Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ZeX4INTMJMwg8SAEZycvazD9PYk.roa
File: ZeX4INTMJMwg8SAEZycvazD9PYk.roa (raw, json)
Hash identifier: jiSc3+YCxGslMQQpYGvr4bgl0IE5/Qe1VllJr4YmCM0=
Subject key identifier: 65:E5:F8:20:D4:CC:24:CC:20:F1:20:04:67:27:2F:6B:30:FD:3D:89
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019107F5F42D6435DB535FE404A6FAEAB597
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ZeX4INTMJMwg8SAEZycvazD9PYk.roa
Signing time: Wed 31 Jul 2024 08:44:04 +0000
ROA not before: Wed 31 Jul 2024 08:44:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15083
IP address blocks: 93.89.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 21:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:07:f5:f4:2d:64:35:db:53:5f:e4:04:a6:fa:ea:b5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 31 08:44:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65e5f820d4cc24cc20f1200467272f6b30fd3d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:e5:5d:6b:14:1f:f8:1c:9b:13:0a:9a:4b:
8a:2e:ba:58:3f:c3:58:8f:a0:50:ea:3a:d6:7c:24:
0c:4a:4d:af:35:6f:b2:83:db:2a:ff:1c:90:ee:71:
03:63:4a:8d:ee:7c:e3:d5:3d:29:83:4a:01:2a:fc:
0c:d7:f6:ad:49:42:0a:35:75:22:c3:8e:41:f6:42:
6a:ad:e7:cd:b7:96:c4:39:73:17:8f:ce:54:ee:6c:
10:f8:1b:85:88:70:0f:09:8d:52:53:8f:79:93:26:
fa:4e:41:67:b6:46:50:b8:eb:18:44:d1:04:05:13:
6d:e0:b3:cd:80:8f:74:1f:8a:b4:c4:25:91:72:18:
d5:26:1c:c1:69:a5:a3:b2:b0:5e:06:30:af:2f:78:
1e:4c:fc:7e:5e:a1:d5:94:aa:d1:27:cc:02:6e:f9:
49:b7:de:2c:7f:71:a1:1b:65:03:74:ea:ce:40:b9:
80:7e:ec:d3:58:c6:c3:ed:3c:8a:91:f0:c9:e7:9d:
de:0f:70:06:a4:f9:9d:e1:fc:6b:9e:f8:b2:83:80:
2d:6e:73:40:61:97:ed:fd:6a:43:fe:2b:50:7a:95:
d1:99:be:5f:eb:2a:2b:e5:63:93:c2:ab:6e:28:b3:
e1:76:32:21:6b:ac:dd:e0:ec:25:b8:da:5d:bd:e1:
b1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E5:F8:20:D4:CC:24:CC:20:F1:20:04:67:27:2F:6B:30:FD:3D:89
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ZeX4INTMJMwg8SAEZycvazD9PYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.216.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fc:33:ca:20:7c:5f:fd:aa:67:48:0c:14:a6:80:c3:f9:36:
95:38:f7:63:c8:64:c1:74:97:25:10:67:ae:79:12:aa:7f:ec:
14:24:9b:7e:22:92:92:eb:c6:e6:43:05:03:b8:87:47:63:14:
e5:30:f8:12:1f:45:ea:0f:f6:fa:f2:a2:b4:82:c6:6c:ec:88:
78:5a:e1:42:18:50:c5:e0:94:c1:58:3c:bf:99:77:4d:cd:8f:
9e:17:37:e2:40:89:49:af:f2:f2:56:bc:07:e2:e0:54:53:54:
c6:28:2d:cd:b2:b0:cb:11:57:46:a5:b7:24:84:fb:2c:df:87:
8e:e5:8b:aa:e7:46:d6:05:fe:dd:78:8a:11:7d:7a:8c:31:b7:
b0:a7:69:8c:30:04:ef:ed:a9:97:2e:57:2e:03:e9:0c:39:30:
ea:3e:12:de:d9:73:fc:64:3a:f5:45:fa:da:1b:80:1b:84:a7:
00:1b:04:df:13:b7:96:8d:d6:2e:da:5f:1c:cd:40:52:6b:96:
81:23:8b:1a:d6:ca:15:4f:3f:34:1f:04:60:ca:81:75:b5:85:
b2:cc:a2:04:00:a9:ce:4f:02:81:fb:82:19:f1:f3:b5:b5:49:
bc:ed:5e:d2:e4:49:5e:4a:78:8e:57:9c:a7:d5:93:2a:0c:00:
49:9c:82:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 00:08:28 2024 by rpki-client on console-ams.rpki-client.org