Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Z897GEo3zBoJ_98t7PuXJ8Um_ts.roa
File: Z897GEo3zBoJ_98t7PuXJ8Um_ts.roa (raw, json)
Hash identifier: +Jic2FLraS77VrFtOpnCPBJ7cMQa0INSNLaAyIfhjIs=
Subject key identifier: 67:CF:7B:18:4A:37:CC:1A:09:FF:DF:2D:EC:FB:97:27:C5:26:FE:DB
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019107F5F3CE84E30068D6F2309C54CF1190
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Z897GEo3zBoJ_98t7PuXJ8Um_ts.roa
Signing time: Wed 31 Jul 2024 08:44:04 +0000
ROA not before: Wed 31 Jul 2024 08:44:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 93.89.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 21:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:07:f5:f3:ce:84:e3:00:68:d6:f2:30:9c:54:cf:11:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 31 08:44:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67cf7b184a37cc1a09ffdf2decfb9727c526fedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3f:8a:64:ee:7a:4d:db:a6:0d:f8:bc:87:ca:
e5:51:c0:79:8a:10:a2:a3:1c:36:4b:02:7c:2f:4e:
de:a5:a6:83:2b:83:82:74:02:44:34:bf:88:90:88:
97:0e:47:d3:90:4e:32:46:45:27:19:46:1f:e5:35:
62:35:2a:6d:f3:f2:12:a6:24:61:b8:ab:2e:3b:81:
6f:48:1e:15:54:16:45:38:01:72:11:f9:9c:03:56:
fa:e2:93:3e:53:d3:b4:19:7f:5f:2b:d7:3a:56:70:
53:36:18:90:1b:5e:a6:fe:58:fd:13:4e:e9:01:f8:
58:23:8f:93:b8:c8:fd:d6:fc:8f:12:74:d0:5d:19:
83:61:6f:82:13:eb:e8:a0:0d:79:d4:14:73:ea:62:
ef:fd:25:75:55:7a:84:62:e8:ed:2c:16:11:f7:5f:
b2:de:ef:38:b3:7b:85:86:a9:7b:80:59:6d:2d:eb:
d4:67:7c:5e:63:c9:b9:cf:6f:8b:a5:86:79:57:f0:
15:84:2c:c4:9f:61:c5:f2:36:7e:89:00:5c:fe:6c:
22:28:da:fb:32:bd:37:06:02:fa:c8:2e:f8:4e:b5:
05:cb:ca:35:65:6e:a9:7f:6a:55:d1:5a:27:64:16:
15:fb:e0:a1:15:f6:20:42:2c:30:0d:76:cc:cc:1f:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CF:7B:18:4A:37:CC:1A:09:FF:DF:2D:EC:FB:97:27:C5:26:FE:DB
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Z897GEo3zBoJ_98t7PuXJ8Um_ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.218.0/24
Signature Algorithm: sha256WithRSAEncryption
72:92:27:11:c6:2a:82:a1:8b:23:99:51:17:02:26:ee:7a:e9:
88:f7:36:11:44:47:8c:80:92:e6:b2:82:41:17:48:62:67:7f:
ee:5b:21:11:14:64:ae:8c:9e:b2:9b:8b:33:70:87:ce:ae:78:
ee:8c:24:47:3c:5a:73:f1:e6:7e:c6:35:27:3a:ae:34:04:07:
84:41:b5:35:a6:b7:85:b5:78:fd:38:d0:b1:ec:28:e9:08:d6:
4d:30:c7:24:f0:e8:b2:bd:1d:db:84:e8:00:d9:7e:ae:8d:5a:
62:31:c8:3e:f4:3f:10:73:1c:8a:8b:e8:14:f3:4b:2b:63:49:
1e:28:eb:6e:14:c9:a1:77:34:cc:62:52:ee:76:37:ca:e3:40:
6b:c7:d4:a5:3c:28:28:d2:04:ef:8c:23:29:20:a3:5a:c1:fa:
4e:5e:6a:e2:a5:8a:09:76:1f:ee:50:14:82:ea:2e:9d:3c:30:
62:f4:23:a5:51:8a:17:12:fe:51:b6:78:ed:c0:75:5b:c7:e2:
74:c8:94:6f:a3:71:91:40:e5:67:18:61:fc:21:60:93:2d:c2:
1f:82:81:56:fc:ff:ee:6c:80:d2:ab:b3:ce:cb:e5:36:6c:c7:
27:94:b1:76:88:10:d7:f5:49:a1:27:8d:bd:bc:cd:0c:a5:8c:
dc:da:55:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEH9fPOhOMAaNbyMJxUzxGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjQwNzMxMDg0NDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2NmN2IxODRhMzdjYzFhMDlmZmRmMmRlY2ZiOTcyN2M1MjZmZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6z+KZO56TdumDfi8h8rlUcB5ihCi
oxw2SwJ8L07epaaDK4OCdAJENL+IkIiXDkfTkE4yRkUnGUYf5TViNSpt8/ISpiRh
uKsuO4FvSB4VVBZFOAFyEfmcA1b64pM+U9O0GX9fK9c6VnBTNhiQG16m/lj9E07p
AfhYI4+TuMj91vyPEnTQXRmDYW+CE+vooA151BRz6mLv/SV1VXqEYujtLBYR91+y
3u84s3uFhql7gFltLevUZ3xeY8m5z2+LpYZ5V/AVhCzEn2HF8jZ+iQBc/mwiKNr7
Mr03BgL6yC74TrUFy8o1ZW6pf2pV0VonZBYV++ChFfYgQiwwDXbMzB8F5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGfPexhKN8waCf/fLez7lyfFJv7bMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvWjg5N0dFbzN6Qm9KXzk4dDdQdVhKOFVtX3RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVnaMA0G
CSqGSIb3DQEBCwUAA4IBAQBykicRxiqCoYsjmVEXAibueumI9zYRREeMgJLmsoJB
F0hiZ3/uWyERFGSujJ6ym4szcIfOrnjujCRHPFpz8eZ+xjUnOq40BAeEQbU1preF
tXj9ONCx7CjpCNZNMMck8OiyvR3bhOgA2X6ujVpiMcg+9D8QcxyKi+gU80srY0ke
KOtuFMmhdzTMYlLudjfK40Brx9SlPCgo0gTvjCMpIKNawfpOXmripYoJdh/uUBSC
6i6dPDBi9COlUYoXEv5RtnjtwHVbx+J0yJRvo3GRQOVnGGH8IWCTLcIfgoFW/P/u
bIDSq7POy+U2bMcnlLF2iBDX9UmhJ429vM0MpYzc2lVL
-----END CERTIFICATE-----
Generated at Sat Nov 2 00:10:12 2024 by rpki-client on console-fra.rpki-client.org