Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/lMjDmYRjPTJr_g_y6F8EKSSnp3k.roa
File: lMjDmYRjPTJr_g_y6F8EKSSnp3k.roa (raw, json)
Hash identifier: TZ/s1cXz3d7K3adhHm9z/P8roWKUK46Gc1vo0vuzdGM=
Subject key identifier: 94:C8:C3:99:84:63:3D:32:6B:FE:0F:F2:E8:5F:04:29:24:A7:A7:79
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0189C6B1085CC3B3BEC8D4F1472DC4D98471
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/lMjDmYRjPTJr_g_y6F8EKSSnp3k.roa
Signing time: Sat 05 Aug 2023 17:13:58 +0000
ROA not before: Sat 05 Aug 2023 17:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 93.89.212.0/24 maxlen: 24
93.89.218.0/24 maxlen: 24
93.89.217.0/24 maxlen: 24
93.89.216.0/24 maxlen: 24
93.89.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 10:23:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:b1:08:5c:c3:b3:be:c8:d4:f1:47:2d:c4:d9:84:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 5 17:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94c8c39984633d326bfe0ff2e85f042924a7a779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dc:14:60:07:a2:00:f0:4e:4a:40:d0:46:d1:
bd:a7:e8:36:80:ef:fe:fb:e8:28:14:1e:ff:c0:8a:
ee:d2:75:68:5d:23:a1:63:3a:70:df:03:32:2a:56:
e7:54:1a:44:88:43:31:12:35:63:0d:85:9b:0c:5f:
f1:a1:b7:02:db:0b:c0:e0:32:2f:45:d8:5c:fe:27:
41:ee:21:51:ce:5c:18:b8:73:47:8c:92:6f:7b:de:
5f:36:34:41:1f:1b:3e:dc:0f:6a:a3:80:d3:54:09:
fb:59:c2:f7:0d:b9:c0:2a:98:3a:2d:1e:2d:da:3d:
a1:7a:e1:09:52:74:c8:bf:50:38:e2:15:7d:54:c6:
59:f8:1b:ba:f6:8d:68:95:39:75:95:f5:9d:83:c3:
57:38:20:65:72:b2:2e:a8:d2:39:c6:87:a4:95:95:
8c:d0:2b:e0:f5:28:61:04:34:ec:29:9a:8d:05:62:
c3:5e:60:ae:c9:2d:77:2f:07:59:32:ca:2a:b4:42:
61:36:43:bc:44:e0:9d:fe:37:ae:59:83:bc:54:53:
92:26:c4:64:ed:4d:ed:50:09:93:30:55:4c:cd:ee:
a0:0e:97:89:1c:ef:f3:35:23:f3:21:e5:00:7b:0d:
47:00:05:6e:79:57:d9:5f:bf:ac:f5:fa:3f:08:57:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C8:C3:99:84:63:3D:32:6B:FE:0F:F2:E8:5F:04:29:24:A7:A7:79
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/lMjDmYRjPTJr_g_y6F8EKSSnp3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.212.0/24
93.89.216.0-93.89.218.255
93.89.223.0/24
Signature Algorithm: sha256WithRSAEncryption
25:4b:b8:34:e6:93:35:19:d4:5e:8a:26:b7:37:fe:46:6f:08:
a8:e5:dd:42:56:0f:4c:a0:5e:5a:90:af:c2:b3:24:42:c4:c0:
c8:9c:d6:c1:e4:3b:aa:4d:24:3d:ac:93:70:35:e1:ef:86:3d:
62:6b:e9:b7:2a:9b:12:6b:7c:04:e6:c2:e5:49:3e:ed:02:d6:
77:3c:76:07:dc:a8:85:8e:d7:e4:73:3a:0f:c5:90:51:fd:91:
02:3d:6d:35:13:5c:2a:35:c9:45:60:29:e4:aa:d0:0a:d2:10:
6c:06:83:89:7b:bc:49:d0:cc:a2:19:fe:d6:03:6f:36:9f:0b:
b1:ed:76:6f:91:b8:d1:51:c4:55:fc:28:87:c9:87:e7:67:65:
c8:cf:38:d9:f2:d3:e9:d0:dc:b7:2e:f4:e7:b1:43:97:dc:59:
27:e7:3a:f2:67:74:89:80:fe:33:7e:c8:e8:e9:27:97:58:a5:
28:30:a7:2f:04:4b:b2:2c:b3:4d:1c:a1:b5:dc:61:82:f8:d5:
8a:6e:f7:0a:6e:fd:30:98:da:bb:51:4c:a3:f5:c6:63:7d:18:
ee:42:47:1b:bb:bb:59:cd:21:0b:38:08:05:09:6d:13:4e:c3:
b7:9d:42:17:5a:2b:c8:5e:2c:1a:34:5e:0e:18:c6:15:89:44:
52:f7:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org