Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/lIxHEhn-H5er6M_WF3fqUIvKbrc.roa
File: lIxHEhn-H5er6M_WF3fqUIvKbrc.roa (raw, json)
Hash identifier: cqLdbFmP4UinNvi3frxNz1dsHAWrvgu97icepURcmVQ=
Subject key identifier: 94:8C:47:12:19:FE:1F:97:AB:E8:CF:D6:17:77:EA:50:8B:CA:6E:B7
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0187CD03F605533B33217D068D5CA1C64F46
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/lIxHEhn-H5er6M_WF3fqUIvKbrc.roa
Signing time: Sat 29 Apr 2023 12:36:41 +0000
ROA not before: Sat 29 Apr 2023 12:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 93.89.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jul 2023 09:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cd:03:f6:05:53:3b:33:21:7d:06:8d:5c:a1:c6:4f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Apr 29 12:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=948c471219fe1f97abe8cfd61777ea508bca6eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c7:4d:4e:ad:62:04:09:9c:80:a7:96:33:53:
4f:f2:35:6a:74:22:88:e6:0a:71:8b:c4:1e:5f:93:
bc:98:ff:3c:23:49:27:21:37:93:2e:ea:9b:6b:78:
77:af:86:08:b4:65:11:77:a6:d4:7b:4b:28:e4:c1:
50:e6:6b:3d:5b:8d:65:2a:b0:2d:4d:ad:52:b1:8b:
d7:40:4a:c5:36:74:9f:e3:4e:62:82:1f:63:75:53:
c7:b7:fc:b4:6d:ab:7c:f3:3e:75:e6:91:73:ca:f1:
de:bb:79:ad:1e:4c:b5:f0:28:8d:43:a4:57:7c:d2:
60:87:f2:08:8f:c7:89:b3:10:83:14:85:64:f3:ef:
d6:6b:12:13:15:a1:bd:b0:c6:50:16:96:75:b9:30:
9c:3d:29:21:a4:f3:f6:08:40:94:64:9c:85:c2:35:
18:85:1a:a2:e9:c9:8f:4b:f2:dc:2a:be:4c:e6:cf:
7e:0d:5f:f9:f0:c0:7e:14:11:71:06:46:80:30:1e:
9d:b0:ad:3b:48:64:e3:0b:62:01:f1:52:9c:c9:8c:
34:e7:c3:c9:1c:aa:51:a1:dd:12:a2:29:e0:5d:96:
57:0a:40:28:5f:d8:c1:95:71:82:0b:9d:d5:88:91:
da:d1:6b:00:f1:a5:d3:de:f3:a2:c0:a8:cc:23:02:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8C:47:12:19:FE:1F:97:AB:E8:CF:D6:17:77:EA:50:8B:CA:6E:B7
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/lIxHEhn-H5er6M_WF3fqUIvKbrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.220.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:9d:0f:b4:eb:57:87:69:20:8c:14:87:87:a9:e2:80:24:09:
59:92:98:fa:29:c7:a9:1b:00:40:28:50:6f:8a:4d:4f:c6:df:
55:53:6b:cd:48:7a:1e:6f:13:fb:d7:23:70:c2:6d:00:42:1a:
d5:e9:66:39:fd:8d:cb:8e:b7:44:cf:80:a8:ac:72:dd:3a:44:
33:3f:b9:ac:12:35:f1:c6:75:0d:89:ac:7c:0c:e9:4c:3e:37:
df:12:fe:4a:06:7d:07:32:dd:2d:1b:3c:cb:f1:f9:a8:09:16:
a7:f2:a6:22:21:fd:49:41:6c:f3:8e:cf:fd:3f:7a:65:49:8a:
3e:97:3a:b8:5a:30:6f:dd:95:4c:61:72:c1:7d:5f:37:4d:7b:
da:2c:c5:16:7c:64:83:ee:3d:78:9a:29:c0:ea:91:83:be:cb:
85:4b:5f:33:03:cd:d4:50:55:c4:b2:53:e1:58:58:4d:68:c0:
d7:d6:8e:34:be:d3:89:cb:a0:14:a1:ff:13:a4:ca:a4:10:a6:
81:71:36:0f:44:ef:9e:73:7b:5e:29:5f:55:1b:82:d1:bb:34:
14:ba:51:78:28:53:27:bd:5a:20:0b:0b:58:79:c3:3a:d2:a3:
e3:7c:74:fa:b8:f7:5a:91:20:40:a5:d2:4d:ae:51:31:1b:6e:
81:65:36:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org