Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/jXVIMhJqhvZRXnhHGll8YFGKnC4.roa
File: jXVIMhJqhvZRXnhHGll8YFGKnC4.roa (raw, json)
Hash identifier: B11gY8qAx2MGtCt/X+73tOFjjHRR7uLi/HvADYE8+Bs=
Subject key identifier: 8D:75:48:32:12:6A:86:F6:51:5E:78:47:1A:59:7C:60:51:8A:9C:2E
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0186FFCC09B9DE4C858090B4A4B7BBA411CF
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/jXVIMhJqhvZRXnhHGll8YFGKnC4.roa
Signing time: Mon 20 Mar 2023 16:13:27 +0000
ROA not before: Mon 20 Mar 2023 16:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 93.89.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Aug 2023 10:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:cc:09:b9:de:4c:85:80:90:b4:a4:b7:bb:a4:11:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Mar 20 16:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d754832126a86f6515e78471a597c60518a9c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:a2:4b:fb:67:10:ce:50:d6:1c:a2:8c:3d:
58:a9:b9:dc:2b:35:e2:55:b5:82:59:21:92:50:95:
d1:0b:c4:d0:9a:9a:dc:e1:f1:94:fe:bd:2b:b4:6c:
64:f0:0c:6b:14:be:aa:54:d3:60:19:4d:7f:30:41:
af:03:fa:a3:bf:fd:d3:88:85:0c:db:07:a7:c7:f8:
7c:df:1e:ea:49:46:f2:34:b4:53:eb:64:0d:27:ae:
8e:02:08:1f:13:c9:ad:68:a5:2d:b0:b2:9e:16:0a:
cf:9c:54:a0:69:a6:95:6c:d3:4f:48:bd:26:0a:ee:
1a:71:45:99:60:72:66:58:fb:67:05:78:56:23:ff:
f5:2f:4d:05:e7:9e:98:f3:a4:75:9e:f1:13:c9:6d:
54:82:14:26:a0:18:b0:66:43:64:6f:29:3e:e0:7c:
bc:ba:26:e7:75:dd:26:2f:d4:7b:ac:6b:cd:98:6d:
0c:14:d5:50:22:b2:cd:e3:a7:74:d3:08:29:39:f2:
ec:0d:84:af:0d:0a:fd:c8:de:5c:3d:03:70:f9:cc:
d4:72:04:25:78:13:92:d1:2d:0a:d8:9a:3f:50:6d:
48:f0:b0:78:72:4e:cc:7f:fd:fd:c1:af:bb:b7:c0:
09:1e:71:85:0e:d6:44:f5:b9:f6:40:7c:ef:e3:18:
8f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:75:48:32:12:6A:86:F6:51:5E:78:47:1A:59:7C:60:51:8A:9C:2E
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/jXVIMhJqhvZRXnhHGll8YFGKnC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.222.0/24
Signature Algorithm: sha256WithRSAEncryption
00:1b:d2:cb:87:7a:8f:f5:5f:3c:d0:77:ac:c5:f7:46:94:58:
75:01:17:cb:00:c9:ea:c7:ec:22:d6:67:bd:9e:16:c5:43:96:
30:77:9a:27:7c:4e:2c:78:c0:26:46:02:13:12:06:98:99:98:
a3:33:99:90:9a:d4:8f:db:e8:16:68:97:1b:a7:1a:d1:a6:8a:
28:ae:b0:99:07:96:6a:a2:11:50:1d:d6:0e:d6:6f:21:88:c3:
d1:38:a0:2a:b7:64:ca:97:21:03:9a:d8:ce:49:71:b6:e4:00:
7a:70:b8:10:c8:14:6a:04:cc:8a:ac:88:c8:ee:bd:1d:05:16:
9b:49:04:93:18:a3:0c:59:f5:c7:32:f1:7d:58:59:e1:75:8d:
2b:85:3d:50:74:1b:e0:7b:c8:40:79:75:c4:25:52:14:4e:f4:
a3:2f:e0:af:3a:1c:68:26:38:58:94:4d:cc:94:5b:5b:bc:a6:
bf:1e:a7:77:08:5d:38:69:e8:e5:87:2a:82:74:91:ee:7e:a3:
01:68:83:08:da:5e:5c:34:1c:68:5b:45:80:07:39:67:20:1a:
67:3e:c9:39:0a:b6:c8:25:13:c0:7e:2a:c8:46:15:6f:f5:fe:
30:9c:02:63:4c:4b:dc:06:7f:1b:b8:ea:01:af:9c:f7:82:b2:
0a:ad:c2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org