Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/GZObsRwO_OyT6nGvbPSKWCwsrvw.roa
File: GZObsRwO_OyT6nGvbPSKWCwsrvw.roa (raw, json)
Hash identifier: eROjdZb5KuWgJVFwIPv/kfJzGcBmmCIVNdFofYPg9yw=
Subject key identifier: 19:93:9B:B1:1C:0E:FC:EC:93:EA:71:AF:6C:F4:8A:58:2C:2C:AE:FC
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0187C437A7B4CE4806ABED87A6722BAFB331
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/GZObsRwO_OyT6nGvbPSKWCwsrvw.roa
Signing time: Thu 27 Apr 2023 19:36:34 +0000
ROA not before: Thu 27 Apr 2023 19:36:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 91.193.252.0/24 maxlen: 24
93.89.217.0/24 maxlen: 24
93.89.218.0/24 maxlen: 24
93.89.216.0/24 maxlen: 24
93.89.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 10:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c4:37:a7:b4:ce:48:06:ab:ed:87:a6:72:2b:af:b3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Apr 27 19:36:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19939bb11c0efcec93ea71af6cf48a582c2caefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:21:70:00:94:fd:ce:86:ef:3d:af:05:c0:
36:b7:4c:e8:ed:58:25:88:82:0c:fa:da:5b:e1:0a:
e2:78:22:a6:6b:a6:dd:2b:2e:b7:52:9d:2b:26:a4:
23:a8:3f:90:30:f4:cc:83:6c:15:62:90:ab:10:d3:
f8:f1:58:aa:d8:e2:68:67:71:99:3d:9d:08:2c:d4:
fa:6a:64:1e:13:2f:63:a4:2b:99:a6:13:9e:40:1b:
f1:dc:c3:f9:92:2f:37:70:aa:ca:cf:14:fb:d3:ad:
ec:4d:ea:02:aa:28:b6:0e:31:15:c2:b1:4c:0a:38:
8e:b3:dc:42:fc:35:db:17:0f:91:61:e2:23:c7:28:
2a:74:f8:53:3f:f5:d5:94:1b:84:be:6f:db:1d:63:
b0:2e:4b:73:61:05:5e:e9:f8:79:e2:db:ec:4e:75:
6e:36:af:3b:ae:2a:01:45:03:1d:fe:e4:c2:e4:08:
59:ab:83:89:1a:2c:72:17:d2:84:dd:60:25:50:e9:
a1:1b:25:e4:70:0d:2a:5c:57:d8:06:3b:9c:57:26:
68:79:a6:c9:15:d5:08:65:cf:ff:b0:ff:49:b9:82:
5c:ae:04:88:44:0f:33:23:48:6c:55:fb:c4:6e:d9:
80:b4:0e:8e:03:fd:dd:6d:31:56:3b:2a:84:ce:98:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:93:9B:B1:1C:0E:FC:EC:93:EA:71:AF:6C:F4:8A:58:2C:2C:AE:FC
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/GZObsRwO_OyT6nGvbPSKWCwsrvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.252.0/24
93.89.216.0-93.89.218.255
93.89.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:55:50:90:7d:b7:f3:2d:73:f4:3e:ea:59:bf:a8:19:1c:7a:
d1:7d:7c:21:93:e6:31:23:c0:73:11:77:6f:34:9f:0e:87:de:
15:26:f2:9b:b3:d3:68:9a:ed:cb:15:b6:6e:07:e5:70:48:e3:
a3:10:05:ee:d8:53:55:84:85:d6:6b:31:e9:ad:86:f8:e9:56:
db:14:34:b4:2f:83:c3:3b:a9:d0:b4:16:a1:85:76:d0:85:bb:
63:35:28:59:c1:4d:63:cd:85:0a:44:17:17:b9:c6:ff:eb:01:
fa:bd:0f:62:6d:a3:41:a2:a6:32:db:28:12:bb:d3:c0:5e:80:
a5:ff:b8:33:b9:75:1c:06:c3:39:1c:54:c3:6c:38:c6:9c:57:
ac:34:de:6f:37:a6:ef:1e:37:df:b9:3a:94:0a:6e:30:0f:81:
e3:5c:70:c9:ef:ed:52:9c:5a:4b:3c:14:4f:e6:17:ae:86:17:
81:46:ee:b0:6a:ea:e7:4e:ef:5f:18:b8:8c:7b:f6:8d:19:03:
71:f2:71:f9:46:3e:b1:a0:66:43:f2:71:1b:e2:57:e1:02:ab:
da:66:89:8d:ef:a2:be:7a:14:f8:16:fd:ed:f3:89:b9:8b:5f:
e4:7c:ae:86:7d:1c:44:dc:0b:09:93:a5:ac:2d:6b:4a:39:d4:
dd:45:3f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org