Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/hmpE0ApgY1iyPau4WAbM5B-ro7M.roa
File: hmpE0ApgY1iyPau4WAbM5B-ro7M.roa (raw, json)
Hash identifier: cfYtNRFzQNGIlcqsGthsNii/mnvDy5sWgjeVQekQ9d4=
Subject key identifier: 86:6A:44:D0:0A:60:63:58:B2:3D:AB:B8:58:06:CC:E4:1F:AB:A3:B3
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0186C2A7F8A7F668E948EC90616634D57D59
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/hmpE0ApgY1iyPau4WAbM5B-ro7M.roa
Signing time: Wed 08 Mar 2023 19:17:13 +0000
ROA not before: Wed 08 Mar 2023 19:17:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 93.89.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c2:a7:f8:a7:f6:68:e9:48:ec:90:61:66:34:d5:7d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Mar 8 19:17:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=866a44d00a606358b23dabb85806cce41faba3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7a:5e:c3:74:5a:78:4b:67:0c:91:a3:ae:68:
26:9f:c0:dc:fe:4c:6a:30:b2:ac:c0:c4:0a:6d:f4:
db:57:b7:a3:dc:9f:6a:92:7a:f6:0d:a3:e3:da:2b:
21:e6:6d:31:df:bf:ee:58:9b:11:8b:eb:16:d9:21:
c0:a1:2c:76:05:de:42:06:59:62:d0:87:b0:25:1a:
89:da:9f:0c:1d:0c:a7:08:12:be:ca:b5:40:a6:c2:
d8:4a:b0:46:4b:6b:e9:2b:27:3c:6e:cb:a8:43:48:
bf:a8:0a:19:6b:8c:4d:0a:d9:4d:eb:35:12:d1:db:
59:98:8f:19:86:a7:a9:2b:97:e0:0e:15:bb:e1:23:
b4:79:51:dd:99:f8:f2:35:81:f0:ed:0c:ca:61:04:
f4:1e:5d:01:bb:32:4d:b2:f2:66:2a:96:1e:5b:1c:
bb:34:93:72:aa:25:02:2e:65:59:81:ea:d6:a5:e3:
b6:76:7c:d7:47:5e:a8:b6:f8:97:8f:f6:68:a8:26:
c8:09:f2:6b:8b:ad:8c:63:48:a1:70:1a:28:72:21:
06:c8:cb:ad:4c:bd:9f:7e:f6:8f:6c:5d:29:7d:18:
61:8b:08:b2:72:38:e5:62:4a:f2:2a:50:4d:13:b5:
03:79:6c:25:66:64:4d:6a:f1:16:21:fe:03:3a:fd:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6A:44:D0:0A:60:63:58:B2:3D:AB:B8:58:06:CC:E4:1F:AB:A3:B3
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/hmpE0ApgY1iyPau4WAbM5B-ro7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.213.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:4d:e5:fa:27:d1:5d:9e:8d:e7:cf:04:cd:51:a2:5f:9e:76:
12:73:f5:f0:e9:d6:9c:e9:c1:bb:50:c7:cf:59:f5:16:88:35:
ea:e6:b5:2f:5c:27:d9:02:05:83:72:f4:f5:f2:7d:dd:96:62:
d1:67:6c:19:20:09:fd:81:c9:91:91:40:2a:6f:61:d4:e2:cf:
7e:d5:ea:3b:87:f8:b7:7f:92:71:4b:7a:b5:7f:6f:da:8d:51:
de:31:b3:49:f4:60:f9:47:a1:a7:63:a6:86:29:e3:b1:3a:49:
31:6a:db:22:0a:d2:b3:87:10:79:0d:b6:57:c6:ba:44:60:63:
9f:31:65:f3:af:15:41:a3:37:56:83:0f:23:21:dc:9a:f9:d1:
fe:77:17:de:3f:f5:1f:75:65:d5:91:a7:fb:6a:d4:e3:06:f6:
63:53:6a:b9:c6:e2:2f:90:5f:46:16:4c:ee:b9:85:10:c0:1b:
22:8a:9b:cb:0e:c6:41:0a:1b:95:34:1d:7c:f6:aa:da:07:8b:
cf:d0:f9:2f:d3:15:17:6a:be:54:dd:8d:79:fa:2c:8a:77:9a:
c3:9d:ed:2c:3e:0d:9e:0c:a7:6a:bc:f4:fb:45:4d:df:fb:9e:
69:c5:4f:76:a1:a0:4f:6c:c6:4b:21:f3:27:d4:16:1c:3c:a0:
0c:3b:b0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:56 2023 by rpki-client on console-ams.rpki-client.org