Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/AV6zsMkFD5wIdOmrvht5J0W23Zg.roa
File: AV6zsMkFD5wIdOmrvht5J0W23Zg.roa (raw, json)
Hash identifier: KyHhMF62s+UwvSSzMYJe76QEhe80+GpKTu0nm1a8Sw8=
Subject key identifier: 01:5E:B3:B0:C9:05:0F:9C:08:74:E9:AB:BE:1B:79:27:45:B6:DD:98
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0189994647B8B2CDCDBA63439F753ECB0EDB
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/AV6zsMkFD5wIdOmrvht5J0W23Zg.roa
Signing time: Thu 27 Jul 2023 21:34:27 +0000
ROA not before: Thu 27 Jul 2023 21:34:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 93.89.212.0/24 maxlen: 24
93.89.218.0/24 maxlen: 24
93.89.217.0/24 maxlen: 24
93.89.216.0/24 maxlen: 24
93.89.220.0/24 maxlen: 24
93.89.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Aug 2023 17:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:99:46:47:b8:b2:cd:cd:ba:63:43:9f:75:3e:cb:0e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 27 21:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=015eb3b0c9050f9c0874e9abbe1b792745b6dd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:06:13:8a:83:a9:8a:ed:68:24:a7:23:ce:
22:f2:9c:3f:03:11:98:ee:5a:3d:75:ae:d4:06:7c:
bb:40:72:9a:41:0f:e2:97:7b:17:ad:15:4a:68:85:
90:08:58:a1:e6:c3:91:37:52:f2:3b:ed:32:42:5a:
78:7c:66:62:3d:9a:ef:50:55:31:26:b1:90:ec:9b:
fd:0f:93:4a:74:21:e6:20:e1:f1:01:e0:3b:93:92:
f8:8b:3a:ce:3e:8d:bb:51:c0:19:11:e1:50:09:94:
bd:f8:00:12:09:64:39:f0:c3:8a:81:f9:6e:e6:56:
18:e3:5d:0b:bf:cf:fa:24:61:1f:fe:23:c6:1c:ae:
45:69:53:11:e0:3a:89:07:70:a6:4d:ad:ea:96:90:
cb:33:e4:93:b5:96:25:67:17:63:72:67:78:4c:7f:
75:63:a8:36:10:04:da:39:27:8b:24:ca:c8:a8:a9:
a3:8b:63:ba:c2:2f:6e:c1:ec:be:6d:c7:71:5b:c7:
7d:70:d5:38:5c:22:8a:74:dc:46:a7:df:63:ed:d3:
50:3f:6d:b7:19:10:d0:e4:70:a5:74:8a:6d:c4:d3:
b4:77:29:29:1e:e2:e3:36:bb:9d:10:12:14:13:87:
32:bb:52:97:3c:d1:05:a4:69:75:99:78:26:1f:93:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5E:B3:B0:C9:05:0F:9C:08:74:E9:AB:BE:1B:79:27:45:B6:DD:98
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/AV6zsMkFD5wIdOmrvht5J0W23Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.212.0/24
93.89.216.0-93.89.218.255
93.89.220.0/24
93.89.223.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:d9:73:34:ae:e7:94:18:f1:fc:f8:06:83:48:11:0d:60:d8:
10:30:66:1f:dc:a9:12:9e:c8:32:bd:51:ff:20:7f:cf:c9:0a:
20:73:68:e7:12:fc:18:e1:03:de:b8:01:f6:8f:27:6b:a0:a6:
04:ab:df:be:fa:7a:e3:28:7d:42:06:2b:71:e3:b4:0d:ef:c6:
61:ee:cc:98:c5:c8:fe:14:42:bc:65:77:00:d4:6c:69:bc:bd:
0c:65:3f:95:ba:00:72:6f:d3:ef:68:a5:a9:00:c6:c0:61:da:
ee:48:8f:4c:4e:1c:cc:00:9c:f6:bf:72:f4:ef:74:c0:b0:33:
5c:97:f2:95:30:d9:0c:f5:62:85:5b:c5:8f:01:2f:5c:54:32:
a4:20:47:ea:a4:a9:93:1d:00:99:ec:5f:8a:d3:45:3f:9d:6e:
16:70:0b:1b:cc:63:aa:40:4e:34:1b:c7:00:07:81:07:79:b8:
e6:32:1c:b4:28:22:b0:26:ca:fd:d3:3f:02:66:10:94:37:f0:
56:06:1e:f0:d4:be:5f:7a:4e:3c:c1:b7:3d:65:5a:b0:53:a0:
c8:a2:41:96:b8:27:cc:a6:95:85:af:f1:22:57:d0:59:50:ee:
1b:7d:40:95:34:76:96:e4:b2:04:46:da:ad:95:8e:33:1f:2f:
fa:58:1f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org