Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/L2rJHYZryVk7GQsIDYv4GBlM-eE.roa
File: L2rJHYZryVk7GQsIDYv4GBlM-eE.roa (raw, json)
Hash identifier: KwcEdqrE0CzhIUIbG8+lLPjNKx0sWQxtR1hLbCEL81M=
Subject key identifier: 2F:6A:C9:1D:86:6B:C9:59:3B:19:0B:08:0D:8B:F8:18:19:4C:F9:E1
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01896D10882607F450BAB3D38FC41F7B91A5
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/L2rJHYZryVk7GQsIDYv4GBlM-eE.roa
Signing time: Wed 19 Jul 2023 07:32:27 +0000
ROA not before: Wed 19 Jul 2023 07:32:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 93.89.211.0/24 maxlen: 24
193.109.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Sep 2023 21:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:10:88:26:07:f4:50:ba:b3:d3:8f:c4:1f:7b:91:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 19 07:32:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f6ac91d866bc9593b190b080d8bf818194cf9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:12:02:43:95:49:76:2e:53:9f:e6:d7:92:
ac:74:00:fe:85:f0:13:d8:03:1d:e1:a1:85:57:8a:
7a:c9:23:c6:bc:af:c2:dd:1c:76:34:5d:aa:49:8e:
24:38:d4:ea:00:c4:6c:7f:fb:9b:d7:79:ac:d2:e7:
6f:7f:84:4f:ac:b4:c1:30:91:58:4f:3f:23:ba:5a:
43:70:62:e6:38:d7:d6:90:d4:68:ba:16:46:30:53:
46:be:63:45:55:06:15:83:ce:7a:e6:46:7d:40:a4:
07:11:48:d3:0f:15:de:f6:91:40:72:de:34:56:7c:
82:90:91:41:ca:ed:88:cd:59:5a:65:62:ad:bd:45:
b1:2a:9b:e9:b6:d0:7a:e1:28:aa:36:f2:6b:e5:38:
56:3d:0b:56:e8:c1:bd:fa:88:f1:cb:53:d0:d6:d1:
09:6e:ec:2b:f0:e5:6d:ee:64:42:0a:96:47:3a:da:
0c:e4:b8:73:67:07:dd:73:30:a5:2b:58:d8:f2:06:
67:13:e3:ea:b8:60:30:30:5e:77:27:a1:43:60:af:
30:ad:56:4a:29:da:c8:52:8b:3a:ab:c0:fa:c9:6d:
e2:c5:41:16:03:d6:6d:07:e0:1b:d7:3a:9a:a6:9a:
3e:9a:77:d3:60:ca:b5:8b:87:6f:59:96:3f:c9:f9:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6A:C9:1D:86:6B:C9:59:3B:19:0B:08:0D:8B:F8:18:19:4C:F9:E1
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/L2rJHYZryVk7GQsIDYv4GBlM-eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.211.0/24
193.109.160.0/22
Signature Algorithm: sha256WithRSAEncryption
22:12:d3:46:3c:36:a8:f3:d1:d4:2d:40:a4:09:f4:fb:4f:c0:
2a:5e:89:63:98:27:99:e7:22:40:80:b8:ac:4f:5a:64:1d:3d:
fc:ba:85:54:0a:25:7c:72:76:64:84:4b:af:a3:26:1f:d0:d0:
27:35:41:9a:82:44:5b:9f:17:55:d1:d5:8b:ed:88:1d:15:54:
a7:f9:cf:97:af:fa:d8:f9:e4:f3:08:2e:2b:13:69:84:72:21:
1b:ed:18:fa:0b:9e:09:c7:8a:93:3e:fa:dd:b2:8f:9f:47:7a:
ba:a0:76:7d:67:21:47:c2:95:d7:a5:27:39:e5:c5:1f:2f:a0:
8b:55:40:be:61:ec:55:af:d1:b7:22:c8:bd:cc:cb:cd:09:bc:
34:c0:ac:13:77:33:55:14:7f:2e:85:fc:74:4f:d0:43:54:b1:
f0:c8:66:36:0e:39:db:84:b6:c0:c9:42:2e:4f:4d:1a:0a:16:
d9:4b:4a:f6:7a:f4:78:3c:ac:6f:84:50:80:a3:e6:1c:3e:54:
5b:68:f1:31:a8:e9:5b:34:88:55:75:45:fb:be:6b:87:f3:3a:
c1:22:22:27:df:54:44:c4:a0:ea:62:58:fe:fa:19:a6:fc:f3:
26:be:81:7f:34:5e:8d:3b:4c:fd:48:c9:44:67:54:24:2d:92:
02:ac:ca:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org