Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Zf_6AFHtEFAezBvCzJMLFz-IBJ8.roa
File: Zf_6AFHtEFAezBvCzJMLFz-IBJ8.roa (raw, json)
Hash identifier: vrlcLkRWMjq6qHO9sYcDreB0D3Zi8FyMQVDwrKLPOX8=
Subject key identifier: 65:FF:FA:00:51:ED:10:50:1E:CC:1B:C2:CC:93:0B:17:3F:88:04:9F
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0187E746885C250385430859781B651B0A5B
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Zf_6AFHtEFAezBvCzJMLFz-IBJ8.roa
Signing time: Thu 04 May 2023 14:59:31 +0000
ROA not before: Thu 04 May 2023 14:59:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 93.89.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 06:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:46:88:5c:25:03:85:43:08:59:78:1b:65:1b:0a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: May 4 14:59:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65fffa0051ed10501ecc1bc2cc930b173f88049f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:50:d9:2d:18:36:84:ea:2a:73:86:45:e1:
f9:20:fa:37:09:ff:a1:10:34:7f:31:a4:d6:ab:33:
02:90:ea:de:76:ff:86:c6:63:d0:7e:4c:5e:b3:09:
e7:fe:15:63:1c:8c:42:80:93:0c:71:7e:80:6a:40:
89:54:98:75:d7:0e:43:b7:c4:bc:a0:36:9a:75:eb:
b7:1f:52:bc:5b:d0:93:be:35:7e:c5:41:d3:fb:93:
76:b6:af:f1:05:9d:09:00:45:75:13:ee:25:b0:02:
b2:93:a5:f6:43:be:4b:b5:bb:cf:c0:87:d6:17:31:
23:6d:9b:92:6a:a1:65:32:a8:6f:44:6c:d0:0b:6c:
77:86:3c:03:1c:21:5f:a7:dc:ee:a9:29:58:ee:5b:
4a:fd:fe:d9:75:0b:a1:5b:80:92:ba:b4:3a:c3:08:
19:4b:32:66:7f:4f:7d:bb:ef:ef:29:47:1e:e1:20:
51:10:ad:91:48:20:8b:a7:95:92:8b:a5:4d:18:7b:
0e:e8:b1:d7:7f:b6:b6:14:a3:d4:ed:91:35:8c:58:
66:d2:7e:fd:29:77:62:9f:0d:a2:54:94:75:f4:48:
fc:2c:2f:42:d0:36:74:7e:2c:11:8b:b8:40:aa:54:
78:ed:aa:4a:bf:37:d9:27:68:56:dd:fd:c3:f6:9f:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FF:FA:00:51:ED:10:50:1E:CC:1B:C2:CC:93:0B:17:3F:88:04:9F
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Zf_6AFHtEFAezBvCzJMLFz-IBJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a9:bc:70:7b:bc:67:b3:33:15:b5:f5:95:8c:3d:7b:2c:00:
9b:3d:13:6b:b7:33:5d:1a:7e:60:fe:08:72:1e:14:37:ed:0c:
52:8d:f7:99:a2:5b:7c:78:01:99:a7:4c:3a:86:a5:bb:61:19:
09:b9:3b:95:35:d0:42:1b:c3:85:41:c6:90:0b:dc:32:3b:e3:
a6:7a:28:79:c9:ec:cb:28:d1:cb:50:78:98:3b:4d:d4:f5:7a:
d5:72:47:3a:a2:03:6a:36:ad:95:14:e3:9c:13:58:2d:d1:55:
7f:2d:16:c6:26:a9:58:7c:ec:a2:8b:90:ed:6c:4e:62:ef:7c:
20:ab:fe:18:56:9d:55:c0:02:0d:09:a2:fa:36:da:cb:8f:8c:
fa:96:47:41:d1:86:8f:17:a2:1f:cc:d2:e7:87:e3:f1:7c:85:
c8:3f:83:60:0d:cd:0b:0c:cf:1e:9b:70:98:0a:14:38:e4:05:
e0:77:ea:7d:4f:13:db:ed:8f:11:bb:7d:bb:a6:cc:87:34:4d:
a6:d2:5a:6b:d6:aa:94:19:e7:96:bd:e6:95:c0:f7:fc:4a:f5:
ed:f8:74:cb:52:20:e0:22:60:01:ba:79:51:0b:0f:41:48:90:
b5:d1:a0:ec:0b:6f:18:18:13:23:55:ce:44:78:77:5c:41:5d:
9b:7b:46:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfnRohcJQOFQwhZeBtlGwpbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjMwNTA0MTQ1OTMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWZmZmEwMDUxZWQxMDUwMWVjYzFiYzJjYzkzMGIxNzNmODgwNDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw1Q2S0YNoTqKnOGReH5IPo3Cf+h
EDR/MaTWqzMCkOredv+GxmPQfkxeswnn/hVjHIxCgJMMcX6AakCJVJh11w5Dt8S8
oDaadeu3H1K8W9CTvjV+xUHT+5N2tq/xBZ0JAEV1E+4lsAKyk6X2Q75LtbvPwIfW
FzEjbZuSaqFlMqhvRGzQC2x3hjwDHCFfp9zuqSlY7ltK/f7ZdQuhW4CSurQ6wwgZ
SzJmf099u+/vKUce4SBREK2RSCCLp5WSi6VNGHsO6LHXf7a2FKPU7ZE1jFhm0n79
KXdinw2iVJR19Ej8LC9C0DZ0fiwRi7hAqlR47apKvzfZJ2hW3f3D9p9MkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGX/+gBR7RBQHswbwsyTCxc/iASfMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvWmZfNkFGSHRFRkFlekJ2Q3pKTUxGei1JQko4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVnfMA0G
CSqGSIb3DQEBCwUAA4IBAQBNqbxwe7xnszMVtfWVjD17LACbPRNrtzNdGn5g/ghy
HhQ37QxSjfeZolt8eAGZp0w6hqW7YRkJuTuVNdBCG8OFQcaQC9wyO+Omeih5yezL
KNHLUHiYO03U9XrVckc6ogNqNq2VFOOcE1gt0VV/LRbGJqlYfOyii5DtbE5i73wg
q/4YVp1VwAINCaL6NtrLj4z6lkdB0YaPF6IfzNLnh+PxfIXIP4NgDc0LDM8em3CY
ChQ45AXgd+p9TxPb7Y8Ru327psyHNE2m0lpr1qqUGeeWveaVwPf8SvXt+HTLUiDg
ImABunlRCw9BSJC10aDsC28YGBMjVc5EeHdcQV2be0Yp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org