Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/g0rbLSBdIIUoizEbXwOCA6UMQ8M.roa
File: g0rbLSBdIIUoizEbXwOCA6UMQ8M.roa (raw, json)
Hash identifier: erFim/a8evJpnViOPmRW2IPrayjIQLDvKHcOcgpwyLc=
Subject key identifier: 83:4A:DB:2D:20:5D:20:85:28:8B:31:1B:5F:03:82:03:A5:0C:43:C3
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0189AC2EAB248FA21A24880F2E82F9FE3166
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/g0rbLSBdIIUoizEbXwOCA6UMQ8M.roa
Signing time: Mon 31 Jul 2023 13:41:26 +0000
ROA not before: Mon 31 Jul 2023 13:41:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 93.89.219.0/24 maxlen: 24
93.89.222.0/24 maxlen: 24
93.89.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 14:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:2e:ab:24:8f:a2:1a:24:88:0f:2e:82:f9:fe:31:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 31 13:41:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=834adb2d205d2085288b311b5f038203a50c43c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:75:8c:cf:2d:32:3c:9b:7c:04:8a:e2:b9:
45:95:de:33:05:d9:2b:60:dc:1c:40:cc:94:de:1b:
ca:49:be:ef:ff:b0:bf:d4:3d:8c:55:3e:89:a9:7a:
fe:e7:01:f2:04:70:a3:d5:b9:a4:d5:ad:4e:00:ad:
35:8d:24:73:56:68:eb:e5:e0:ee:a6:66:18:7f:a9:
6b:13:92:42:d4:15:37:ab:d4:d4:da:d2:1f:8d:21:
41:90:1a:aa:7e:fe:a5:4a:9e:21:80:83:3c:99:a4:
7d:d0:09:e3:93:52:52:60:8f:24:ac:63:60:b3:f4:
2d:d9:18:1e:bf:f9:17:0e:5a:ce:80:08:ca:5f:ba:
42:ac:5b:a3:ef:de:c0:e5:61:da:81:fc:95:3d:89:
5b:61:15:09:a4:85:51:87:22:5b:da:a0:62:29:8b:
2e:7f:18:ab:b3:e6:e5:47:50:55:ef:ef:b7:2a:c0:
ce:32:bf:c6:90:e8:5d:ff:5f:d6:88:8e:a4:e7:ac:
10:42:fe:f5:81:43:7b:3a:26:c5:57:fc:00:75:e4:
80:98:5f:d9:79:95:4a:c3:c3:bc:54:55:f1:5c:f3:
1e:fc:1f:27:15:8b:f9:32:88:5c:c3:01:03:de:1a:
c6:a8:4d:44:8f:97:fb:7d:4d:12:dd:69:14:4b:c6:
4b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4A:DB:2D:20:5D:20:85:28:8B:31:1B:5F:03:82:03:A5:0C:43:C3
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/g0rbLSBdIIUoizEbXwOCA6UMQ8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.219.0/24
93.89.221.0-93.89.222.255
Signature Algorithm: sha256WithRSAEncryption
06:e4:ea:bf:34:3e:e8:b1:57:3d:3a:de:08:93:07:6a:38:55:
26:48:ab:e2:0b:4c:fe:91:96:61:50:c3:2f:8d:5c:f4:38:b8:
0e:f5:28:61:f8:0f:73:60:82:6f:e3:e1:e5:3a:11:6b:83:c3:
8f:50:f2:85:e2:7c:e3:c0:e2:5e:0e:c5:18:96:27:c7:96:8e:
1a:38:14:13:8f:9c:a5:27:b8:39:4e:d3:e1:b9:b2:3c:49:e6:
62:38:bd:d6:e4:0a:dd:c3:b2:fc:ff:2d:ec:0f:6c:a7:20:84:
09:98:45:31:ca:b1:ee:c0:13:8a:fb:b2:56:b1:9f:ed:63:40:
41:7a:3c:18:58:b5:d3:bc:9e:5a:15:92:ee:7c:df:12:26:a3:
0a:d2:db:ec:ea:a3:59:51:40:d3:ca:b5:7c:54:c6:3d:c3:f7:
b6:07:1f:4f:65:6a:5d:57:77:2c:38:ee:21:dd:c8:dc:5f:e1:
3f:8d:46:ff:d7:53:5a:68:17:b4:0b:37:fd:30:0a:c4:06:64:
3a:95:15:21:c9:b0:63:0d:75:3e:98:93:63:3f:ae:92:b3:46:
02:39:9e:98:01:8d:5b:a3:62:b2:6d:40:21:50:b0:c7:f9:3e:
4b:09:26:01:9c:b6:65:6d:6c:07:5d:78:b0:5d:46:e1:4a:12:
88:1d:59:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org