Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/py38-ug3Ad-XEddf63aWIuZMAsA.roa
File: py38-ug3Ad-XEddf63aWIuZMAsA.roa (raw, json)
Hash identifier: ceWb5VhzpSQMfOnZMgya/oAlE2JRkf2nwhntCciGuPc=
Subject key identifier: A7:2D:FC:FA:E8:37:01:DF:97:11:D7:5F:EB:76:96:22:E6:4C:02:C0
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018B8BF169BDD7C9DF73A23E45A06FDAE2E4
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/py38-ug3Ad-XEddf63aWIuZMAsA.roa
Signing time: Wed 01 Nov 2023 17:32:16 +0000
ROA not before: Wed 01 Nov 2023 17:32:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 93.89.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:f1:69:bd:d7:c9:df:73:a2:3e:45:a0:6f:da:e2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Nov 1 17:32:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a72dfcfae83701df9711d75feb769622e64c02c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:e6:23:5a:83:0a:11:38:9f:63:a7:a6:8e:
ac:5b:ca:e6:77:61:88:6e:64:04:a1:16:09:6b:d5:
7d:17:a7:75:bd:bc:f0:bb:3b:07:4f:13:e0:1f:a2:
67:a2:a2:a4:42:7c:ff:d8:9c:b1:36:fd:0f:c9:b5:
1d:59:fd:3b:b2:86:a8:bd:0d:53:62:f0:c3:27:77:
1a:5a:53:da:79:65:39:86:e0:a1:c1:c1:f7:64:aa:
e9:98:52:cb:ed:8a:51:55:bf:ca:59:f6:67:2f:33:
63:6d:bd:c9:c4:15:77:6c:73:c1:d7:cc:d1:b6:5f:
29:9f:2b:04:4c:cd:f1:7e:d6:67:a5:5c:a9:87:74:
40:93:b0:6b:61:69:0d:52:ca:b7:11:8f:a1:f7:7f:
9b:bf:24:c9:a3:ce:c3:16:9a:f1:6d:cc:96:7d:2e:
45:6d:24:c5:30:77:a5:b8:a3:4e:02:1c:15:6e:91:
2a:6f:1b:0d:c1:26:b7:68:cc:7c:48:51:68:41:b2:
49:00:c5:9b:58:94:d7:9f:be:ad:89:b4:74:d5:cb:
a9:3e:9e:40:33:01:e0:71:0a:f7:28:b0:6d:51:e9:
71:62:b8:22:f1:f2:25:c8:cd:39:21:13:b3:fa:90:
45:26:f0:68:68:4f:34:69:66:7b:91:10:a0:09:0d:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2D:FC:FA:E8:37:01:DF:97:11:D7:5F:EB:76:96:22:E6:4C:02:C0
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/py38-ug3Ad-XEddf63aWIuZMAsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.216.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:94:7d:ee:06:db:73:ee:c6:0e:e1:0b:05:4e:b5:ac:55:a3:
54:25:98:93:05:73:0a:6f:96:a8:be:1c:68:09:3d:66:45:5a:
de:22:76:2d:ad:5d:a4:1b:b8:15:6e:c6:39:54:ff:97:8c:03:
ee:aa:3b:50:56:fd:6f:48:ea:9d:74:78:bb:78:d6:f7:6c:78:
33:85:ed:8b:0c:18:c8:15:aa:21:a0:e6:73:aa:64:b9:96:93:
74:b3:a9:a7:04:75:c9:13:b0:db:aa:74:01:26:ad:20:89:28:
33:83:dc:59:cf:e2:a1:bf:46:00:5d:07:2f:ee:6c:1c:3e:43:
d9:e0:b8:60:4e:06:8b:ec:3f:e2:46:3d:c5:02:b7:45:ab:89:
06:c1:ce:e9:e3:23:db:37:89:83:58:19:7c:89:1e:73:32:15:
04:84:4c:b6:79:b9:22:30:45:ca:83:fd:bf:04:d0:01:f7:57:
c5:a9:21:18:d2:3d:d4:ae:b4:ef:6a:3e:8c:ea:ec:70:d3:7e:
1e:64:e1:54:6e:1e:d5:26:9b:12:92:10:da:01:cd:e2:91:23:
a3:ea:cf:c1:a8:d4:ef:89:2c:89:a7:e7:3f:ce:06:71:5f:35:
57:2a:e1:8a:9f:61:f5:61:ff:23:9d:47:9e:8d:f9:04:bd:44:
fe:dd:f4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 21:41:44 2023 by rpki-client on console-ams.rpki-client.org