Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/CxbkMs6uAq0EWWOJrYzphLs2F_M.roa
File: CxbkMs6uAq0EWWOJrYzphLs2F_M.roa (raw, json)
Hash identifier: vr8cv7IAZnX29f/L1ncP/tdBM7YkFg4jlVvo9r224wk=
Subject key identifier: 0B:16:E4:32:CE:AE:02:AD:04:59:63:89:AD:8C:E9:84:BB:36:17:F3
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0187E6F422A28A3124AED86C91447C6C24C6
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/CxbkMs6uAq0EWWOJrYzphLs2F_M.roa
Signing time: Thu 04 May 2023 13:29:32 +0000
ROA not before: Thu 04 May 2023 13:29:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 93.89.217.0/24 maxlen: 24
93.89.215.0/24 maxlen: 24
93.89.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 May 2023 08:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:f4:22:a2:8a:31:24:ae:d8:6c:91:44:7c:6c:24:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: May 4 13:29:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b16e432ceae02ad04596389ad8ce984bb3617f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:ee:d5:60:6d:e5:80:1d:e4:1d:3e:79:84:
18:50:d3:8c:64:04:69:28:8c:36:2f:34:70:4d:82:
d6:13:31:1f:0a:6c:a8:3d:7f:eb:e4:83:c5:ed:85:
ce:cd:1d:0d:2a:10:63:cf:1e:37:08:5c:48:ae:9f:
0e:53:cf:e2:8e:7b:c2:35:ea:b4:be:6c:f9:67:5b:
5e:5c:42:a0:41:0b:63:0f:3f:ed:4d:a9:19:d3:b0:
0f:3d:70:cc:ef:4a:ac:f0:6b:09:ac:9f:eb:ca:68:
56:12:83:19:c0:cb:64:7f:1a:0b:a2:09:e5:ab:44:
5d:2c:3b:e5:9e:03:20:d0:f0:a5:c5:0e:42:e7:d7:
64:43:a7:78:b7:fe:26:21:b5:3b:66:1f:0a:d8:9b:
12:b1:ea:14:13:bb:61:01:fd:29:f0:f1:f3:b7:86:
d2:9e:d3:83:41:60:f1:3b:a1:a3:98:ec:a2:5c:49:
d9:4b:05:bc:29:6e:92:7a:d7:55:92:2e:f8:01:92:
52:6c:46:16:d5:be:f2:48:84:ed:e9:aa:60:aa:66:
e3:24:91:aa:03:c3:d9:a3:51:20:5a:34:b4:98:4e:
13:07:4b:3a:dc:c1:10:28:a7:f1:17:dc:3c:b8:c8:
a6:a7:07:59:79:c9:fe:47:b0:08:6a:a7:a1:71:f5:
6f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:16:E4:32:CE:AE:02:AD:04:59:63:89:AD:8C:E9:84:BB:36:17:F3
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/CxbkMs6uAq0EWWOJrYzphLs2F_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.215.0-93.89.217.255
Signature Algorithm: sha256WithRSAEncryption
ad:bd:ef:f6:cc:78:d2:d8:6f:34:c2:6c:59:23:85:37:94:bc:
52:95:20:f0:9b:92:c3:b2:b9:59:47:3c:d6:60:eb:00:6c:80:
12:97:08:2f:07:d1:67:7d:ca:8e:fc:11:b9:03:37:e0:f2:ab:
46:f9:af:81:65:a7:07:a3:9b:0b:74:d1:2c:84:62:78:6e:c8:
58:e3:f3:37:d8:e7:95:f0:13:3a:ff:ec:05:b1:6f:9a:89:25:
cb:7b:dc:c2:5a:c6:51:f3:bb:05:63:88:3b:eb:58:1a:fc:66:
01:32:3d:18:ce:7e:0e:d5:8f:91:08:e5:45:9c:77:cf:db:e4:
98:10:d6:a4:ec:52:4b:44:51:e8:2c:85:ea:ec:90:96:d8:c5:
65:a1:8a:4a:bb:4c:01:0f:ea:a6:e2:d9:88:c9:fe:88:d1:68:
10:05:09:88:ba:e3:66:e6:25:a8:9b:e7:31:94:13:70:98:5e:
35:61:60:62:d2:f5:ff:87:bf:a1:2b:06:57:bf:44:ac:6a:d1:
f3:1f:50:15:fe:bd:fa:5e:45:df:24:82:85:f5:84:6a:4d:28:
8b:29:aa:db:be:7a:09:61:ee:b7:47:b3:64:78:02:c4:2d:ab:
6c:85:6f:af:98:a0:42:c5:d4:7e:62:6a:66:f1:61:04:85:17:
ca:dd:d0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org