Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/8Mjgq1ECfeREKJPuQbMflgvC1lc.roa
File: 8Mjgq1ECfeREKJPuQbMflgvC1lc.roa (raw, json)
Hash identifier: mO/eTCdFwwGRdTBH6/M8FEzEYcO/QmQzgwaEO/84zHE=
Subject key identifier: F0:C8:E0:AB:51:02:7D:E4:44:28:93:EE:41:B3:1F:96:0B:C2:D6:57
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0189206D71D51D8E77526577C666218DC0D2
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/8Mjgq1ECfeREKJPuQbMflgvC1lc.roa
Signing time: Tue 04 Jul 2023 10:23:10 +0000
ROA not before: Tue 04 Jul 2023 10:23:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 93.89.209.0/24 maxlen: 24
93.89.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Aug 2023 20:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:6d:71:d5:1d:8e:77:52:65:77:c6:66:21:8d:c0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 4 10:23:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0c8e0ab51027de4442893ee41b31f960bc2d657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ec:85:d2:ad:2e:27:e7:74:1b:82:a4:50:d0:
ff:c1:0d:c6:77:91:3c:bb:23:72:f0:15:d0:6c:78:
2d:ec:b8:a2:ce:db:a0:77:0a:3f:d7:d7:54:aa:8b:
99:f3:72:25:ee:ed:6b:20:87:b1:fa:58:e8:ae:81:
9a:93:af:1b:e1:3e:b1:68:ed:a1:36:99:d4:99:0c:
ac:57:2e:00:16:7f:dc:ce:18:c7:fb:41:34:fe:e4:
54:b6:74:5a:b7:c0:9c:b1:50:a4:12:e6:2e:65:7a:
c6:ef:3d:ac:e8:a2:2d:78:3d:6b:d4:66:9c:b9:1e:
aa:c1:2b:66:e1:c1:f4:34:fc:e5:4c:89:42:e5:4b:
fa:bf:ae:77:68:cb:e3:f7:39:a9:1a:7e:9c:4d:9d:
7d:e1:d6:aa:b3:e0:91:d2:1a:4d:bf:00:a2:66:22:
1e:f2:99:8a:be:83:59:df:12:51:92:67:b0:c0:9d:
50:50:c5:8d:ee:2e:e3:43:b0:aa:28:33:33:57:21:
fb:71:37:c0:87:39:10:e6:04:f5:57:a9:ed:56:7c:
0e:60:9f:1d:66:06:42:ee:d6:04:58:99:bb:25:c8:
96:62:55:cb:d3:7b:94:fd:a4:91:41:82:db:52:81:
cc:78:0f:52:f5:8c:6d:8c:59:a4:d2:db:21:f9:60:
9a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C8:E0:AB:51:02:7D:E4:44:28:93:EE:41:B3:1F:96:0B:C2:D6:57
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/8Mjgq1ECfeREKJPuQbMflgvC1lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.209.0/24
93.89.213.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:63:9d:aa:be:cc:8f:7f:f7:1b:40:cc:e1:17:7f:b2:3c:0e:
a7:e9:c2:9e:49:93:92:41:58:cb:36:6b:00:1b:8a:48:e2:45:
7e:49:94:66:63:31:2e:cc:d4:67:e8:a8:26:fb:40:dc:78:f6:
b7:76:83:fa:7e:00:d9:3c:69:bb:34:bd:6b:86:08:54:e8:2c:
06:3e:70:95:37:e7:64:58:5d:92:d2:ca:e4:8c:6a:e6:ea:0f:
5f:6f:f6:5b:c5:32:81:b4:bd:9b:cd:6f:1e:3d:be:09:dc:e4:
5d:07:55:b8:12:97:f3:d8:7b:1c:0b:6f:51:e2:a0:e8:30:e5:
19:af:fa:1d:5c:3b:1a:5c:4d:5f:6a:5e:86:ff:98:9f:c6:df:
9d:6f:40:f1:d9:7e:49:79:8a:02:5c:c5:9d:9e:bb:95:2a:0d:
17:58:07:37:e8:92:f3:83:3a:8b:89:cf:a2:3c:93:63:6f:f3:
5d:1f:7e:fb:35:8c:70:8a:78:ff:29:e6:3b:c9:75:37:6d:c2:
96:04:0a:26:f0:76:10:88:5e:ce:14:74:d9:c2:4c:84:42:28:
1f:4d:ed:52:9c:ee:ff:f4:ed:3d:f9:7c:18:65:f8:e3:a2:14:
02:40:bf:a5:a1:6a:6c:82:55:09:1b:83:26:8c:d8:e4:a0:35:
8b:f6:19:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org