Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/153n7TTqqMMLCf3m7gPW4YoQhrk.roa
File: 153n7TTqqMMLCf3m7gPW4YoQhrk.roa (raw, json)
Hash identifier: FNrM/BavjEjTlJfS4BkW7QRGX4e8PTEf8XuFFyxPIMc=
Subject key identifier: D7:9D:E7:ED:34:EA:A8:C3:0B:09:FD:E6:EE:03:D6:E1:8A:10:86:B9
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0187E13BC3CAE366536670BCC24276333081
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/153n7TTqqMMLCf3m7gPW4YoQhrk.roa
Signing time: Wed 03 May 2023 10:50:02 +0000
ROA not before: Wed 03 May 2023 10:50:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.187.8.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.6.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 06:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:3b:c3:ca:e3:66:53:66:70:bc:c2:42:76:33:30:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 3 10:50:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d79de7ed34eaa8c30b09fde6ee03d6e18a1086b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:58:32:bc:e7:fe:f8:4c:6b:85:5f:74:29:
6f:8d:45:cd:f1:6c:35:95:b2:8f:42:a6:27:21:7c:
9e:13:9e:ff:65:a7:10:18:a8:d8:d6:1a:d8:82:95:
19:1f:2e:04:d2:34:d2:bd:d5:70:dc:5d:2b:f2:17:
72:f1:3e:81:ee:bd:f8:71:b2:c4:d0:4c:b6:74:31:
05:99:d3:5a:69:d1:75:b7:55:0f:8a:bb:b5:3d:8d:
66:84:da:7c:d3:10:6e:96:d4:ef:9d:15:9a:a3:8c:
3a:74:97:12:80:b0:31:8d:db:5d:5a:a1:f5:7e:bf:
a6:98:5e:f1:80:bb:23:63:48:4d:9e:1e:87:a5:7d:
91:43:18:30:b6:ca:1f:cf:18:d4:e8:a4:09:5d:d9:
f3:6a:94:db:79:2a:3f:53:a8:af:fa:2c:d4:d9:28:
12:82:f5:c5:98:a6:ba:93:c6:23:c7:0d:b5:03:a7:
4c:8f:ce:7b:fd:3a:55:6a:e0:9d:48:df:18:2e:c2:
c2:84:eb:80:e6:b7:53:63:53:07:25:0b:6b:ff:5e:
1a:a5:ee:e0:4e:4a:c1:63:55:d3:94:ea:d5:48:85:
38:6d:6d:04:84:82:2d:d3:f3:0d:57:c0:bf:82:6a:
74:1e:d9:e9:cc:f2:d1:90:fe:dc:a2:66:3d:16:9e:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9D:E7:ED:34:EA:A8:C3:0B:09:FD:E6:EE:03:D6:E1:8A:10:86:B9
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/153n7TTqqMMLCf3m7gPW4YoQhrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0/24
89.187.8.0/24
89.187.10.0/24
89.187.12.0/24
89.187.15.0/24
89.187.17.0-89.187.19.255
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:14:31:46:46:be:1d:d1:65:06:e4:53:8d:c5:af:fa:c7:91:
45:57:76:97:8a:15:1e:bb:9e:f2:8e:ed:7f:69:a6:be:da:1e:
11:a6:5b:93:6d:7b:7f:09:59:83:97:f1:9f:ef:dc:6d:9d:a2:
14:46:2d:bb:b8:30:11:74:4e:be:54:3e:0a:72:de:c9:00:30:
7b:e5:e8:17:3c:7b:7f:35:81:cf:4a:d5:ac:ea:79:42:df:b7:
58:30:d3:ab:54:4a:fe:7c:75:0b:41:15:9f:61:01:76:9c:01:
56:15:21:2e:7a:d0:2e:30:29:69:f2:79:38:d5:49:d8:b4:18:
93:9e:d8:1e:87:e3:4f:aa:a3:40:0c:71:ce:9f:31:a2:bf:46:
00:41:24:35:ff:27:d4:3e:b7:08:56:24:c8:8d:ce:91:3f:7d:
57:3f:dc:8b:5f:70:d3:47:a0:91:3e:70:e4:6c:4d:de:a5:d9:
88:82:d0:62:02:b8:ea:e7:8d:b4:99:fa:a4:c2:83:a1:42:03:
19:d9:da:f0:d6:1f:7d:bd:5f:b8:99:70:ac:91:1c:be:18:52:
75:c6:61:d3:50:a6:04:87:a0:f8:b6:37:1c:96:ca:35:3c:16:
3f:e1:c5:7f:b2:2e:e3:17:5f:e9:82:d5:a9:08:95:7b:be:ee:
f2:cc:f6:3d
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYfhO8PK42ZTZnC8wkJ2MzCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjMwNTAzMTA1MDAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzlkZTdlZDM0ZWFhOGMzMGIwOWZkZTZlZTAzZDZlMThhMTA4NmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXNYMrzn/vhMa4VfdClvjUXN8Ww1
lbKPQqYnIXyeE57/ZacQGKjY1hrYgpUZHy4E0jTSvdVw3F0r8hdy8T6B7r34cbLE
0Ey2dDEFmdNaadF1t1UPiru1PY1mhNp80xBultTvnRWao4w6dJcSgLAxjdtdWqH1
fr+mmF7xgLsjY0hNnh6HpX2RQxgwtsofzxjU6KQJXdnzapTbeSo/U6iv+izU2SgS
gvXFmKa6k8Yjxw21A6dMj857/TpVauCdSN8YLsLChOuA5rdTY1MHJQtr/14ape7g
TkrBY1XTlOrVSIU4bW0EhIIt0/MNV8C/gmp0HtnpzPLRkP7comY9Fp6zYQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFNed5+006qjDCwn95u4D1uGKEIa5MB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvMTUzbjdUVHFxTU1MQ2YzbTdnUFc0WW9RaHJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAWbsGAwQA
WbsIAwQAWbsKAwQAWbsMAwQAWbsPMAwDBABZuxEDBAJZuxADBABZuxYwDQYJKoZI
hvcNAQELBQADggEBAMwUMUZGvh3RZQbkU43Fr/rHkUVXdpeKFR67nvKO7X9ppr7a
HhGmW5Nte38JWYOX8Z/v3G2dohRGLbu4MBF0Tr5UPgpy3skAMHvl6Bc8e381gc9K
1azqeULft1gw06tUSv58dQtBFZ9hAXacAVYVIS560C4wKWnyeTjVSdi0GJOe2B6H
40+qo0AMcc6fMaK/RgBBJDX/J9Q+twhWJMiNzpE/fVc/3ItfcNNHoJE+cORsTd6l
2YiC0GICuOrnjbSZ+qTCg6FCAxnZ2vDWH329X7iZcKyRHL4YUnXGYdNQpgSHoPi2
NxyWyjU8Fj/hxX+yLuMXX+mC1akIlXu+7vLM9j0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:03 2024 by rpki-client on console-ams.rpki-client.org