Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/sRT7SOIasUgxEYqKO4mPnnyXY1c.roa
File: sRT7SOIasUgxEYqKO4mPnnyXY1c.roa (raw, json)
Hash identifier: y50GL33LEqDQwgE7nsthhJ9C16eufjysGY8HaNVWWEQ=
Subject key identifier: B1:14:FB:48:E2:1A:B1:48:31:11:8A:8A:3B:89:8F:9E:7C:97:63:57
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 0188959C964EEA444A15F587023212F4EB01
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/sRT7SOIasUgxEYqKO4mPnnyXY1c.roa
Signing time: Wed 07 Jun 2023 11:27:27 +0000
ROA not before: Wed 07 Jun 2023 11:27:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 89.23.92.0/24 maxlen: 24
178.254.150.0/24 maxlen: 24
89.23.77.0/24 maxlen: 24
89.23.81.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
89.23.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jul 2023 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:9c:96:4e:ea:44:4a:15:f5:87:02:32:12:f4:eb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 7 11:27:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b114fb48e21ab14831118a8a3b898f9e7c976357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:f8:2d:95:86:bf:9f:cf:26:b0:96:86:7d:
f0:a3:5a:50:47:45:5a:e6:0f:b0:2c:0a:c3:b2:56:
0e:98:8d:11:7d:e9:c8:90:4f:46:db:58:09:3e:8a:
80:cc:43:4c:db:d4:57:14:30:fe:e2:5b:1e:9d:4a:
bf:b1:23:45:b5:7c:d3:37:49:20:4d:f8:5d:e9:39:
16:5d:c5:00:e6:8a:3a:46:7e:61:b3:70:2a:e1:d9:
7d:fd:f9:ff:98:17:1c:41:ac:8d:a8:13:8a:7f:e7:
28:20:31:f1:2a:e1:34:64:2e:60:7d:6c:41:8f:73:
5d:b6:6c:bb:f3:c4:95:a1:f2:33:15:9c:4a:04:fa:
63:4b:57:e0:20:ff:1e:18:f4:32:d3:ff:9b:a0:58:
91:98:87:8b:55:4d:53:09:ac:2d:2c:e8:5e:c2:ff:
37:aa:af:ee:8a:df:68:b7:53:f7:6b:8e:98:fe:96:
6c:4f:e9:01:65:d1:60:7f:89:8e:8a:65:5b:75:98:
3c:73:e9:57:e1:fb:2b:71:02:93:cd:2b:8d:f3:0e:
cf:27:05:4c:6e:f0:2a:02:46:20:27:9f:10:43:61:
4f:99:63:b9:79:f5:40:75:99:8e:0a:c8:b3:b0:13:
af:97:86:06:c8:fe:1e:91:bc:b9:4b:99:57:71:ad:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:14:FB:48:E2:1A:B1:48:31:11:8A:8A:3B:89:8F:9E:7C:97:63:57
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/sRT7SOIasUgxEYqKO4mPnnyXY1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
89.23.79.0/24
89.23.81.0/24
89.23.84.0/23
89.23.92.0/24
178.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bd:bb:39:1f:a9:9e:d0:86:08:dc:44:00:79:a3:ea:31:b9:
c9:9d:ea:f6:94:25:6f:67:fb:c3:e7:ba:78:db:5c:9a:ba:91:
c9:1a:93:b5:e6:61:e0:c8:84:1e:74:48:1c:e6:bd:81:da:4d:
84:b1:d8:55:40:c5:39:ef:f1:74:52:e6:5a:7f:55:21:33:7e:
fc:6a:47:67:32:f2:73:44:66:bc:e6:e1:0c:25:78:67:d1:95:
70:02:05:c9:64:76:24:fc:7f:e3:14:92:f1:93:a5:ed:b1:39:
ca:2f:72:d5:b9:65:f7:7b:9c:d7:86:8b:82:82:08:e3:b1:af:
c9:1b:75:11:25:cb:df:3d:7b:21:71:23:b6:f7:12:74:a5:a7:
c2:81:b8:4c:81:4d:ce:62:4a:60:ef:ea:bd:d1:39:7b:d5:b8:
01:ea:cb:d7:27:18:39:49:4d:25:9b:34:bd:c6:c3:c1:6d:da:
5d:86:e2:15:92:80:58:f1:75:97:16:cb:ee:32:54:ea:51:17:
57:6c:4c:5f:e0:3c:ec:97:50:d4:0c:d5:87:3f:24:cb:b0:cf:
41:ca:e7:60:4f:b8:9e:47:b5:d6:d1:70:95:a8:00:08:d8:62:
2a:b9:b9:fb:ae:ea:1b:61:0b:31:37:31:7b:f8:2a:c1:ce:17:
15:4b:b5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:41 2024 by rpki-client on console-ams.rpki-client.org