Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/cAGvkMQaWNSr5wfdt2FZt6-zpyM.roa
File: cAGvkMQaWNSr5wfdt2FZt6-zpyM.roa (raw, json)
Hash identifier: TZcSwy2BgHKRw16a/LQxCB0r7V1f5Q0rTKlDMJLoVqk=
Subject key identifier: 70:01:AF:90:C4:1A:58:D4:AB:E7:07:DD:B7:61:59:B7:AF:B3:A7:23
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018BBA162D6141232E1EFC3FFE7EB8BA9B88
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/cAGvkMQaWNSr5wfdt2FZt6-zpyM.roa
Signing time: Fri 10 Nov 2023 16:34:57 +0000
ROA not before: Fri 10 Nov 2023 16:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400899
IP address blocks: 93.89.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:16:2d:61:41:23:2e:1e:fc:3f:fe:7e:b8:ba:9b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Nov 10 16:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7001af90c41a58d4abe707ddb76159b7afb3a723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:0a:65:02:55:b2:c6:70:f7:bf:58:06:eb:
4b:7f:ef:1d:6b:ba:02:be:d7:75:ae:18:cb:9f:ad:
b5:81:8e:f5:a5:5d:58:49:60:f5:00:9e:79:21:94:
61:30:fe:25:dc:c7:26:67:a5:c1:57:d0:20:bd:49:
ac:69:1a:f2:71:af:c2:05:67:c5:42:7e:f6:d0:77:
6c:68:d7:9c:43:b4:a0:2e:4e:43:d5:e9:a1:89:31:
3d:e0:df:d9:53:c1:5a:c2:c9:9b:7e:3c:18:4a:ca:
2a:b1:ab:00:eb:7e:7a:b8:58:41:e7:74:da:60:9f:
5b:be:4b:53:00:3e:56:26:64:68:22:3e:85:af:3f:
71:fb:76:21:38:1a:e6:fd:e4:77:ae:6a:6a:55:8e:
8b:0b:c6:1f:e9:4a:d5:f7:cb:50:b6:51:93:52:2f:
fc:ba:1a:6b:ed:a9:2f:9a:dd:0d:3d:20:60:f0:90:
08:94:e4:82:c3:61:b6:00:83:8c:c6:fd:a0:c9:d2:
d7:11:fb:14:20:4c:f5:c0:10:bb:a6:46:88:c7:f6:
c3:ee:33:74:52:a5:55:f2:6b:c6:ff:05:10:72:4a:
c6:df:e5:03:6f:0d:5d:6c:c0:8e:1b:a5:ee:5a:89:
24:d9:1a:f4:66:00:a6:40:c0:86:43:87:e9:72:d0:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:01:AF:90:C4:1A:58:D4:AB:E7:07:DD:B7:61:59:B7:AF:B3:A7:23
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/cAGvkMQaWNSr5wfdt2FZt6-zpyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.212.0/24
Signature Algorithm: sha256WithRSAEncryption
16:55:8b:64:61:22:57:0f:e7:56:e3:f4:d6:05:36:2b:67:1d:
fe:c9:5c:74:a8:42:b5:67:44:01:e0:cd:89:37:02:f2:66:de:
d7:af:5d:15:a8:56:de:ea:00:a8:34:41:9d:38:26:cc:ff:89:
fb:dd:5e:a1:bc:90:56:1a:19:29:9e:af:a5:0e:65:9c:98:2f:
43:77:f7:6c:bc:d0:ef:de:c3:8e:c6:ac:86:0d:e2:00:5d:0a:
e5:58:67:31:ea:a2:db:5f:09:46:41:ea:61:31:c3:e6:f3:55:
d8:f3:ed:7d:65:b6:88:b5:a4:ae:12:04:64:87:1b:dd:00:87:
9c:b8:7c:3f:62:7c:eb:29:cc:ed:ce:4d:4e:98:28:46:52:ed:
81:02:2f:34:63:95:4b:22:04:ce:87:61:1c:87:c8:ff:a4:5e:
04:c6:13:c6:6f:e7:2a:05:8d:70:2f:89:7c:ca:6e:fe:db:99:
8d:2c:de:bb:82:6a:19:e0:bb:bb:e4:16:76:f4:3f:16:ec:e2:
2f:77:2b:46:10:79:6e:19:73:25:99:c4:02:b6:da:3c:e1:e9:
a3:eb:16:dd:fd:ae:06:06:70:c2:43:b4:3e:44:e0:19:57:e9:
a5:1b:f7:f9:e5:d7:68:0f:bf:f7:c4:68:ff:cb:1c:4d:b4:b3:
3e:7e:bb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 11:48:55 2023 by rpki-client on console-fra.rpki-client.org