Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/yysbuW1ZjlDWjUTJgMGMCcCXaj4.roa
File: yysbuW1ZjlDWjUTJgMGMCcCXaj4.roa (raw, json)
Hash identifier: +Q/iXvn3S+FP1BrEuUQADV1vwMYsNo0u0+KcuxiF0vM=
Subject key identifier: CB:2B:1B:B9:6D:59:8E:50:D6:8D:44:C9:80:C1:8C:09:C0:97:6A:3E
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01856D663D194D213C1C7A542939AB7F9934
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/yysbuW1ZjlDWjUTJgMGMCcCXaj4.roa
Signing time: Sun 01 Jan 2023 12:54:54 +0000
ROA not before: Sun 01 Jan 2023 12:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8520
IP address blocks: 62.93.212.0/23 maxlen: 23
62.93.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:3d:19:4d:21:3c:1c:7a:54:29:39:ab:7f:99:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 12:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb2b1bb96d598e50d68d44c980c18c09c0976a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:66:2f:e8:6a:3d:d0:29:c8:89:37:1d:1f:cc:
ea:c9:df:99:1f:ab:c3:24:4c:76:ab:a8:da:b0:ed:
12:04:20:50:c1:ed:d5:3a:57:4b:64:78:95:98:73:
fb:a7:2d:ef:78:9d:08:f6:d5:69:7d:cf:9e:ae:15:
fc:1f:dd:65:6c:d3:da:ef:0e:f0:e7:29:1b:92:a7:
96:1b:f7:f9:b0:f7:06:81:e0:ee:75:b3:e0:a0:c3:
34:b2:b4:85:f1:ce:cc:2f:77:d3:d9:ef:0b:e4:88:
5e:5d:4d:44:47:2a:54:49:e5:23:1e:57:a1:f3:99:
59:00:67:61:68:21:d2:71:94:5c:a2:b5:3a:3d:f6:
82:d5:1b:43:d3:4c:17:e8:6e:48:1f:9a:62:a8:cd:
05:c7:99:d0:a8:f8:3c:3a:45:5b:13:71:22:15:eb:
8f:87:9d:11:94:d4:b0:c9:a9:89:37:d2:58:91:c9:
4f:32:f9:51:0a:d6:15:58:8c:98:68:b7:97:0a:cb:
fa:40:3a:c9:c6:10:76:02:11:33:bd:73:6f:31:52:
fa:64:7e:fc:e8:ce:83:c7:d7:73:f1:40:57:fa:f5:
b0:d2:c8:df:42:4e:21:5e:e7:84:3e:08:99:e3:4e:
e7:b5:26:90:7d:c1:81:4e:e8:b4:25:9c:cf:b4:ad:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2B:1B:B9:6D:59:8E:50:D6:8D:44:C9:80:C1:8C:09:C0:97:6A:3E
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/yysbuW1ZjlDWjUTJgMGMCcCXaj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.212.0/23
62.93.246.0/23
Signature Algorithm: sha256WithRSAEncryption
17:e0:73:01:8e:c3:40:46:00:bb:85:84:cc:84:8f:b3:8a:7b:
83:6b:88:ec:86:01:00:d9:7c:21:51:64:4f:26:44:e8:df:0e:
e5:39:d7:8a:eb:9d:48:e1:5a:80:2a:46:f8:21:b0:90:61:32:
ad:55:ab:25:c5:e0:86:42:a5:42:e1:f6:fd:e7:1c:74:15:79:
d0:70:aa:ff:44:50:6d:ab:ae:a6:ef:f9:f4:42:95:17:bd:9b:
fc:2d:15:3f:74:aa:f5:3b:c6:ed:62:7e:f1:5c:9c:8a:b7:51:
c1:3b:e2:f1:8b:7c:b3:6b:42:0b:7d:c0:ae:d6:5d:76:c2:a7:
53:9a:af:f1:09:84:f0:ff:2b:6e:be:a9:61:4b:8a:a8:67:8a:
c7:c7:d5:18:a0:02:f1:ee:7b:32:cb:7e:9b:2f:0f:62:b7:80:
e6:cf:d9:b8:0a:aa:87:dd:49:44:36:14:30:b6:3a:75:3c:2d:
9f:44:ed:9a:4a:09:34:a1:bf:92:13:aa:c2:11:de:61:bd:b8:
59:b4:03:07:98:a7:ea:76:37:40:f0:80:81:38:25:79:cf:84:
6c:21:1c:3b:b2:0f:25:66:8a:bb:32:5a:87:e3:f2:7c:57:0e:
e9:3a:fa:23:70:8f:25:97:e8:7d:32:4d:5a:a0:47:78:3b:70:
09:84:98:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org