Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/O56KIMVJsVEQ0wlR6dUc4SG4ezw.roa
File: O56KIMVJsVEQ0wlR6dUc4SG4ezw.roa (raw, json)
Hash identifier: 6ApIWC6bl5p6zNqiHO0KirMXUhsejDqfQpT7R8eVAEw=
Subject key identifier: 3B:9E:8A:20:C5:49:B1:51:10:D3:09:51:E9:D5:1C:E1:21:B8:7B:3C
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01887CF68ABA6C632FC4CFE6F3FE9DD6532B
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/O56KIMVJsVEQ0wlR6dUc4SG4ezw.roa
Signing time: Fri 02 Jun 2023 16:35:12 +0000
ROA not before: Fri 02 Jun 2023 16:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 93.89.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Jun 2023 15:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:f6:8a:ba:6c:63:2f:c4:cf:e6:f3:fe:9d:d6:53:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jun 2 16:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b9e8a20c549b15110d30951e9d51ce121b87b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ba:c4:a6:69:1d:cc:5e:72:f1:95:87:b3:61:
7f:e3:e9:2b:4f:1f:26:9a:af:b1:45:8f:3d:53:5e:
0e:01:07:6f:35:5a:15:e4:41:82:ee:53:c3:37:ae:
53:47:00:14:e2:b6:e5:c3:39:54:8a:ce:3a:40:43:
82:9e:34:0b:ca:a5:31:ab:a8:bb:9f:19:07:bb:52:
05:12:6c:81:77:6e:ad:e6:3f:65:1a:1a:d7:e5:5c:
dd:d7:3b:8c:8b:80:21:2f:ab:f2:f0:1d:93:5e:d2:
4e:b5:45:5d:01:21:b3:de:a8:3f:d5:ee:61:3d:3e:
1b:88:41:dc:2c:cd:fe:7d:59:2b:58:82:c5:74:5d:
a7:d1:59:b9:fa:28:8e:e7:a4:75:0c:f0:b8:84:5c:
2a:77:fb:7d:e5:6c:18:b9:8e:2b:a7:5a:22:2f:b9:
09:2e:34:62:3d:80:63:23:11:1f:7c:e5:84:10:1f:
58:05:bd:eb:8e:2d:01:67:cb:4f:80:d1:4b:27:9f:
02:8d:d9:73:25:1d:8e:53:00:61:37:ce:e8:05:87:
f3:52:56:b4:91:a7:5a:34:3e:b0:ab:cd:47:7e:2e:
cc:ad:b9:27:14:81:5a:09:ef:24:00:60:7b:cb:1c:
1e:c7:e8:54:3e:95:02:5b:7e:da:c1:25:cf:33:8b:
51:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9E:8A:20:C5:49:B1:51:10:D3:09:51:E9:D5:1C:E1:21:B8:7B:3C
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/O56KIMVJsVEQ0wlR6dUc4SG4ezw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.217.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4d:75:24:ff:c9:ac:08:bb:07:85:bb:7e:df:28:7d:70:a1:
3e:c3:b3:9c:82:58:38:09:44:e9:1f:78:96:9f:81:27:a7:43:
cb:fe:0a:fb:35:ef:5f:ba:75:61:ab:d1:da:c2:5a:01:be:cc:
bd:24:36:5e:6b:16:ca:a1:b9:5b:8e:b6:2d:a0:74:27:83:39:
d4:c9:2d:50:8e:fb:e8:3a:d5:5d:23:f1:ff:4d:4c:94:6e:49:
b6:83:62:a5:ba:5c:23:b1:4d:1f:77:b2:76:f7:09:b5:13:8f:
29:05:59:7c:62:43:70:bf:ad:fb:67:e3:ac:75:7c:b0:cd:21:
98:ab:3f:9e:7a:23:6f:d0:d8:5f:05:ab:64:23:9f:22:04:b5:
8e:85:1f:a6:28:da:67:b8:7f:8d:f2:48:d5:e8:b6:de:b1:7e:
0d:a8:34:b3:1a:cc:85:38:70:1c:f9:eb:bb:13:f7:b9:60:e8:
41:e9:b0:a7:70:19:11:0c:1d:09:9d:88:a0:27:69:39:e9:c1:
74:6d:64:f5:7f:82:63:3d:04:3b:4c:f8:96:88:f0:7c:9b:57:
20:a7:1f:65:4e:a3:64:d7:cc:8a:1b:87:df:37:42:40:e1:c9:
03:4d:a8:10:40:1e:93:27:18:54:41:74:ef:2b:c0:b2:b6:74:
5e:6e:15:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org