Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/3DZNG39jqk5yszmOGdpqUmWPchk.roa
File: 3DZNG39jqk5yszmOGdpqUmWPchk.roa (raw, json)
Hash identifier: S+TF8ViwvnTKxpghljPru8wlJPWB4P4mPrQGf01Bybs=
Subject key identifier: DC:36:4D:1B:7F:63:AA:4E:72:B3:39:8E:19:DA:6A:52:65:8F:72:19
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018AD89E4C2175F3EAF8FA13954C16691DB3
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/3DZNG39jqk5yszmOGdpqUmWPchk.roa
Signing time: Wed 27 Sep 2023 21:49:27 +0000
ROA not before: Wed 27 Sep 2023 21:49:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 93.89.211.0/24 maxlen: 24
193.109.160.0/22 maxlen: 24
93.89.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 08:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d8:9e:4c:21:75:f3:ea:f8:fa:13:95:4c:16:69:1d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Sep 27 21:49:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc364d1b7f63aa4e72b3398e19da6a52658f7219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:c9:a8:6e:b3:c7:f0:19:34:d2:db:76:7b:
8c:dc:c4:26:be:74:23:27:8e:12:36:cf:4f:e5:07:
52:05:fc:2c:b0:4f:6a:25:af:f4:f5:b3:e0:b2:5b:
a9:57:de:55:ab:82:1e:1f:bc:6f:27:34:9b:0a:95:
a4:2f:46:6f:2a:e2:55:4d:49:44:f1:29:1e:ff:bf:
00:f4:08:9a:50:de:6a:c1:f2:d5:d2:46:5d:d9:e2:
68:c7:d5:f8:67:d7:3a:f1:a8:97:96:ad:c2:c5:ac:
04:63:31:cc:60:24:63:a0:ee:9c:0d:eb:0a:96:a2:
e3:ae:48:ae:a9:0e:fe:50:50:18:eb:54:26:e8:14:
c5:c5:36:72:fd:8a:0a:40:a7:f4:da:71:e7:da:56:
4b:cd:1d:82:4d:1c:b6:08:e3:12:99:97:97:b3:84:
c3:6b:19:98:d6:d5:43:30:31:8c:07:15:8d:64:71:
d0:ec:41:c4:5c:12:c3:4c:48:43:43:67:7f:26:a1:
c2:24:90:92:31:3b:ad:5a:95:f4:76:fe:60:75:ba:
02:d2:23:46:e9:86:2f:11:ee:a1:5b:de:7f:48:e1:
2f:bb:ac:0d:10:b5:94:db:f9:63:80:60:20:cf:64:
84:7b:cf:ee:fe:a5:46:b9:d8:20:d8:64:84:33:12:
29:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:36:4D:1B:7F:63:AA:4E:72:B3:39:8E:19:DA:6A:52:65:8F:72:19
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/3DZNG39jqk5yszmOGdpqUmWPchk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.211.0/24
93.89.217.0/24
193.109.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:a0:de:33:59:99:42:77:5b:c1:26:3c:1d:a7:df:c9:78:b5:
7c:2d:e6:8f:0f:36:c8:1c:07:64:29:ed:45:06:58:40:f5:94:
d1:db:1b:6f:f8:09:5d:32:b0:d0:8b:07:11:94:13:79:3e:51:
39:4b:e3:9b:1b:b6:ff:8d:76:1b:a5:70:c4:b9:6d:a3:6d:5c:
3e:e4:fe:38:62:95:53:a6:d3:27:89:ff:a0:46:a0:ec:c8:98:
8d:8c:a3:e1:5e:8b:1f:c0:83:79:3f:07:43:51:fa:d4:61:31:
86:15:55:e0:81:5b:06:d6:ec:2f:d7:f0:19:a5:ed:4a:f5:eb:
22:a8:6e:50:d0:2c:53:17:1c:60:b9:e1:39:f1:fc:68:3f:46:
5d:49:8c:98:64:48:1b:12:4e:00:61:6f:a0:91:7b:39:95:67:
b6:df:ac:f2:37:c4:f7:f7:0b:ab:1d:ae:25:c6:ad:4d:cb:90:
6e:f5:0f:d0:b0:e2:fd:5c:b1:22:fc:50:36:cf:df:41:32:8b:
6e:26:66:f6:3f:6e:5d:b8:56:7a:e1:7b:52:6c:8e:bc:75:19:
60:cd:9b:5f:1b:bc:f3:59:c7:4d:20:b9:91:b5:c5:01:2d:c8:
81:51:65:cd:2c:21:c2:4e:5a:1b:c3:09:dc:a1:2e:5e:bc:16:
73:d8:84:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org