Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/W1FEownRr1HleI4NDiCoFhzpn6E.roa
File: W1FEownRr1HleI4NDiCoFhzpn6E.roa (raw, json)
Hash identifier: r1aVxDyPaQgEZu88yrhpB2jTRc8Qf567uU8PCj6hsB8=
Subject key identifier: 5B:51:44:A3:09:D1:AF:51:E5:78:8E:0D:0E:20:A8:16:1C:E9:9F:A1
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01888C7F96A4D85503B43E9B310A452F0EBC
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/W1FEownRr1HleI4NDiCoFhzpn6E.roa
Signing time: Mon 05 Jun 2023 16:59:11 +0000
ROA not before: Mon 05 Jun 2023 16:59:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 93.89.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 21:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:7f:96:a4:d8:55:03:b4:3e:9b:31:0a:45:2f:0e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jun 5 16:59:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b5144a309d1af51e5788e0d0e20a8161ce99fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:df:e5:c5:58:b3:be:12:28:0b:eb:79:20:
69:51:27:ea:0d:5b:8b:f1:50:04:69:ca:82:f5:38:
6d:fe:c9:2d:3a:89:34:fb:06:80:4e:ed:3c:10:3d:
5f:d0:6c:33:97:a7:52:00:9f:05:50:a4:7c:7d:87:
ca:2a:de:6b:4c:5d:72:7d:f2:66:18:eb:f8:4a:c2:
d0:5f:ea:39:89:06:f4:fb:76:bd:c6:f0:44:40:b4:
39:86:77:12:8a:00:db:94:80:21:f3:11:04:55:02:
d8:1e:bc:ef:dc:d7:5e:f8:87:80:53:e3:f4:4c:de:
c5:07:c6:21:d4:5f:f3:df:6a:95:2d:e4:e9:d5:61:
db:e6:6d:d7:7f:c4:e0:8e:a1:15:eb:98:6f:92:a7:
a6:e5:45:93:80:e0:b1:39:b0:7a:32:d9:b6:61:cc:
2d:b6:a9:29:8d:a5:7b:b5:7e:31:05:a0:f6:34:b2:
da:0d:32:21:18:5a:2a:4a:3f:ff:60:58:ee:c4:ee:
74:6a:cc:6f:95:13:a8:40:67:a1:56:dd:66:c5:a3:
96:17:a5:4d:5e:1e:78:b5:57:42:04:08:00:8e:a2:
0d:18:24:d5:6c:a2:2b:b2:3e:20:81:7e:a0:1d:32:
99:f8:8c:c0:ed:7d:36:01:87:3d:e6:b7:36:3b:48:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:51:44:A3:09:D1:AF:51:E5:78:8E:0D:0E:20:A8:16:1C:E9:9F:A1
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/W1FEownRr1HleI4NDiCoFhzpn6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.212.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5b:f0:e3:11:e3:80:a1:6f:e8:d2:ad:b3:b1:77:e3:71:34:
f8:56:87:a1:18:d9:ee:c4:15:b9:de:d9:7a:cf:0e:43:6e:63:
6b:9b:e3:53:58:79:80:b5:41:b7:87:e1:fc:fb:3d:02:e7:c1:
34:2e:f1:21:01:91:cf:36:e8:cf:d3:2c:a3:0a:c4:6d:25:e4:
b4:a8:a8:d6:40:34:be:2c:1a:ec:b4:26:11:fe:d9:15:81:df:
7b:87:5d:ec:d6:77:33:3e:d1:af:4f:7c:6c:fa:e5:88:d7:9c:
a1:b8:bd:66:30:1d:e6:0b:37:a4:8f:5f:77:e9:c7:d6:0f:44:
a7:b4:0f:7c:8a:00:f1:ba:ef:56:58:2a:78:e7:93:b6:1b:c8:
ef:06:fc:06:69:32:09:c3:7e:8f:94:ef:fa:0c:0c:3b:b2:d8:
ed:fd:1d:7e:54:fa:99:57:a7:54:db:22:4a:05:c5:92:71:44:
45:aa:68:50:a4:a8:8a:a6:f0:17:b8:e2:93:11:6f:0d:95:2f:
3a:bd:5f:44:62:cf:87:cd:df:82:98:fc:6b:85:cf:58:fc:ca:
03:51:40:62:d1:70:eb:0f:34:fc:ae:ec:00:0c:39:99:04:22:
14:df:6a:68:84:07:f7:d3:51:02:03:45:60:4f:68:28:4c:c9:
98:40:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org