Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/w-2tDOqGpOtt8k4KYVgs5iVNZO4.roa
File: w-2tDOqGpOtt8k4KYVgs5iVNZO4.roa (raw, json)
Hash identifier: k+huTabF+Ua+PmRPWe7OhHpB3sCQiru0tsibaQW5tnU=
Subject key identifier: C3:ED:AD:0C:EA:86:A4:EB:6D:F2:4E:0A:61:58:2C:E6:25:4D:64:EE
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0187E608D86B1F3627A059A2D0DBD1965E32
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/w-2tDOqGpOtt8k4KYVgs5iVNZO4.roa
Signing time: Thu 04 May 2023 09:12:32 +0000
ROA not before: Thu 04 May 2023 09:12:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 93.89.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Jun 2023 08:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:08:d8:6b:1f:36:27:a0:59:a2:d0:db:d1:96:5e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: May 4 09:12:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3edad0cea86a4eb6df24e0a61582ce6254d64ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6e:2f:5a:1d:4a:83:54:ec:5f:4f:23:6f:f6:
32:48:ba:82:ab:30:23:9a:33:2e:12:8c:8f:a0:8b:
64:b8:fb:5c:ff:2a:e4:dc:93:e8:12:8f:69:59:ab:
54:9c:da:70:03:35:79:fc:73:2c:94:1d:ce:15:82:
40:b5:e0:d0:19:8a:77:bd:31:c3:20:4f:e8:10:34:
df:bc:48:34:22:9c:fb:37:1a:e5:03:27:e3:4b:8a:
b7:a1:f5:4b:12:67:a1:af:4e:7f:36:7f:f1:35:b1:
fa:20:d4:35:d5:cb:a2:a4:59:ca:f7:c4:cc:c6:ef:
e5:9a:c1:ed:68:81:45:1c:03:fc:ed:35:82:4d:c6:
22:90:49:16:ae:c1:ac:1d:85:1d:a3:45:43:02:56:
4e:cf:34:42:40:d8:6f:8b:69:5b:12:54:0c:6c:04:
68:08:5f:2c:f2:3f:0d:27:b9:17:7d:e7:12:72:53:
65:38:02:9e:a1:27:7c:5c:bd:ed:43:0f:bf:e7:6d:
0d:90:8e:a4:26:c0:10:fe:0d:13:08:1f:75:48:cd:
63:10:91:d9:8c:5b:2d:87:8c:0c:c2:78:da:8e:38:
22:56:f4:d6:82:a6:c5:30:54:c1:f2:61:b2:39:78:
ee:c9:2f:c2:20:d5:df:e6:c0:31:66:ab:e3:61:b7:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:ED:AD:0C:EA:86:A4:EB:6D:F2:4E:0A:61:58:2C:E6:25:4D:64:EE
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/w-2tDOqGpOtt8k4KYVgs5iVNZO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.211.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e4:13:a2:8b:91:7c:d8:92:25:03:d4:c3:ed:a6:e0:62:c0:
b6:b1:a6:c3:6b:a8:1b:31:12:a5:a0:1d:71:6c:e8:9c:2b:92:
6a:3b:6b:e5:d1:62:f2:05:24:85:f5:ec:ee:ae:d7:d8:84:40:
ef:53:f5:f1:a6:f6:5e:cf:45:85:e7:df:54:99:df:06:bb:9f:
ff:f3:56:39:97:28:30:d6:70:36:9b:a2:fc:5c:0a:8c:ae:05:
cd:a4:71:e4:7b:d5:3a:d8:2e:9b:c1:01:4c:ca:9c:8d:f1:88:
66:91:21:94:68:5d:c3:71:84:ac:dc:18:84:76:b7:52:d1:5b:
34:7b:ee:d3:c1:e8:34:52:fc:c0:0c:25:8d:9f:f7:de:b9:96:
84:c2:80:62:c8:d8:ca:1e:e7:6e:82:36:6f:c0:f2:e4:ee:38:
2e:78:fd:87:16:37:4a:8f:e6:6e:54:29:6e:e3:7c:1e:34:0d:
42:3d:96:d7:7c:63:5e:6e:b9:1e:6e:77:7e:c8:39:6c:41:1e:
19:78:2c:7c:f8:3c:58:66:93:f1:5b:0e:04:4c:05:63:e3:fe:
e3:c6:bb:d0:7b:75:5b:99:0b:ee:c4:7a:f0:12:67:1e:6c:ac:
a6:f9:54:d4:82:48:66:a9:e0:d4:1c:65:a9:e0:19:a1:8f:f1:
b6:d3:4a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org