Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/MPygMi7mA_K0znBYt7mZtSP4xDk.roa
File: MPygMi7mA_K0znBYt7mZtSP4xDk.roa (raw, json)
Hash identifier: Xacp2BD3EmTHVhcOWQtsMGVMjeOsSHVIPTlSM8SIFYM=
Subject key identifier: 30:FC:A0:32:2E:E6:03:F2:B4:CE:70:58:B7:B9:99:B5:23:F8:C4:39
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01877E783BB38AD8305EB43C1CD3C5963DD9
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/MPygMi7mA_K0znBYt7mZtSP4xDk.roa
Signing time: Fri 14 Apr 2023 06:33:41 +0000
ROA not before: Fri 14 Apr 2023 06:33:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 93.89.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jul 2023 10:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7e:78:3b:b3:8a:d8:30:5e:b4:3c:1c:d3:c5:96:3d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Apr 14 06:33:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30fca0322ee603f2b4ce7058b7b999b523f8c439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:71:68:50:69:4e:25:41:4a:5c:d4:14:8a:7b:
64:4a:5c:fb:37:a6:be:87:a0:82:e2:01:40:92:a8:
5e:1a:d2:6d:3d:9d:b1:7e:b9:d4:f5:6e:ef:18:c3:
bb:46:c3:74:78:28:bb:e4:26:be:68:36:e2:4c:ac:
13:aa:db:5b:12:9b:e1:f2:3b:c8:ce:38:cc:8e:c6:
f7:b5:28:26:f8:ba:e1:cd:29:0f:8d:3a:ec:4c:7f:
b9:f6:20:98:eb:a0:5a:31:e0:6a:22:42:36:01:94:
58:e4:94:b6:53:36:4b:4f:41:5c:c7:53:36:29:d5:
9c:d0:84:89:20:fe:46:06:0b:75:74:bc:dc:1e:49:
74:26:26:16:70:6a:7d:58:38:22:a8:19:f6:57:95:
b8:78:9f:92:68:8e:28:23:3d:c7:bd:15:a6:bc:3d:
96:bf:a4:85:e5:ae:31:62:48:eb:87:58:07:c3:94:
3b:c6:18:23:3e:2f:1d:75:8a:a8:a6:62:eb:a9:89:
ba:52:63:ee:98:4a:27:be:82:58:77:71:54:f8:c6:
ed:fa:7a:50:07:e0:c8:49:58:f9:18:a0:d0:81:a6:
fb:83:62:10:49:c8:d8:f3:bb:67:4f:db:ad:6b:9c:
23:4f:86:fc:6c:32:aa:32:a7:a4:09:53:69:7a:10:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FC:A0:32:2E:E6:03:F2:B4:CE:70:58:B7:B9:99:B5:23:F8:C4:39
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/MPygMi7mA_K0znBYt7mZtSP4xDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.213.0/24
Signature Algorithm: sha256WithRSAEncryption
86:55:6c:02:9e:85:12:f2:08:50:12:bc:e6:2c:f3:2f:97:8a:
2a:87:7d:e8:29:02:df:68:06:83:1b:af:9f:43:5b:1e:a6:e6:
b6:81:61:bb:ca:63:f2:69:d1:d0:b9:14:e8:ee:b5:90:ee:f8:
b6:86:7f:27:58:15:e1:a6:15:0b:ef:b1:07:a4:b5:97:eb:d8:
b1:93:89:33:b2:2a:22:85:ad:16:a8:44:93:ca:ed:42:8e:9c:
1a:1d:3e:ed:32:0f:de:31:7f:bf:87:cb:b5:79:19:18:c5:28:
42:ef:bb:ea:32:7c:95:c2:00:93:70:f2:ad:cf:38:29:24:6b:
0d:51:8c:33:6b:b4:fd:55:44:77:29:e5:e5:94:28:d8:d6:f9:
de:48:c9:ea:e8:f7:7d:83:cc:32:c7:ad:93:be:12:18:60:24:
e1:36:57:56:e0:6c:21:6e:21:a9:73:b1:8b:4d:e7:09:15:91:
d2:d4:41:77:37:68:be:a5:27:00:35:1a:d1:77:8d:18:c9:2e:
73:9e:3c:40:33:16:2b:d4:d0:03:98:f6:24:14:9f:52:f8:11:
31:94:35:91:89:d9:b3:06:55:c6:d6:c6:43:75:72:a8:b0:a4:
92:1f:0b:8d:e1:4a:d0:41:4e:c5:c6:18:82:d3:49:5d:44:58:
c3:67:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org