Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/pjiEkeyi6SVZ1DbC46WgfpgaTME.roa
File: pjiEkeyi6SVZ1DbC46WgfpgaTME.roa (raw, json)
Hash identifier: 9nF3an9U4GfTOTzu6egfrs5yHD6p2cJaOGS147gaIkQ=
Subject key identifier: A6:38:84:91:EC:A2:E9:25:59:D4:36:C2:E3:A5:A0:7E:98:1A:4C:C1
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0189DF2481630DDD4211C3EC6568DE237C6F
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/pjiEkeyi6SVZ1DbC46WgfpgaTME.roa
Signing time: Thu 10 Aug 2023 11:10:58 +0000
ROA not before: Thu 10 Aug 2023 11:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 93.89.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:24:81:63:0d:dd:42:11:c3:ec:65:68:de:23:7c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 10 11:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6388491eca2e92559d436c2e3a5a07e981a4cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:39:6b:e4:f8:67:f6:d4:2c:f4:2c:4f:2c:
b5:58:2d:9a:75:88:83:8c:f7:b2:aa:d7:26:fe:f3:
d9:ce:5e:85:de:87:bf:21:0f:ae:0b:ce:6b:f5:bb:
27:b9:21:6e:59:b0:92:6a:06:fa:eb:b3:98:d1:c2:
75:54:25:ae:32:b4:3e:90:78:fb:06:d7:b8:94:3c:
84:bd:b8:46:b9:cd:cb:c2:44:d5:38:fe:37:28:a4:
18:65:c7:0b:d6:93:66:5d:8a:fc:f0:6c:19:1b:84:
d9:25:96:56:37:ab:5f:bd:97:36:a7:c9:60:2f:60:
ee:cf:3f:7c:a5:bd:3c:ba:94:b7:df:9e:81:0a:35:
7f:11:0b:61:73:de:3a:e6:b3:86:44:d0:2e:b0:ac:
d0:da:4f:24:60:a7:66:f1:25:d5:69:ea:19:fa:9a:
97:6e:15:59:0f:87:80:65:e3:62:55:86:15:d7:71:
01:8d:c7:2b:a3:68:9f:0c:e6:4a:01:35:cd:46:cd:
e0:8a:0b:e7:58:64:9f:a5:b5:b9:67:a1:ba:0b:64:
04:d3:af:9b:51:1b:99:41:ee:7f:dd:a1:eb:e9:83:
52:a7:e2:20:04:05:4e:64:25:37:de:00:33:c3:39:
b9:dd:a8:3d:90:b7:d4:0f:14:bf:0e:78:24:ae:46:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:38:84:91:EC:A2:E9:25:59:D4:36:C2:E3:A5:A0:7E:98:1A:4C:C1
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/pjiEkeyi6SVZ1DbC46WgfpgaTME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.215.0/24
Signature Algorithm: sha256WithRSAEncryption
17:34:f0:bd:8d:1d:93:83:43:6d:5b:31:fc:eb:a6:b7:46:08:
b7:e0:94:cd:39:f6:49:8b:5d:55:7c:ff:40:46:01:f8:56:34:
74:48:9a:d1:cb:a0:1b:21:5c:c5:40:55:2e:56:73:ef:12:e5:
4e:4e:c0:93:9c:84:01:8f:d9:8c:b9:2a:5f:c0:0b:42:ff:2d:
c8:be:22:be:e4:ee:02:55:f6:80:fa:fb:32:4f:d3:ee:eb:7e:
76:9c:20:8a:d6:50:b2:7f:af:bb:89:a0:ec:56:cb:0a:07:7b:
5e:a7:bc:c4:d7:cb:30:ae:a3:74:54:81:28:0a:ac:35:7c:07:
da:c0:b6:e7:ef:51:72:6a:56:a2:ee:40:1d:05:17:ed:15:1d:
c7:a7:1d:e0:97:a2:d2:08:f1:d2:e1:a5:2e:41:3c:78:91:61:
22:f7:c4:7f:df:dd:da:43:28:c7:f0:a3:91:12:33:42:44:9c:
24:e9:6c:39:87:26:ec:6a:1c:50:57:4b:66:9b:bf:6e:a3:88:
02:ba:a9:11:d8:bc:df:f4:6b:c8:47:16:db:7b:f7:79:00:2c:
3d:eb:94:cd:8a:aa:da:93:af:9a:71:c3:95:e6:52:17:01:bb:
4b:ff:af:7d:78:a1:b4:99:80:b1:c7:64:f0:15:c7:cc:2b:69:
8b:46:ef:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnfJIFjDd1CEcPsZWjeI3xvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjMwODEwMTExMDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjM4ODQ5MWVjYTJlOTI1NTlkNDM2YzJlM2E1YTA3ZTk4MWE0Y2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtY5a+T4Z/bULPQsTyy1WC2adYiD
jPeyqtcm/vPZzl6F3oe/IQ+uC85r9bsnuSFuWbCSagb667OY0cJ1VCWuMrQ+kHj7
Bte4lDyEvbhGuc3LwkTVOP43KKQYZccL1pNmXYr88GwZG4TZJZZWN6tfvZc2p8lg
L2Duzz98pb08upS3356BCjV/EQthc9465rOGRNAusKzQ2k8kYKdm8SXVaeoZ+pqX
bhVZD4eAZeNiVYYV13EBjccro2ifDOZKATXNRs3gigvnWGSfpbW5Z6G6C2QE06+b
URuZQe5/3aHr6YNSp+IgBAVOZCU33gAzwzm53ag9kLfUDxS/DngkrkZ3DQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKY4hJHsouklWdQ2wuOloH6YGkzBMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvcGppRWtleWk2U1ZaMURiQzQ2V2dmcGdhVE1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVnXMA0G
CSqGSIb3DQEBCwUAA4IBAQAXNPC9jR2Tg0NtWzH866a3Rgi34JTNOfZJi11VfP9A
RgH4VjR0SJrRy6AbIVzFQFUuVnPvEuVOTsCTnIQBj9mMuSpfwAtC/y3IviK+5O4C
VfaA+vsyT9Pu6352nCCK1lCyf6+7iaDsVssKB3tep7zE18swrqN0VIEoCqw1fAfa
wLbn71Fyalai7kAdBRftFR3Hpx3gl6LSCPHS4aUuQTx4kWEi98R/393aQyjH8KOR
EjNCRJwk6Ww5hybsahxQV0tmm79uo4gCuqkR2Lzf9GvIRxbbe/d5ACw965TNiqra
k6+accOV5lIXAbtL/699eKG0mYCxx2TwFcfMK2mLRu9Q
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:37 2024 by rpki-client on console-ams.rpki-client.org