identifier: DB:0F:BC:AD:41:A8:83:BE:61:F4:86:AE:56:50:DC:22:0B:90:B4:C9
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018A179EEB009EC47FE29DA24734E5615908
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/2w-8rUGog75h9IauVlDcIguQtMk.roa
Signing time: Mon 21 Aug 2023 10:23:25 +0000
ROA not before: Mon 21 Aug 2023 10:23:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 93.89.212.0/24 maxlen: 24
93.89.218.0/24 maxlen: 24
93.89.217.0/24 maxlen: 24
93.89.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Sep 2023 21:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:9e:eb:00:9e:c4:7f:e2:9d:a2:47:34:e5:61:59:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 21 10:23:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db0fbcad41a883be61f486ae5650dc220b90b4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c8:ed:60:83:b7:74:4c:86:3f:53:d7:43:4b:
3f:63:db:9b:6e:05:c4:b3:28:36:0e:79:9b:a1:79:
c8:3c:f3:5c:1e:0d:bb:aa:02:57:a3:84:4b:00:af:
d4:aa:2a:6f:ec:d0:2e:19:7f:34:4f:d5:d8:b5:c8:
ec:b2:82:3a:9b:d0:3d:48:00:cd:4f:41:a2:2c:bb:
87:27:1f:0d:1f:94:70:70:17:20:c5:86:28:c7:f1:
50:26:c5:5e:92:d2:66:1f:63:e8:c3:04:24:9e:f6:
55:43:85:0c:7c:11:6e:76:a6:ec:84:cd:f8:3b:a5:
cc:df:95:72:9a:ba:d2:83:22:b5:5f:53:15:06:59:
0a:0d:e3:6a:b9:c0:65:0b:99:64:f9:3b:8d:4f:57:
7a:40:27:bd:ee:6f:cf:44:4c:51:ba:71:23:9f:69:
dc:92:2e:d2:77:cf:95:4b:e9:e6:14:7d:5a:26:d0:
3c:fd:34:34:ab:6c:cf:ff:2d:47:cd:db:09:56:f5:
c0:0c:1d:1e:69:6c:67:f6:e8:a3:3e:c8:10:4f:1a:
a5:66:1d:5d:a6:3c:05:ef:a7:59:d8:9c:3e:90:70:
35:d8:67:12:f5:39:b2:e0:8e:1f:b8:48:a7:34:08:
4f:39:83:cf:ea:87:a1:7e:b0:3a:20:7f:73:29:d9:
f7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0F:BC:AD:41:A8:83:BE:61:F4:86:AE:56:50:DC:22:0B:90:B4:C9
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/2w-8rUGog75h9IauVlDcIguQtMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.212.0/24
93.89.216.0-93.89.218.255
Signature Algorithm: sha256WithRSAEncryption
7c:16:7c:cd:ff:44:86:55:85:1f:b5:61:8f:89:a9:f4:e0:fc:
e1:f7:c3:5f:f6:f4:0e:76:3d:51:ce:c6:c5:a5:58:a2:eb:d3:
df:fb:aa:40:3d:37:73:69:b2:25:2a:4c:9f:d6:07:6c:df:6c:
33:5e:96:ca:9e:63:39:24:9e:f0:a0:40:76:af:7e:80:f6:ee:
66:85:8a:4d:dd:75:b0:30:51:75:50:0f:a8:0b:bd:70:b9:8f:
94:ec:59:e5:86:1b:a4:cb:e4:f4:28:a9:4d:95:b4:92:d7:49:
26:ee:f2:44:c0:fa:87:7d:9f:40:a3:dc:24:43:35:3d:a4:c8:
e8:ce:3c:68:ac:12:7d:ad:ab:26:45:b3:2b:b3:8e:c3:fa:70:
b9:ff:3b:eb:67:b1:c8:db:f0:d3:ea:d0:35:3e:d7:bc:dc:10:
65:45:3c:dc:ca:df:df:10:60:7c:0e:a3:9f:22:46:c7:82:d9:
58:d3:4c:3e:b6:78:06:2a:56:97:e7:ca:71:17:44:e9:bc:09:
05:f6:84:e0:8b:ce:e1:9b:c3:2b:e6:4c:c4:b2:fd:40:d5:55:
89:f7:b2:b2:02:47:4e:5e:78:08:b4:09:36:32:8b:59:34:85:
36:ca:ca:ce:68:67:13:a9:66:35:3d:44:79:9d:ee:50:78:b6:
38:0b:1c:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org