Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/z0MOyl80cvwuXHugs-oqi9enr_E.roa
File: z0MOyl80cvwuXHugs-oqi9enr_E.roa (raw, json)
Hash identifier: M7qAwUWJp0xuxsZwQ/VlixNfSxn8xy+7/BMvrLW/37A=
Subject key identifier: CF:43:0E:CA:5F:34:72:FC:2E:5C:7B:A0:B3:EA:2A:8B:D7:A7:AF:F1
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018A70D05CE3E99A9D11A9B3B9C4910C19F6
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/z0MOyl80cvwuXHugs-oqi9enr_E.roa
Signing time: Thu 07 Sep 2023 18:03:38 +0000
ROA not before: Thu 07 Sep 2023 18:03:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42689
IP address blocks: 93.89.208.0/24 maxlen: 24
93.89.209.0/24 maxlen: 24
93.89.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Sep 2023 18:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:70:d0:5c:e3:e9:9a:9d:11:a9:b3:b9:c4:91:0c:19:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Sep 7 18:03:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf430eca5f3472fc2e5c7ba0b3ea2a8bd7a7aff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:17:24:60:00:2b:91:b4:c5:26:0c:5f:4f:1c:
e5:e7:a0:8c:da:9c:53:62:43:14:b1:83:f1:c7:26:
69:62:be:ee:f3:26:0c:9c:1e:04:d4:79:32:e1:75:
58:79:9b:96:9a:ce:75:2a:e9:db:d7:1a:56:03:ca:
0b:9e:15:e0:d0:81:58:d8:5f:21:5c:00:59:4e:ea:
ab:4b:b4:2e:5d:2c:63:d8:f1:46:67:e1:29:40:fc:
29:1f:4c:71:51:26:54:97:ea:2a:d4:7c:bf:4a:8a:
01:dd:6d:2f:12:76:1d:c7:bc:bc:51:ab:17:ae:5b:
d2:c0:1f:0d:71:8f:32:eb:b7:3b:6d:29:2e:ff:a3:
db:33:40:9f:95:b2:dd:7d:c4:e6:10:f1:db:22:21:
cf:d0:e8:b5:bd:4c:d3:42:31:f7:ac:c6:02:df:0b:
ab:8d:d3:5e:52:9b:a0:02:bf:ae:e9:9a:6b:e1:9c:
d8:55:bb:50:13:90:86:89:cf:a0:ca:20:ac:d8:56:
a1:c1:d2:b6:d9:0c:6b:10:63:56:f5:bf:b3:0f:55:
8e:c2:dd:b7:5f:59:cc:5c:b1:31:b8:a5:31:f8:42:
b9:49:93:ee:3d:f6:ca:c6:73:eb:61:a3:3d:06:05:
66:69:c4:5e:b2:13:0a:0d:0b:37:c0:89:d6:5d:f8:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:43:0E:CA:5F:34:72:FC:2E:5C:7B:A0:B3:EA:2A:8B:D7:A7:AF:F1
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/z0MOyl80cvwuXHugs-oqi9enr_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.208.0-93.89.210.255
Signature Algorithm: sha256WithRSAEncryption
bb:e7:aa:89:49:b1:a9:c0:e2:98:8d:8d:21:8c:56:ef:46:7a:
1c:fe:e4:62:bc:35:2c:cb:55:c6:f1:df:ae:26:ff:02:bb:fe:
67:ac:92:ea:de:e6:b3:67:da:2b:eb:e4:20:f6:41:c1:d5:3d:
bd:04:6d:7f:39:a8:5d:ea:ce:0d:be:a3:1d:c2:9a:2a:62:14:
97:41:9e:e2:71:8e:69:4d:98:38:8e:8d:db:b7:7d:3b:65:fb:
29:cd:70:d9:c7:60:ab:38:cc:f0:ee:12:e5:99:b4:29:81:1e:
dc:dc:70:5c:08:2a:9f:71:55:30:b6:6e:29:56:1c:8a:88:ce:
7f:53:b9:36:38:d7:a5:4b:60:a1:1a:ae:d2:b0:6d:37:bf:a3:
45:83:8e:e0:e8:12:63:ac:4d:ee:72:e3:90:72:e4:7e:e3:02:
e8:f1:5c:86:f6:ab:18:f5:3a:ff:96:b7:2b:20:0a:89:4e:24:
c1:2f:e1:72:3d:07:66:db:eb:55:b0:ba:c0:b9:0b:f5:d0:b7:
33:e9:6a:3f:1e:a1:48:33:b6:6d:58:1f:73:43:0b:54:4b:f8:
8f:17:66:36:2a:48:1c:8d:c7:33:b4:4f:b8:a7:db:a2:32:91:
47:9f:bb:d1:7a:97:6f:28:63:d8:81:c1:8e:63:de:52:26:dd:
8a:4a:e4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org