Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/hLxbnb7NnNbbJsmLemSqKA1AwHE.roa
File: hLxbnb7NnNbbJsmLemSqKA1AwHE.roa (raw, json)
Hash identifier: qBOpJgVagSZZ4nI9uEy4/906j+H0k12x9o+o7hSXnGY=
Subject key identifier: 84:BC:5B:9D:BE:CD:9C:D6:DB:26:C9:8B:7A:64:AA:28:0D:40:C0:71
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018881E337FEC1E4715AE7336DB8DA6AA59A
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/hLxbnb7NnNbbJsmLemSqKA1AwHE.roa
Signing time: Sat 03 Jun 2023 15:32:11 +0000
ROA not before: Sat 03 Jun 2023 15:32:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 93.89.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 11:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:81:e3:37:fe:c1:e4:71:5a:e7:33:6d:b8:da:6a:a5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jun 3 15:32:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84bc5b9dbecd9cd6db26c98b7a64aa280d40c071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9b:33:4a:7f:9c:7d:f7:99:54:5d:4b:5b:f7:
48:cf:e7:87:db:75:28:73:36:72:cc:42:60:b2:03:
e3:87:d8:07:75:fe:b4:5d:9d:cf:cb:18:70:8a:3c:
fc:2e:0d:8c:84:e7:8c:75:87:cc:26:6d:62:43:8c:
ec:f7:19:aa:dd:0e:23:d0:57:43:de:8e:b7:d5:78:
86:28:9c:ff:fc:74:37:0b:5d:c0:a0:dd:f1:c1:35:
3d:5e:e1:ad:61:61:c7:53:38:49:c2:4a:c0:8e:69:
1d:f4:9e:a1:fa:75:59:b7:90:9c:85:d9:f5:46:5d:
05:fb:74:65:93:dc:24:aa:3f:2e:96:da:6f:af:2f:
24:75:e6:00:54:b3:83:9c:a6:46:23:bf:0c:90:53:
bf:42:26:ec:5b:69:67:0a:43:11:da:2f:33:77:71:
14:5d:b4:a4:eb:85:c7:93:72:12:fb:7f:1e:66:d2:
9f:39:f6:a0:9e:f2:c0:07:63:d5:59:d3:ce:1f:8f:
be:94:d4:76:bd:ac:8b:c8:9b:b9:e7:72:4a:fd:f3:
ec:bf:8a:0e:4c:f7:86:ee:cb:d7:80:1d:5a:e7:7f:
43:7f:9c:40:32:dd:bc:13:9b:eb:2a:da:9c:e4:59:
b4:c4:71:38:9a:a0:d4:93:0f:d0:8c:42:64:f1:45:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BC:5B:9D:BE:CD:9C:D6:DB:26:C9:8B:7A:64:AA:28:0D:40:C0:71
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/hLxbnb7NnNbbJsmLemSqKA1AwHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.215.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:15:be:47:51:0c:55:07:6e:bb:5f:cd:94:9e:ba:d8:96:62:
e7:25:3e:32:dc:96:b1:4d:23:91:57:e2:12:a0:a5:15:40:61:
9e:ea:db:80:ec:23:7a:2d:3d:65:56:59:8d:85:5d:d1:65:e2:
7a:a4:d6:4f:5f:a8:05:14:a3:19:10:52:e1:e1:09:ab:5c:7c:
b6:22:71:36:9e:f2:2b:9a:a5:7c:c9:1f:a3:6f:7f:30:cb:2c:
e4:af:60:77:60:d9:6b:57:84:a3:ac:6d:84:ce:a0:da:d4:d0:
0a:93:4f:7f:aa:a2:81:1b:3f:89:e3:88:c1:ae:23:fe:80:8d:
f2:54:56:7d:d4:2c:5f:e7:b4:c5:ab:3b:2d:f5:21:f5:25:9f:
75:24:01:5a:4e:40:00:e8:71:d3:b2:81:4e:e2:34:ed:2b:6f:
86:13:ca:e1:e4:c4:74:a7:ba:bb:74:1d:a5:a5:f5:7a:11:bf:
f7:41:86:b2:2b:d1:a9:39:95:df:5f:43:b0:ea:5a:fa:ac:2d:
2c:cb:47:94:cc:d3:1f:f6:ff:94:4b:8c:1d:4d:36:75:16:20:
0b:2f:16:b2:5a:81:04:e1:a2:e6:17:be:c5:d9:2f:14:73:cf:
7b:60:1e:6d:85:ee:d0:36:ee:42:aa:26:41:57:5a:1c:a8:a1:
02:00:2a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org