Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Oufxvk0INi0tI8iBT0OASbq3Y20.roa
File: Oufxvk0INi0tI8iBT0OASbq3Y20.roa (raw, json)
Hash identifier: lHoN4gKlJMEpOj7eVwcCmTPM/sjm6XCIytSsH8ehHp8=
Subject key identifier: 3A:E7:F1:BE:4D:08:36:2D:2D:23:C8:81:4F:43:80:49:BA:B7:63:6D
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018A7B1D4CCE9FF030E899E246BE121C4537
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Oufxvk0INi0tI8iBT0OASbq3Y20.roa
Signing time: Sat 09 Sep 2023 18:03:52 +0000
ROA not before: Sat 09 Sep 2023 18:03:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42689
IP address blocks: 93.89.213.0/24 maxlen: 24
93.89.208.0/24 maxlen: 24
93.89.209.0/24 maxlen: 24
93.89.210.0/24 maxlen: 24
93.89.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7b:1d:4c:ce:9f:f0:30:e8:99:e2:46:be:12:1c:45:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Sep 9 18:03:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ae7f1be4d08362d2d23c8814f438049bab7636d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:76:2a:d6:f3:b7:c2:99:ce:2c:10:1e:4a:
62:3e:a1:42:01:c0:09:37:2a:e0:a1:4e:40:89:c7:
07:3a:97:77:77:81:a2:fe:89:ec:f4:d1:cd:ca:77:
93:ae:61:eb:a8:75:8e:7f:76:ba:3a:8e:a9:5c:f0:
37:8a:0b:8e:aa:c7:8d:39:12:b3:a2:4f:ff:55:a5:
be:53:bb:79:86:56:6d:2e:e6:79:26:90:17:4a:f3:
86:81:4d:81:d1:cb:f6:08:29:71:f9:49:01:d2:04:
19:88:61:84:41:de:25:cb:cb:2b:07:97:6c:af:c7:
f9:df:50:92:8c:9a:1f:4f:4d:ae:0f:93:72:3c:b0:
e4:04:e1:95:c8:f6:8c:08:e7:24:e3:d2:3f:44:80:
2e:63:31:29:b2:de:56:92:86:2f:b0:5c:6f:fc:b8:
27:50:67:37:46:9b:22:6e:61:26:2e:34:ab:31:fc:
24:29:32:fd:c1:1f:dc:28:da:04:c5:17:a8:1d:c7:
ad:c8:f1:f8:0f:77:55:ae:5a:26:70:44:50:a4:30:
b9:cb:83:79:0f:08:31:27:dc:95:d0:19:dd:82:4b:
9d:59:83:ea:e5:c7:69:8e:92:83:35:1b:db:12:12:
83:7c:9f:95:57:d7:98:7a:85:2b:c9:a2:bc:a4:e2:
0e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E7:F1:BE:4D:08:36:2D:2D:23:C8:81:4F:43:80:49:BA:B7:63:6D
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Oufxvk0INi0tI8iBT0OASbq3Y20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.208.0-93.89.210.255
93.89.213.0-93.89.214.255
Signature Algorithm: sha256WithRSAEncryption
71:3c:a4:44:d6:df:14:43:be:80:1b:4a:56:37:91:af:2a:37:
77:68:1a:2c:c0:97:8b:10:27:0f:e5:6f:a2:73:26:04:80:e1:
03:c7:57:06:32:ea:1d:eb:50:21:d0:43:e6:73:4b:18:f9:02:
7b:1b:2b:fb:92:4f:64:35:60:f0:07:39:bd:2d:b3:f7:34:75:
d5:0e:c9:95:33:50:83:ad:17:be:32:1a:8b:de:64:e2:a8:6c:
92:d0:83:7f:f4:fb:94:be:07:a1:1a:e5:dd:a1:b3:67:67:4f:
2b:4e:3b:51:32:80:4d:b1:fb:e6:69:0a:6b:fa:dc:62:82:d7:
e4:7d:77:f0:98:c6:df:8a:b7:09:de:8e:d2:34:15:8b:42:12:
ea:a9:05:94:91:90:eb:53:fe:0c:1e:f3:16:e4:29:87:aa:d9:
69:42:83:17:d4:2c:55:d4:12:da:58:47:2e:4f:19:be:41:44:
62:58:d6:99:72:8f:84:2f:b6:b8:e6:54:bd:74:bf:d1:f5:18:
bc:2b:18:95:95:48:b2:c5:d0:75:a3:cd:61:8d:cd:25:07:05:
a2:61:90:4f:ab:c7:5c:6d:b7:64:df:cd:a1:e2:cd:7b:6b:2b:
a2:ac:39:53:9b:a3:85:28:b3:6b:82:ea:60:f9:fa:de:a4:74:
d2:e7:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:37 2024 by rpki-client on console-ams.rpki-client.org