Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/9mfzfuLOVnoMAA5ISQXoZwGxolM.roa
File: 9mfzfuLOVnoMAA5ISQXoZwGxolM.roa (raw, json)
Hash identifier: uzB5ZW/RVuSGkCX5IzwGGNIGcOe+Dlo03pvmN6nS74o=
Subject key identifier: F6:67:F3:7E:E2:CE:56:7A:0C:00:0E:48:49:05:E8:67:01:B1:A2:53
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018BCA7CD855A7F4857757BC859BF7BEE374
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/9mfzfuLOVnoMAA5ISQXoZwGxolM.roa
Signing time: Mon 13 Nov 2023 21:01:01 +0000
ROA not before: Mon 13 Nov 2023 21:01:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 93.89.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Dec 2023 21:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ca:7c:d8:55:a7:f4:85:77:57:bc:85:9b:f7:be:e3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Nov 13 21:01:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f667f37ee2ce567a0c000e484905e86701b1a253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:9a:9a:8e:40:3f:f4:a9:0d:e9:2a:70:06:
f3:67:7a:11:99:02:34:a2:aa:c3:19:34:4b:14:c7:
ea:31:b7:9e:bf:26:4d:88:ce:d4:8b:ae:68:3d:68:
74:f7:1b:62:cb:ef:4e:c2:da:87:67:d6:a0:8e:28:
35:90:0d:18:8f:db:99:f6:f9:83:9b:85:27:1a:5f:
4d:c4:b8:13:af:e1:6f:15:84:cb:7e:c1:41:f0:f5:
f9:72:cf:fa:f7:b1:12:ee:47:31:58:56:bc:b6:8b:
07:38:3f:f6:6c:77:39:62:0b:94:30:7a:c6:f0:55:
b2:6d:0c:32:13:19:c8:f7:40:21:c6:99:0b:46:f7:
66:37:88:cf:6c:27:01:ba:e4:50:5a:5e:a9:26:64:
a6:ef:0b:c1:9c:64:5c:81:c0:13:c0:16:e9:2e:86:
6f:6c:3b:d8:ad:e7:f9:c8:dd:7d:64:cb:bf:ef:8f:
a0:ae:bc:5d:3d:e8:2e:16:0f:52:43:79:12:d1:a4:
8e:43:5b:d4:4e:8a:58:b0:db:e3:ca:33:f5:8c:95:
1a:01:3d:27:18:cc:51:0f:8f:ca:fa:c0:01:0d:8d:
3f:e0:fd:7c:f3:20:c3:60:0c:2e:35:62:88:af:46:
1f:77:73:91:00:b0:6e:a7:2b:c9:a6:74:5c:7a:02:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:67:F3:7E:E2:CE:56:7A:0C:00:0E:48:49:05:E8:67:01:B1:A2:53
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/9mfzfuLOVnoMAA5ISQXoZwGxolM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.212.0/24
Signature Algorithm: sha256WithRSAEncryption
78:64:8d:ed:2c:4f:ee:ea:74:4d:fa:4f:f2:60:26:d3:05:ee:
af:36:33:d5:50:e2:20:d0:f5:74:0d:00:bc:a3:71:fb:7b:ba:
c7:d0:8d:9a:aa:05:7c:da:a5:f2:f4:ab:52:e2:37:b3:ad:c3:
00:a1:9d:cd:09:60:4c:d0:15:c6:fe:2b:56:74:21:64:12:5a:
c0:26:8d:39:a4:0b:e2:7e:62:32:9f:cb:65:0b:33:8f:c8:0c:
26:26:f0:c7:14:dc:eb:41:4f:fa:51:76:f5:b9:04:39:ac:58:
51:82:7a:18:9c:5b:e2:62:0c:05:cd:3d:e6:2d:f0:16:68:cb:
8a:ca:8a:a7:91:2c:14:03:3e:61:9a:9b:92:87:48:e5:e3:64:
20:91:d9:53:94:3d:70:6d:0d:15:85:98:c6:98:53:3b:46:55:
d0:04:36:42:ce:91:5d:23:d7:a2:8b:96:c9:43:05:2c:16:74:
a2:af:98:7a:7b:3c:af:ff:2d:9c:1b:4f:0b:18:34:70:f5:1e:
d6:6d:55:87:b7:dc:c1:80:e5:ce:82:4d:5f:10:33:54:1e:ee:
14:21:28:6b:0a:7a:0b:e6:5f:17:38:ce:4e:2b:c8:6e:71:45:
e1:73:8f:34:e4:2f:f3:4f:14:27:06:27:92:fe:60:c1:ec:90:
8c:9e:cf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org