Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/x3yyKtigy6D2kiw1hdr-IbGBidk.roa
File: x3yyKtigy6D2kiw1hdr-IbGBidk.roa (raw, json)
Hash identifier: US51IYCnHAdoxAR63cs9m0my0CXrvNXqQsRoN0jk3nU=
Subject key identifier: C7:7C:B2:2A:D8:A0:CB:A0:F6:92:2C:35:85:DA:FE:21:B1:81:89:D9
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 018C1F3C67D0BFC8FD596A2DC92C38C7DAFC
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/x3yyKtigy6D2kiw1hdr-IbGBidk.roa
Signing time: Thu 30 Nov 2023 07:58:21 +0000
ROA not before: Thu 30 Nov 2023 07:58:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 89.23.92.0/24 maxlen: 24
89.23.85.0/24 maxlen: 24
89.23.80.0/24 maxlen: 24
89.23.81.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
89.23.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:3c:67:d0:bf:c8:fd:59:6a:2d:c9:2c:38:c7:da:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Nov 30 07:58:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c77cb22ad8a0cba0f6922c3585dafe21b18189d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:78:44:c5:ba:ce:22:94:2d:36:1b:b5:a6:
c4:20:ae:97:c5:69:7e:b7:0a:b8:a0:2a:cb:3f:d5:
c0:28:c9:43:4d:03:7e:23:a0:30:3a:8c:16:97:4b:
fc:c5:93:b0:fc:03:a1:0b:29:68:50:f1:06:f7:cf:
da:09:89:50:ae:58:d6:fd:61:24:ae:e7:3a:a5:ff:
c9:8e:95:3e:cc:33:d3:07:5b:d1:82:0d:18:5c:91:
95:97:47:78:10:39:97:dc:85:65:95:02:2e:d1:83:
dc:1b:33:f0:eb:97:67:86:63:a7:6d:fb:90:ad:6c:
71:e5:19:5d:2e:c0:fc:8e:16:3b:4a:9b:98:32:31:
e8:2d:ea:29:99:6e:93:e6:4a:96:c4:a7:d0:28:06:
24:30:05:21:39:f2:75:d0:f4:00:ba:c9:2d:17:46:
82:db:a4:74:ab:a6:5f:96:9c:d9:ac:bf:36:57:4a:
9e:90:c8:ec:ef:fb:2c:0e:d1:35:31:1c:15:7d:f1:
4f:22:ef:51:05:e1:20:0c:d0:b5:81:f9:9b:34:0f:
76:1b:ca:8a:46:f5:ca:26:43:2e:75:47:66:35:6e:
b5:9d:1a:4c:60:17:ac:c2:35:f3:62:9a:c6:19:e7:
8b:f2:63:74:c8:7a:42:6e:b1:3e:2a:52:94:64:f6:
0c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7C:B2:2A:D8:A0:CB:A0:F6:92:2C:35:85:DA:FE:21:B1:81:89:D9
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/x3yyKtigy6D2kiw1hdr-IbGBidk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.79.0-89.23.81.255
89.23.85.0/24
89.23.87.0/24
89.23.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:8f:97:ac:82:b5:72:ee:a0:10:67:92:57:20:b9:83:df:94:
7a:9d:b8:44:95:02:12:bd:e4:c4:71:49:ed:f1:e4:b7:a7:d8:
9c:8f:f6:f3:9b:6a:88:9d:e1:d5:30:fa:62:d2:2b:41:f9:5c:
7a:cf:08:06:ba:dd:be:ea:39:1d:12:ee:a2:2d:7b:c8:3b:be:
26:be:a8:aa:d1:b9:c9:f6:8c:84:a9:40:01:94:6c:f9:98:0e:
38:63:f2:bd:d7:67:62:f6:67:6d:5b:36:72:69:b7:b2:96:ac:
65:c3:bb:51:47:89:61:39:88:26:44:56:ad:df:ee:68:e3:cf:
cd:d3:ee:57:ed:82:f3:fb:b7:d4:97:47:22:2d:83:2c:64:5a:
d7:27:72:a8:72:3e:25:3e:c7:eb:b0:8f:3d:54:d0:dc:a4:5e:
55:b3:67:e1:6f:e8:68:bc:27:50:64:0a:17:bd:5d:33:d1:e7:
36:30:3b:83:3c:b8:06:e1:59:a6:c8:06:a1:8a:c3:83:71:be:
8b:b8:e0:1a:03:a2:9a:4b:8d:79:27:2e:99:ac:93:83:20:83:
f1:d0:f8:6e:f6:b7:93:d1:68:ed:b5:ef:35:03:f2:65:64:e5:
25:b7:4e:95:db:1b:72:3c:2b:ba:7c:31:62:48:d9:bd:ae:89:
e7:34:5e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:38 2024 by rpki-client on console-ams.rpki-client.org