Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/PkJzZOIRKqC5mRhIQRFOWKy7p2k.roa
File: PkJzZOIRKqC5mRhIQRFOWKy7p2k.roa (raw, json)
Hash identifier: Fgb9epWViiJryVEyGPw5ewF03j9BCAu2XkQDQK39oOc=
Subject key identifier: 3E:42:73:64:E2:11:2A:A0:B9:99:18:48:41:11:4E:58:AC:BB:A7:69
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0189E4DFE886535C87B7EF08D5CE5E7E34A8
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/PkJzZOIRKqC5mRhIQRFOWKy7p2k.roa
Signing time: Fri 11 Aug 2023 13:53:46 +0000
ROA not before: Fri 11 Aug 2023 13:53:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 93.89.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:df:e8:86:53:5c:87:b7:ef:08:d5:ce:5e:7e:34:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 11 13:53:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e427364e2112aa0b999184841114e58acbba769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9a:4b:53:7a:08:3a:86:dc:0c:cb:07:13:bb:
0e:7d:e2:b3:54:ec:40:5a:c3:3e:f5:36:17:d8:6f:
cc:53:ad:b3:4f:8a:a1:94:df:c0:2e:15:1d:b6:5e:
58:bf:7c:e8:5d:9a:e0:08:06:56:b8:4c:9d:dc:d8:
60:3d:1d:4a:40:cd:d4:66:9c:82:3b:71:3e:1b:07:
7e:0a:91:6e:ba:40:ef:f0:02:67:97:f9:5e:ec:28:
6c:a9:4d:47:93:8a:c0:14:5c:fd:74:0a:d5:0c:e9:
ca:f4:b8:66:41:a9:7f:5c:5f:81:38:ab:4a:bf:b8:
ff:59:1e:b5:0c:ce:dc:60:21:c9:86:e0:11:46:1b:
f7:4a:65:e3:7c:df:1a:b9:50:eb:94:1a:ac:3d:fd:
0d:79:ed:94:b3:c4:e3:35:d5:35:2f:ce:78:15:2d:
58:b1:fa:9a:f5:80:f2:96:71:2b:c7:06:00:26:97:
82:b9:cd:10:c4:35:46:43:54:1c:57:ea:ab:2b:55:
95:b3:9f:50:3d:66:a8:d3:97:23:a9:5c:bf:51:5b:
4d:c4:47:88:97:b5:36:90:e9:1b:ba:37:19:dd:1a:
ab:76:fc:9a:25:b0:49:4e:2c:67:0c:98:f4:91:9e:
7e:cb:d0:84:72:94:6a:89:97:5e:81:9c:67:93:b6:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:42:73:64:E2:11:2A:A0:B9:99:18:48:41:11:4E:58:AC:BB:A7:69
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/PkJzZOIRKqC5mRhIQRFOWKy7p2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5d:d2:b7:16:8d:48:6b:27:42:f6:2b:59:47:fa:53:a8:5b:
0e:dd:7f:c7:01:2d:5f:51:55:f4:b2:0a:57:4d:f7:8a:cd:a5:
b2:fc:63:a7:59:ad:32:6e:9a:4c:e7:1f:2f:a6:0d:ca:6e:ae:
c7:fd:7c:f2:87:57:a2:cc:39:81:01:42:48:0a:eb:17:8c:c0:
9f:e2:75:45:48:99:a1:6e:1e:65:55:e5:52:2e:28:e7:dc:44:
6f:86:1b:92:a9:41:3d:68:b5:20:51:a5:cf:13:e6:69:b1:47:
3b:ae:74:ee:ea:9c:15:18:81:e0:d1:7b:5e:e3:29:17:7f:e1:
9c:eb:e5:ab:d8:d4:b0:16:0a:83:42:fc:95:e1:33:65:0f:60:
06:5a:b0:65:40:2b:63:47:5d:9b:14:3e:08:2f:20:74:f3:22:
82:3e:e4:70:7e:c7:73:fc:3a:c3:28:16:e0:ca:cf:b9:d0:79:
0c:90:54:0c:e6:6b:bd:13:55:7c:3f:85:f7:0c:6b:65:c3:40:
c9:82:2a:1e:7b:89:12:f8:3b:74:23:3f:b8:c2:63:ce:22:86:
3f:3b:4b:f6:06:4b:2c:11:58:76:ce:6f:77:22:ea:a0:30:fe:
eb:54:7f:61:f5:8b:b0:b5:2a:ef:ef:ea:3d:84:16:cb:be:da:
6b:fe:39:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org