Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/9R7Th5duyRtF3Yoy_Qkn9miWooI.roa
File: 9R7Th5duyRtF3Yoy_Qkn9miWooI.roa (raw, json)
Hash identifier: mkWjewPMtMQepic6tZYwUt/fOQYRMkcRFAcWo2gwY2Y=
Subject key identifier: F5:1E:D3:87:97:6E:C9:1B:45:DD:8A:32:FD:09:27:F6:68:96:A2:82
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018896A7B075907DF93BCAE6F51BFA348076
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/9R7Th5duyRtF3Yoy_Qkn9miWooI.roa
Signing time: Wed 07 Jun 2023 16:19:11 +0000
ROA not before: Wed 07 Jun 2023 16:19:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198652
IP address blocks: 93.89.214.0/24 maxlen: 24
93.89.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:a7:b0:75:90:7d:f9:3b:ca:e6:f5:1b:fa:34:80:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jun 7 16:19:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f51ed387976ec91b45dd8a32fd0927f66896a282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:b7:1b:4b:89:26:5f:ad:59:fd:a6:8e:d4:
54:3c:ae:18:af:30:d9:a2:55:35:24:40:a0:3f:28:
a1:c8:99:2b:e7:48:09:62:89:4e:9f:23:f0:5f:6d:
b4:2e:90:a8:3e:fa:3e:7e:b2:b7:d7:d4:1a:2d:4c:
b7:12:ae:49:72:ae:5a:91:e7:b3:ec:c8:e6:09:ac:
ed:17:f1:27:77:bd:5f:99:9f:4c:ff:1c:cb:83:56:
c7:b3:ec:87:97:0a:61:ab:2d:df:90:49:da:8e:5d:
63:d9:a0:66:e8:d8:e8:26:00:0f:80:2f:67:45:2f:
b3:a1:27:46:79:13:f4:5e:91:38:1b:80:cd:24:bc:
99:ed:16:71:8d:46:ff:3e:29:eb:d0:c6:2e:4a:16:
96:b6:4e:55:b3:aa:b7:30:5b:a7:fc:82:b1:33:d8:
16:e4:59:2a:78:d2:a8:af:11:81:c5:e9:1e:c2:4d:
52:e6:c7:0b:b3:1c:47:9d:9f:a3:62:4b:42:c2:8a:
95:57:76:8d:ae:13:a9:ba:58:2a:a6:69:49:19:0e:
0c:00:0a:01:01:0d:6c:c6:59:d3:31:aa:b0:51:a3:
82:20:b5:ba:52:88:e5:c0:1b:0b:05:11:ad:de:e7:
cb:53:30:2b:45:90:07:c8:d1:9e:58:2b:33:94:0e:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1E:D3:87:97:6E:C9:1B:45:DD:8A:32:FD:09:27:F6:68:96:A2:82
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/9R7Th5duyRtF3Yoy_Qkn9miWooI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.214.0/24
93.89.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a9:2a:ac:43:49:90:7a:e8:b1:40:46:41:4f:39:84:44:e6:
3d:6c:7b:ef:72:26:83:14:b5:33:eb:29:d4:66:00:c9:22:d3:
ab:93:67:92:a4:47:d0:a1:24:a9:c8:76:7f:4e:41:6b:90:f2:
90:4d:48:2d:28:60:b7:50:a8:ed:39:eb:39:82:73:f6:bd:ce:
b9:58:29:ad:de:97:ed:e3:57:6f:12:d3:f7:59:64:29:c4:46:
be:38:32:39:78:bd:8d:68:a4:65:6b:68:3e:b4:5f:7c:a8:af:
39:77:77:40:65:82:2e:08:4f:13:98:87:ea:8c:bf:94:87:3e:
57:47:b6:63:9a:07:58:1f:e1:2c:cc:7a:d4:b9:66:79:cb:2e:
fd:30:e6:28:d0:02:f1:da:0b:1f:ad:b9:b8:ca:66:93:46:16:
75:47:46:a7:06:18:ac:e4:d5:87:34:6a:5c:7e:be:e8:d2:22:
88:f8:08:cf:55:f6:ff:35:02:50:73:2d:4d:97:36:de:45:8d:
fb:b8:2c:c9:a0:1a:38:63:e5:0e:8b:90:0b:b8:43:c3:ec:d1:
c4:aa:87:cc:00:21:02:93:3d:c4:3f:a4:ef:a9:15:f6:2c:7f:
98:aa:b9:7a:e5:e7:7b:39:62:24:ae:63:cb:26:f9:5a:c6:de:
e6:b5:4b:05
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYiWp7B1kH35O8rm9Rv6NIB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjMwNjA3MTYxOTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTFlZDM4Nzk3NmVjOTFiNDVkZDhhMzJmZDA5MjdmNjY4OTZhMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT23G0uJJl+tWf2mjtRUPK4YrzDZ
olU1JECgPyihyJkr50gJYolOnyPwX220LpCoPvo+frK319QaLUy3Eq5Jcq5akeez
7MjmCaztF/End71fmZ9M/xzLg1bHs+yHlwphqy3fkEnajl1j2aBm6NjoJgAPgC9n
RS+zoSdGeRP0XpE4G4DNJLyZ7RZxjUb/Pinr0MYuShaWtk5Vs6q3MFun/IKxM9gW
5FkqeNKorxGBxekewk1S5scLsxxHnZ+jYktCwoqVV3aNrhOpulgqpmlJGQ4MAAoB
AQ1sxlnTMaqwUaOCILW6UojlwBsLBRGt3ufLUzArRZAHyNGeWCszlA4xkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPUe04eXbskbRd2KMv0JJ/ZolqKCMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvOVI3VGg1ZHV5UnRGM1lveV9Ra245bWlXb29JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXVnWAwQA
XVnbMA0GCSqGSIb3DQEBCwUAA4IBAQCnqSqsQ0mQeuixQEZBTzmEROY9bHvvciaD
FLUz6ynUZgDJItOrk2eSpEfQoSSpyHZ/TkFrkPKQTUgtKGC3UKjtOes5gnP2vc65
WCmt3pft41dvEtP3WWQpxEa+ODI5eL2NaKRla2g+tF98qK85d3dAZYIuCE8TmIfq
jL+Uhz5XR7ZjmgdYH+EszHrUuWZ5yy79MOYo0ALx2gsfrbm4ymaTRhZ1R0anBhis
5NWHNGpcfr7o0iKI+AjPVfb/NQJQcy1NlzbeRY37uCzJoBo4Y+UOi5ALuEPD7NHE
qofMACECkz3EP6TvqRX2LH+Yqrl65ed7OWIkrmPLJvlaxt7mtUsF
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:20 2023 by rpki-client on console-fra.rpki-client.org