Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/4MaT-QzZ2-VJCJCGdiifRYLsHkU.roa
File: 4MaT-QzZ2-VJCJCGdiifRYLsHkU.roa (raw, json)
Hash identifier: KJrRZgxpPTB28VoHvoVYlT07R0Gob+zHXLYBSeT1G7A=
Subject key identifier: E0:C6:93:F9:0C:D9:DB:E5:49:08:90:86:76:28:9F:45:82:EC:1E:45
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0187AFD8EBBEBF8E9C05F3E65F1FA56C5492
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/4MaT-QzZ2-VJCJCGdiifRYLsHkU.roa
Signing time: Sun 23 Apr 2023 20:40:41 +0000
ROA not before: Sun 23 Apr 2023 20:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 91.193.252.0/24 maxlen: 24
93.89.217.0/24 maxlen: 24
93.89.218.0/24 maxlen: 24
93.89.215.0/24 maxlen: 24
93.89.216.0/24 maxlen: 24
93.89.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Apr 2023 19:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:af:d8:eb:be:bf:8e:9c:05:f3:e6:5f:1f:a5:6c:54:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Apr 23 20:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0c693f90cd9dbe54908908676289f4582ec1e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:03:8c:2b:37:69:de:9a:03:66:0d:02:d6:
d1:40:08:49:41:9a:4f:96:6f:7c:a0:e2:f7:1d:2e:
cf:16:47:da:a4:07:32:85:c6:87:68:6f:7c:c9:da:
b0:07:3d:7a:92:9d:c7:6a:7f:2b:17:06:f6:ba:5c:
19:ed:1b:c3:c6:cb:a0:ad:59:7c:8d:a8:05:d7:70:
2e:35:39:e0:5c:08:d7:da:4f:60:6b:a6:f5:f5:70:
02:93:36:42:5f:a2:03:20:5e:95:ae:55:57:cb:2b:
ff:4c:04:11:ec:3c:78:ea:df:2c:bf:67:03:7d:37:
e6:48:2f:02:e5:52:a5:d3:f8:f6:cb:71:97:8c:5c:
54:a1:68:63:78:a6:f8:7c:61:3d:81:43:b0:39:7c:
df:2d:fc:c6:7e:2e:d9:a3:03:ac:90:68:20:12:58:
96:a9:65:50:77:b7:69:3b:ce:c4:25:14:db:c9:c6:
4a:07:d1:d6:1f:fd:04:ff:d0:c2:62:6f:c8:d3:5b:
4c:67:1f:97:6b:53:26:e3:1a:99:45:8d:8c:65:13:
83:d9:5d:96:56:6a:0f:27:d3:91:fd:0c:e6:d6:e2:
96:31:a8:0d:2d:b0:a8:89:3a:65:c3:8e:bd:75:e3:
85:bc:c4:4b:7b:1a:28:03:fe:1f:34:90:8c:c3:ce:
1f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C6:93:F9:0C:D9:DB:E5:49:08:90:86:76:28:9F:45:82:EC:1E:45
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/4MaT-QzZ2-VJCJCGdiifRYLsHkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.252.0/24
93.89.215.0-93.89.218.255
93.89.223.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c3:79:35:ce:3b:54:70:f9:ed:8c:73:e0:9c:f9:a2:46:f3:
dc:41:7c:c3:ed:07:81:b3:a0:58:40:0f:3f:b6:62:6d:ac:8f:
d1:8b:f8:8f:0c:0b:5b:5e:ed:93:0d:30:77:76:30:66:4d:15:
b9:dd:07:c7:20:11:f9:11:08:5a:6e:66:1d:d7:d8:1e:5a:32:
78:9a:cc:21:ae:ff:f7:54:dd:5e:46:43:3a:98:9a:21:a2:08:
e8:75:ab:e1:70:53:57:06:5d:b0:27:c7:be:68:8e:13:cb:93:
57:ed:76:8c:0e:89:e9:19:e1:92:62:a2:80:eb:5b:07:b8:e1:
8d:ed:95:9b:57:23:f9:54:54:32:e4:a7:7c:6b:84:4e:39:43:
44:18:c2:2b:89:30:37:3f:c0:b2:90:b5:a2:01:88:05:b6:8c:
7b:9e:47:c2:0d:4b:2b:d0:52:ed:33:d8:be:44:3a:f6:1a:66:
53:e4:46:55:3e:29:4e:5b:33:61:e3:7a:11:5b:2f:d3:60:91:
39:7d:a3:dc:d9:ff:df:b1:ac:d6:82:ec:8d:1a:9e:dc:62:cb:
d8:9c:15:ca:b9:da:fc:30:f5:ec:43:d7:94:d5:fa:bb:29:3c:
26:a7:e9:c6:a9:88:54:98:a4:cf:81:39:5d:17:70:ee:c9:d2:
d1:e7:5e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org