Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ydzVFYxKzapYbnutwwcfyGPIU6U.roa
File: ydzVFYxKzapYbnutwwcfyGPIU6U.roa (raw, json)
Hash identifier: pDuE/ZDfTVZT9LyGYHHcTOGeX7UeUAhRMZFIyeQulxM=
Subject key identifier: C9:DC:D5:15:8C:4A:CD:AA:58:6E:7B:AD:C3:07:1F:C8:63:C8:53:A5
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01878F80E30502204781C229BBAFAA7C4F17
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ydzVFYxKzapYbnutwwcfyGPIU6U.roa
Signing time: Mon 17 Apr 2023 13:56:41 +0000
ROA not before: Mon 17 Apr 2023 13:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42689
IP address blocks: 93.89.208.0/24 maxlen: 24
93.89.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Sep 2023 18:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8f:80:e3:05:02:20:47:81:c2:29:bb:af:aa:7c:4f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Apr 17 13:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9dcd5158c4acdaa586e7badc3071fc863c853a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:97:41:21:ab:41:40:b3:d3:f8:dd:16:ec:
9f:2d:5a:d2:77:53:24:c1:f8:3f:7a:b9:ae:0c:ad:
1c:5a:b8:67:02:2f:9d:88:a3:ac:17:07:3d:db:f0:
1d:01:da:4b:4e:e1:45:08:85:b0:9d:66:e8:f4:5a:
43:a2:cf:4a:34:6c:f8:eb:dc:c8:27:df:e6:c5:9c:
c5:c7:be:f6:09:fa:3d:5c:50:2f:56:1b:a1:22:ff:
eb:b6:18:55:cc:32:54:c3:c3:96:d3:3b:cf:72:f2:
41:a3:1d:12:d2:3e:94:07:4e:9b:b9:43:dd:b1:9d:
34:89:d1:04:8a:ea:48:8c:30:2f:d0:c0:1a:76:26:
5b:e6:f0:96:8b:08:7a:1d:8e:1a:68:5a:67:34:ae:
a7:f7:0d:8c:51:e9:c7:3f:c5:b5:9b:96:18:14:1e:
a5:f0:43:17:8d:04:7a:37:c2:cd:92:29:39:1d:1e:
8c:75:36:de:ba:78:ac:ab:f0:4b:14:62:a4:35:c4:
f9:09:4c:58:3c:44:4d:2c:43:9a:75:e7:af:de:bd:
f6:b0:e8:bb:aa:86:f7:9b:26:2c:c3:0e:06:2d:2f:
a7:cc:81:f0:2c:36:4e:de:a2:a3:42:13:c7:6c:f1:
52:f2:47:a7:2f:07:b9:fa:27:11:3a:59:c1:fc:5d:
9e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DC:D5:15:8C:4A:CD:AA:58:6E:7B:AD:C3:07:1F:C8:63:C8:53:A5
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ydzVFYxKzapYbnutwwcfyGPIU6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.208.0/24
93.89.210.0/24
Signature Algorithm: sha256WithRSAEncryption
00:17:90:45:bb:16:c2:c1:ff:d4:d3:3e:3c:0d:ae:ff:f2:33:
11:87:bf:80:b1:3a:b0:36:7a:b8:03:a9:b3:e6:f9:91:6b:25:
98:40:3f:e1:e0:ef:d9:b0:75:c3:4b:63:93:31:0d:0e:65:77:
66:25:14:a3:93:24:4e:24:ef:59:d8:9b:f9:8c:82:56:1c:fb:
5f:9f:1c:32:d1:1f:17:ff:b1:7d:9e:73:2d:f3:ef:86:36:56:
d6:99:d2:8d:1d:d1:b1:df:51:8b:de:20:a5:47:fa:4a:28:fd:
44:36:bd:50:ef:1e:4f:94:84:a9:54:6d:b3:13:9e:1c:91:54:
90:cc:b8:b6:1e:a8:46:16:e7:e6:96:f7:5a:c1:c5:47:c2:f1:
49:d9:a4:aa:2f:d4:b9:25:a6:91:79:ea:11:4f:54:53:85:7c:
4c:c6:dd:80:4d:e1:15:e6:27:02:a9:a9:85:e4:46:99:a0:18:
97:b7:39:3e:4b:2d:5f:0a:02:ae:19:cc:69:b4:4c:60:61:ca:
ae:2f:97:3f:57:23:88:ce:0f:ab:29:ec:f0:3c:53:d4:70:71:
02:cf:42:37:1f:1d:1b:da:96:b1:45:61:fd:b5:ab:51:d2:c9:
4e:80:dd:55:54:a0:55:56:bd:0a:f8:26:85:d8:3f:1f:e0:de:
08:1d:d3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org