Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ig3Jl7WyzNCol4TFgY9KCKaFvT8.roa
File: ig3Jl7WyzNCol4TFgY9KCKaFvT8.roa (raw, json)
Hash identifier: Nsv56gQ8HLGuk1MyHl/epoNvVAXV+fyj0spViJK8D+M=
Subject key identifier: 8A:0D:C9:97:B5:B2:CC:D0:A8:97:84:C5:81:8F:4A:08:A6:85:BD:3F
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0187081BB8F01FB38BC5B60D2CD9FE337228
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ig3Jl7WyzNCol4TFgY9KCKaFvT8.roa
Signing time: Wed 22 Mar 2023 06:57:27 +0000
ROA not before: Wed 22 Mar 2023 06:57:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 91.193.252.0/24 maxlen: 24
93.89.217.0/24 maxlen: 24
93.89.218.0/24 maxlen: 24
93.89.215.0/24 maxlen: 24
93.89.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:1b:b8:f0:1f:b3:8b:c5:b6:0d:2c:d9:fe:33:72:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Mar 22 06:57:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a0dc997b5b2ccd0a89784c5818f4a08a685bd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:05:43:18:0b:69:63:18:9c:a0:a2:2e:07:
38:f7:7e:2e:f5:12:ed:c6:73:e1:b0:99:e0:31:a4:
8d:97:2f:40:81:a8:a5:72:0f:3c:c0:41:70:ec:28:
45:d6:d3:e7:0b:63:a0:a0:31:ba:05:12:80:1d:8a:
fe:7a:13:8b:8b:10:4a:be:8e:b6:41:0a:ea:6f:d8:
1a:97:55:51:fb:fd:68:5d:25:94:b8:3b:33:5a:d0:
63:a9:a3:28:33:f7:e9:8e:2e:9b:d3:19:5c:f3:b6:
e4:13:ac:1f:1e:a8:18:b0:57:a0:b0:ed:bc:3e:b9:
73:1b:d0:42:fa:1a:81:bb:51:df:d4:ca:95:b9:51:
44:35:89:b9:17:ae:52:26:6e:eb:ad:93:9b:fd:9b:
25:9c:32:48:09:35:9c:7f:cb:85:c2:bf:64:4c:07:
2b:df:61:94:83:50:b5:55:b9:42:69:46:81:ec:a9:
5d:8b:3a:82:de:9c:a9:0e:e1:e5:a0:bf:41:20:4e:
79:4c:cf:a6:6f:2f:9a:34:3c:25:ff:d6:68:a7:71:
e0:a7:9b:c4:53:ac:ea:6e:88:a9:5d:c7:f9:41:90:
31:97:6e:9c:83:9b:83:fa:f2:b4:48:8b:7e:9e:36:
87:5f:73:99:df:f1:12:45:62:50:03:b6:30:c0:02:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0D:C9:97:B5:B2:CC:D0:A8:97:84:C5:81:8F:4A:08:A6:85:BD:3F
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ig3Jl7WyzNCol4TFgY9KCKaFvT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.252.0/24
93.89.215.0-93.89.218.255
Signature Algorithm: sha256WithRSAEncryption
77:bc:6c:86:2a:9e:4c:6a:b4:31:3a:6c:7d:c3:7b:cf:7d:61:
fa:8d:ec:4d:6c:f4:7a:ce:e8:d6:44:62:d2:c8:66:84:b0:8f:
9d:4a:dc:77:1d:d2:1c:7d:78:42:5e:36:50:6d:a3:89:84:b0:
e8:fc:54:c6:7f:a0:5e:04:3c:84:7c:6f:e4:dd:d2:01:24:99:
b4:86:da:e0:d1:4f:72:ea:40:1f:a2:9d:10:40:11:40:74:23:
73:98:09:a3:9b:9b:e1:df:3f:e1:19:7c:9e:2b:3c:82:73:89:
1f:28:ac:e4:fe:84:3c:d4:81:49:18:98:ff:ad:ea:bd:a0:22:
74:00:2e:8c:10:c0:6f:ee:84:69:45:37:2a:c4:e8:c1:2d:51:
b4:a5:42:84:ba:e2:2d:40:f7:cf:84:93:b7:ee:f8:21:0c:ba:
31:0f:5e:27:f1:32:15:40:92:04:ce:87:5f:03:82:93:13:25:
7f:86:52:61:a6:60:e4:26:2c:a8:c5:43:46:5f:49:ba:ee:99:
20:88:c5:99:91:37:bf:0e:68:06:fe:2c:f9:70:54:26:0b:5a:
a4:59:f2:d5:dc:21:f1:d9:88:ee:91:43:57:a7:72:0c:8f:b4:
ad:19:6c:dd:ff:a2:f0:d1:7c:13:f2:54:17:d4:15:7f:3b:0f:
a2:fc:e2:63
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYcIG7jwH7OLxbYNLNn+M3IoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjMwMzIyMDY1NzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTBkYzk5N2I1YjJjY2QwYTg5Nzg0YzU4MThmNGEwOGE2ODViZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFUFQxgLaWMYnKCiLgc4934u9RLt
xnPhsJngMaSNly9Agailcg88wEFw7ChF1tPnC2OgoDG6BRKAHYr+ehOLixBKvo62
QQrqb9gal1VR+/1oXSWUuDszWtBjqaMoM/fpji6b0xlc87bkE6wfHqgYsFegsO28
PrlzG9BC+hqBu1Hf1MqVuVFENYm5F65SJm7rrZOb/ZslnDJICTWcf8uFwr9kTAcr
32GUg1C1VblCaUaB7KldizqC3pypDuHloL9BIE55TM+mby+aNDwl/9Zop3Hgp5vE
U6zqboipXcf5QZAxl26cg5uD+vK0SIt+njaHX3OZ3/ESRWJQA7YwwAIs9QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFIoNyZe1sszQqJeExYGPSgimhb0/MB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvaWczSmw3V3l6TkNvbDRURmdZOUtDS2FGdlQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAW8H8MAwD
BABdWdcDBABdWdowDQYJKoZIhvcNAQELBQADggEBAHe8bIYqnkxqtDE6bH3De899
YfqN7E1s9HrO6NZEYtLIZoSwj51K3Hcd0hx9eEJeNlBto4mEsOj8VMZ/oF4EPIR8
b+Td0gEkmbSG2uDRT3LqQB+inRBAEUB0I3OYCaObm+HfP+EZfJ4rPIJziR8orOT+
hDzUgUkYmP+t6r2gInQALowQwG/uhGlFNyrE6MEtUbSlQoS64i1A98+Ek7fu+CEM
ujEPXifxMhVAkgTOh18DgpMTJX+GUmGmYOQmLKjFQ0ZfSbrumSCIxZmRN78OaAb+
LPlwVCYLWqRZ8tXcIfHZiO6RQ1encgyPtK0ZbN3/ovDRfBPyVBfUFX87D6L84mM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:20 2023 by rpki-client on console-fra.rpki-client.org