Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/VIHKdHzuyU4NN04sJXplIhO92GE.roa
File: VIHKdHzuyU4NN04sJXplIhO92GE.roa (raw, json)
Hash identifier: ic1gnUPoVpu30WhtljOYYmWDrBevap+Yi1bM1Eu+mIg=
Subject key identifier: 54:81:CA:74:7C:EE:C9:4E:0D:37:4E:2C:25:7A:65:22:13:BD:D8:61
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018A70D05C5B92E0DA7D1E2B37A580B9F175
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/VIHKdHzuyU4NN04sJXplIhO92GE.roa
Signing time: Thu 07 Sep 2023 18:03:37 +0000
ROA not before: Thu 07 Sep 2023 18:03:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 93.89.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:70:d0:5c:5b:92:e0:da:7d:1e:2b:37:a5:80:b9:f1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Sep 7 18:03:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5481ca747ceec94e0d374e2c257a652213bdd861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:04:a6:0d:7d:b2:43:df:09:60:43:f6:19:98:
fb:bf:bc:ad:b6:c7:78:1f:16:de:1e:30:ab:e6:b3:
d1:48:c4:c5:f4:b9:89:b8:bd:a0:75:cc:f0:96:70:
57:d7:e2:fe:22:92:c0:75:e2:63:c3:11:d1:ee:88:
e2:3b:60:8a:47:75:de:be:16:f6:3f:16:3b:50:4a:
8d:d0:b8:cb:14:0c:ec:01:11:73:4a:3b:73:5b:1d:
dd:9a:8b:35:e2:6e:ec:63:67:09:1d:9d:57:d6:a3:
aa:40:eb:63:78:b8:2e:a9:40:8e:b5:b8:87:ce:ad:
f2:46:02:60:b0:85:91:06:46:02:17:37:8e:50:f1:
3e:64:c2:0d:15:fa:d2:94:0f:b3:77:81:83:13:db:
f4:0b:9c:23:41:1a:47:be:3e:c9:9f:ae:b0:e8:08:
8b:bf:1b:e0:82:a3:bf:cb:ef:c2:a8:f1:d7:d3:64:
05:b7:c6:7e:71:d2:15:46:4b:fb:37:1b:20:74:78:
ae:17:36:b2:dd:ac:80:c4:72:2e:cf:bd:66:03:6e:
6e:28:aa:fb:42:3c:9e:49:21:ce:91:8d:74:e8:44:
b9:c6:01:97:f8:b1:9c:94:c3:be:51:93:1b:b5:a7:
f1:35:2d:57:e2:a2:31:d5:04:87:b4:20:49:b9:15:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:81:CA:74:7C:EE:C9:4E:0D:37:4E:2C:25:7A:65:22:13:BD:D8:61
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/VIHKdHzuyU4NN04sJXplIhO92GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.213.0/24
Signature Algorithm: sha256WithRSAEncryption
89:99:f3:7f:5b:20:b2:66:62:ec:23:a3:8c:3a:e7:de:bb:c5:
0a:30:83:e6:15:45:a1:7e:6e:b2:95:e5:1d:b9:28:c2:4a:4d:
f1:5d:aa:4c:3c:74:99:b6:fd:b3:01:59:89:0c:ea:4d:b1:0f:
e9:43:a8:ca:50:03:33:10:46:6c:2b:6f:46:09:94:58:e8:ee:
c0:a7:bf:5d:ec:0f:bd:74:95:dc:f3:29:b1:fc:1c:07:c6:02:
d2:b6:bf:4d:61:17:db:cb:76:2b:ed:09:af:03:05:44:6a:47:
7e:a9:cd:96:94:1f:75:ed:4f:8c:f3:df:39:b2:b8:b7:f9:7b:
ee:f2:29:3b:e7:d3:c3:af:38:aa:aa:2b:55:bc:42:f0:d4:da:
ec:d9:46:7c:7f:83:96:3b:87:ba:55:fc:01:66:2a:d9:04:32:
c7:18:b1:78:10:cd:ab:ce:78:fd:f5:65:6d:3c:c1:f0:02:b3:
da:37:dd:e7:36:0b:f8:f7:0e:40:c3:ef:02:ad:fc:ff:97:1d:
8b:ec:4a:02:17:fb:06:6d:54:cd:6a:d2:d1:4b:2c:f2:95:d5:
e9:2f:69:32:7f:3d:f0:f5:ba:7e:2e:63:07:c9:47:27:cc:dd:
27:ed:9f:90:c5:9a:49:84:71:d7:20:65:1c:5f:b9:ba:6b:37:
6e:45:53:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 9 18:38:51 2023 by rpki-client on console-fra.rpki-client.org