Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/vXshUgSuacgyQERSdKM_8DSiU0g.roa
File: vXshUgSuacgyQERSdKM_8DSiU0g.roa (raw, json)
Hash identifier: m5jhiShfR4X7qZ4SucjUyi/tJh4q219fQFnlUHNUbQs=
Subject key identifier: BD:7B:21:52:04:AE:69:C8:32:40:44:52:74:A3:3F:F0:34:A2:53:48
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018709FCAC92DB4C81AD96BA1572A342884F
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/vXshUgSuacgyQERSdKM_8DSiU0g.roa
Signing time: Wed 22 Mar 2023 15:42:46 +0000
ROA not before: Wed 22 Mar 2023 15:42:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 93.89.221.0/24 maxlen: 24
93.89.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Apr 2023 19:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:fc:ac:92:db:4c:81:ad:96:ba:15:72:a3:42:88:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Mar 22 15:42:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd7b215204ae69c83240445274a33ff034a25348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:97:6e:60:ae:3e:38:6d:7b:4f:09:c5:84:
eb:f4:68:74:ab:6f:fe:f0:cb:6f:ba:32:6a:49:4a:
ce:54:ab:29:9f:ed:20:dd:84:80:45:d8:2c:00:71:
48:b7:28:37:2a:1f:41:b8:04:21:69:b2:bd:7a:87:
37:44:f7:1e:05:9f:27:1f:c4:60:02:f6:65:e6:79:
e4:50:9c:17:24:cc:c1:9a:80:4e:fe:43:5e:1c:f8:
68:47:0a:fe:ed:12:81:0b:b6:74:67:8e:dc:f4:a3:
c4:73:be:c8:a5:a2:a2:30:67:b7:58:be:99:2f:09:
17:9a:b2:0e:b1:b5:38:9d:49:1e:d2:a9:62:30:b5:
b1:58:a3:58:17:88:b7:19:ed:1c:50:07:0f:b2:ee:
62:bf:72:a5:1d:01:1f:78:1f:b2:b4:58:07:00:35:
1f:cd:ce:7e:02:e8:b5:4b:b1:06:d4:e2:5b:81:14:
f4:51:54:3e:c2:f7:03:58:62:50:81:ae:f5:43:e2:
a7:55:09:11:6f:3a:c7:66:47:42:54:58:a5:b3:0a:
1c:3b:3e:0e:a0:bd:54:69:65:e4:c6:61:49:5a:e9:
02:6d:58:67:5d:1f:13:ec:28:5f:8c:6d:b7:02:bc:
ff:89:64:50:72:49:50:94:ba:61:7c:c7:18:89:af:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7B:21:52:04:AE:69:C8:32:40:44:52:74:A3:3F:F0:34:A2:53:48
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/vXshUgSuacgyQERSdKM_8DSiU0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.220.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:df:29:72:d4:9b:9f:52:54:0c:70:c1:75:76:77:9d:d2:79:
74:3a:11:89:c6:b8:b1:3d:a6:a7:bd:e3:d9:fb:78:48:8e:3d:
27:80:4f:2e:a8:10:48:fb:4e:7b:0f:9e:7a:51:3b:04:1f:da:
cf:03:94:df:9a:2b:f4:35:c8:19:5d:e5:ae:b9:d3:ea:dd:04:
b5:05:99:fb:8f:35:15:0a:0d:88:56:ba:29:d7:46:e5:43:34:
75:76:35:d2:93:be:d6:b2:34:0c:11:d6:c3:a3:cb:83:83:84:
d1:7b:94:18:c0:09:49:97:82:57:ea:0f:3b:83:a6:58:16:55:
4c:bf:f1:53:d4:be:f6:26:d4:68:13:43:2e:2f:cf:08:31:ab:
ba:3e:c3:89:8a:67:2d:99:f0:5f:f1:ba:ef:3d:84:d3:63:62:
42:43:a1:5b:2d:48:d4:e0:d0:6f:3b:94:86:a0:1e:6e:79:c8:
30:b2:26:5a:ce:1e:a4:cc:71:9b:68:e5:a0:06:0c:4b:ba:e7:
1b:42:e6:c6:b7:0d:e4:dd:ab:9d:e6:f8:2c:bb:51:b0:70:8b:
ba:b1:30:20:b2:e5:27:c4:de:0e:a3:2e:65:b5:8f:35:7f:ed:
07:04:fa:7b:21:22:01:6c:70:ef:f9:92:61:60:fd:f2:28:d1:
d8:df:13:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org