Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/1-T8ubelH0f9SVZftQoVdYhMj1t8.roa
File: 1-T8ubelH0f9SVZftQoVdYhMj1t8.roa (raw, json)
Hash identifier: XdI1c7/PmIA6g133WN9uqlR91p1K6kH8wyIWK/NdDh8=
Subject key identifier: F9:3F:2E:6D:E9:47:D1:FF:52:55:97:ED:42:85:5D:62:13:23:D6:DF
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 019044B859139046FCD559EB280CB3DC6B3C
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/1-T8ubelH0f9SVZftQoVdYhMj1t8.roa
Signing time: Sun 23 Jun 2024 10:50:50 +0000
ROA not before: Sun 23 Jun 2024 10:50:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.187.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 13:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:b8:59:13:90:46:fc:d5:59:eb:28:0c:b3:dc:6b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jun 23 10:50:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f93f2e6de947d1ff525597ed42855d621323d6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:85:bd:66:e0:16:d4:ce:1c:b6:e8:83:64:51:
97:9f:91:a4:ff:2e:f4:ac:70:7e:65:8c:dd:03:dd:
19:fe:62:61:c5:bc:f3:d6:68:d1:02:57:9e:22:a3:
f8:38:19:ab:6e:37:05:fe:84:87:26:08:00:76:ae:
1c:a9:43:ed:95:64:82:b6:d6:fa:a5:f8:7a:b0:7b:
4c:a4:61:e8:07:15:72:dc:41:ec:6a:90:ba:c0:7f:
8d:f3:20:16:68:01:99:cb:38:14:05:d9:cf:dc:51:
7a:33:8a:23:9f:45:95:11:72:ca:74:ef:a2:68:fb:
d8:d6:1e:3a:fe:c6:b3:ec:6f:5c:b4:41:3f:15:f7:
3d:18:bd:9e:ba:63:4f:8f:ab:4d:f7:d0:3e:f1:9e:
a6:a1:9a:60:08:28:1c:c5:ba:92:10:2a:3a:bf:6e:
6f:90:97:83:76:6a:4f:31:3d:b3:d1:a0:10:a9:5e:
20:f3:95:03:cd:73:15:94:97:cb:27:22:1b:ef:52:
64:2b:59:d4:0b:bd:70:15:f2:3d:4a:22:0f:a7:82:
fb:f4:0b:78:e5:9f:ec:94:aa:95:e4:06:b7:7e:f8:
c1:5f:c3:54:74:88:99:25:31:97:2a:9c:96:ad:e1:
c5:84:06:8d:19:fd:0b:ef:2b:11:60:de:06:51:a5:
4b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3F:2E:6D:E9:47:D1:FF:52:55:97:ED:42:85:5D:62:13:23:D6:DF
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/1-T8ubelH0f9SVZftQoVdYhMj1t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:18:2f:59:6c:c3:f9:5e:5e:94:88:9e:6b:93:91:fb:cd:df:
fc:7a:c7:4f:7d:ea:39:4d:e4:af:f6:2b:ac:9f:2b:ad:d6:2a:
6b:9c:ec:97:7f:7f:0a:54:70:63:53:b8:13:92:03:a5:b5:74:
7f:c7:e7:c8:30:1b:fa:0e:23:11:2e:2c:17:b2:18:ba:4e:0e:
dc:0e:ca:f3:cb:c2:de:a3:6f:12:4b:91:4e:f3:d3:65:68:3f:
6b:2b:6e:c7:82:db:7f:6c:33:0c:f8:e0:fe:ee:ab:e0:e8:4b:
56:af:f6:83:6d:69:cf:91:99:7e:ea:97:c3:89:cd:11:3c:14:
48:8a:f9:3e:af:01:f8:9f:f1:94:cb:7d:c8:4d:1b:ad:f5:b1:
a3:65:ec:41:8d:29:e5:1a:64:cd:fe:a9:ff:a9:44:02:3f:d7:
64:f6:a7:0b:74:55:13:76:a9:81:eb:14:e1:a6:15:76:ca:dd:
27:f2:87:dc:e0:f4:ee:29:c0:2a:9d:a3:44:0a:c6:50:33:29:
88:f3:70:71:d6:a8:71:70:6d:e9:c0:91:f4:d4:21:fb:70:20:
76:bc:19:ba:a6:2c:68:c9:c7:dc:28:3f:5f:6a:ad:c5:bf:9f:
db:0c:1d:d1:07:f3:ae:92:36:b5:8b:99:e6:52:90:dd:ef:bd:
32:af:a4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 20:25:52 2024 by rpki-client on console-ams.rpki-client.org