Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/y94shMWb8yKJsePa347R1MrJOi8.roa
File: y94shMWb8yKJsePa347R1MrJOi8.roa (raw, json)
Hash identifier: zsaDiPpvF0uD89aDh8PtmrAVM1UECaoE+tizM/IXX1A=
Subject key identifier: CB:DE:2C:84:C5:9B:F3:22:89:B1:E3:DA:DF:8E:D1:D4:CA:C9:3A:2F
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018CC8017F03051D75224AFBE7703C65FAD2
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/y94shMWb8yKJsePa347R1MrJOi8.roa
Signing time: Tue 02 Jan 2024 02:29:50 +0000
ROA not before: Tue 02 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 93.89.213.0/24 maxlen: 24
93.89.208.0/24 maxlen: 24
93.89.209.0/24 maxlen: 24
93.89.210.0/24 maxlen: 24
93.89.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 10:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7f:03:05:1d:75:22:4a:fb:e7:70:3c:65:fa:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jan 2 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbde2c84c59bf32289b1e3dadf8ed1d4cac93a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:25:c1:87:df:4a:a4:08:ac:e5:ed:af:63:
27:2c:75:7f:8d:da:6e:97:ab:7f:d5:3e:f9:e4:09:
f6:f8:41:b9:0b:d8:89:01:38:fb:03:a5:33:27:54:
c7:e3:f4:df:c2:29:b6:58:f2:f0:6f:d5:c5:c1:c5:
57:7e:a8:e6:25:ff:e1:fe:f1:8e:33:e2:d5:87:b4:
5e:cc:2e:54:d6:4e:d5:fe:94:4c:8d:99:35:cc:7f:
8a:24:b0:eb:2e:1b:53:17:a1:c8:4b:81:31:b1:cc:
79:2c:ff:39:b2:e1:71:e4:2b:be:96:42:1d:8b:99:
a1:20:5c:0d:b9:26:b2:62:b6:29:38:a8:a3:5c:4d:
32:14:0c:0e:a7:b4:65:9d:e4:f1:ca:ab:b4:36:85:
21:47:39:12:75:0b:4f:de:46:06:46:31:da:35:b0:
5e:e4:1d:78:72:d2:dc:ce:52:24:7b:48:d7:b9:ac:
17:da:81:62:3a:57:d3:5a:4f:f3:c8:3c:ec:2d:68:
7c:6b:75:b3:1d:df:12:29:cf:fe:94:9f:52:d3:2a:
a6:d5:bf:1a:0d:04:b6:49:45:dc:1e:c4:f1:05:bf:
49:c5:4a:22:13:62:c5:73:5c:14:85:61:40:0f:22:
2a:71:2a:cd:c1:ee:a6:94:3f:f4:a2:89:6c:98:eb:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DE:2C:84:C5:9B:F3:22:89:B1:E3:DA:DF:8E:D1:D4:CA:C9:3A:2F
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/y94shMWb8yKJsePa347R1MrJOi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.208.0-93.89.210.255
93.89.213.0-93.89.214.255
Signature Algorithm: sha256WithRSAEncryption
ad:0f:5f:fb:96:f2:1b:7a:20:6d:63:51:24:e0:75:c1:0d:28:
b6:be:c6:48:7c:4d:89:3d:d0:74:ac:c7:62:f6:cd:48:15:fd:
30:69:9e:e7:8f:34:c9:0e:25:2f:9c:ca:4b:28:d6:b3:12:ef:
ed:3a:c8:79:e8:1f:8c:5f:ce:e3:ba:9c:91:0d:fa:0d:90:57:
75:c1:b2:08:50:8f:77:ec:b2:6e:c5:ed:71:ec:db:7d:ce:64:
b0:02:73:07:22:fa:3e:22:39:17:09:98:cb:fa:10:e8:6e:97:
25:36:c2:07:f0:9c:a9:9e:86:70:72:6f:4e:d8:dd:26:88:e2:
9f:7c:b3:82:61:69:e5:23:d6:70:d5:27:f8:dc:6d:dd:04:13:
55:3f:8e:f4:f3:4c:66:2d:6e:6b:fe:4d:65:fd:9f:f6:18:ca:
4f:41:36:5b:ea:ad:f3:ea:34:fe:e5:36:82:34:6d:91:fb:d5:
87:0d:f3:88:6b:3b:8b:ad:d6:83:b2:1b:a8:5c:1d:c8:d3:9d:
71:54:bb:2d:7b:b3:e4:3e:02:e8:0f:29:b6:94:8f:9c:91:22:
df:94:16:93:fe:67:fd:b9:8f:ab:9c:b3:2d:61:8a:b8:eb:b9:
89:f9:56:40:22:79:fd:32:53:97:20:cf:c6:33:4c:21:04:f5:
04:b3:c1:b0
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYzIAX8DBR11Ikr753A8ZfrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjQwMTAyMDIyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmRlMmM4NGM1OWJmMzIyODliMWUzZGFkZjhlZDFkNGNhYzkzYTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnIlwYffSqQIrOXtr2MnLHV/jdpu
l6t/1T755An2+EG5C9iJATj7A6UzJ1TH4/Tfwim2WPLwb9XFwcVXfqjmJf/h/vGO
M+LVh7RezC5U1k7V/pRMjZk1zH+KJLDrLhtTF6HIS4Exscx5LP85suFx5Cu+lkId
i5mhIFwNuSayYrYpOKijXE0yFAwOp7RlneTxyqu0NoUhRzkSdQtP3kYGRjHaNbBe
5B14ctLczlIke0jXuawX2oFiOlfTWk/zyDzsLWh8a3WzHd8SKc/+lJ9S0yqm1b8a
DQS2SUXcHsTxBb9JxUoiE2LFc1wUhWFADyIqcSrNwe6mlD/0oolsmOskiwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFMveLITFm/MiibHj2t+O0dTKyTovMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEveTk0c2hNV2I4eUtKc2VQYTM0N1IxTXJKT2k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBARdWdAD
BABdWdIwDAMEAF1Z1QMEAF1Z1jANBgkqhkiG9w0BAQsFAAOCAQEArQ9f+5byG3og
bWNRJOB1wQ0otr7GSHxNiT3QdKzHYvbNSBX9MGme5480yQ4lL5zKSyjWsxLv7TrI
eegfjF/O47qckQ36DZBXdcGyCFCPd+yybsXtcezbfc5ksAJzByL6PiI5FwmYy/oQ
6G6XJTbCB/CcqZ6GcHJvTtjdJojin3yzgmFp5SPWcNUn+Nxt3QQTVT+O9PNMZi1u
a/5NZf2f9hjKT0E2W+qt8+o0/uU2gjRtkfvVhw3ziGs7i63Wg7IbqFwdyNOdcVS7
LXuz5D4C6A8ptpSPnJEi35QWk/5n/bmPq5yzLWGKuOu5iflWQCJ5/TJTlyDPxjNM
IQT1BLPBsA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org