Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/6edwp1NxRSIihaqmpkGQjxmgj88.roa
File: 6edwp1NxRSIihaqmpkGQjxmgj88.roa (raw, json)
Hash identifier: 1ycxpPDKX40DfiD1OtCG5bT/YNu3rZ6uSgm+zdmcpEY=
Subject key identifier: E9:E7:70:A7:53:71:45:22:22:85:AA:A6:A6:41:90:8F:19:A0:8F:CF
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01896B774952A2E1143C1660A5D5D2E15818
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/6edwp1NxRSIihaqmpkGQjxmgj88.roa
Signing time: Wed 19 Jul 2023 00:05:26 +0000
ROA not before: Wed 19 Jul 2023 00:05:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 89.187.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6b:77:49:52:a2:e1:14:3c:16:60:a5:d5:d2:e1:58:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jul 19 00:05:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9e770a7537145222285aaa6a641908f19a08fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f1:25:bb:4d:83:f0:43:5a:37:49:67:c1:6a:
43:1c:b6:cf:1f:4e:7c:3c:cc:75:f0:92:31:e3:0b:
6b:85:96:d1:17:1d:bd:b0:fd:29:e2:8f:e1:99:1a:
eb:16:4d:24:8e:08:8e:38:05:2e:b6:84:93:9f:42:
c7:32:59:74:11:fc:15:41:cb:cd:95:4b:8c:34:cb:
35:12:56:8d:6b:4c:a4:f3:24:4e:f6:a6:8a:04:a6:
ef:de:2a:0a:23:6a:1e:85:8e:fb:14:82:95:36:75:
ab:ec:ab:4c:40:b4:18:9c:d3:94:4a:a3:3a:61:6b:
9e:ab:b7:56:f4:01:01:9a:f2:7b:43:38:8d:61:ea:
64:7c:84:d6:69:48:73:45:ba:82:b1:9d:d7:8c:8b:
50:39:68:3f:df:2a:23:f7:76:23:dc:ba:c8:0d:8f:
85:28:1a:c4:43:81:5c:aa:03:36:2d:21:93:5e:bf:
0e:51:4a:e9:32:13:57:a4:b7:94:09:e3:28:02:8b:
80:65:40:bc:8d:84:25:d3:ab:2c:a3:cc:83:dd:ef:
b9:71:a0:c5:54:eb:dc:66:fe:88:18:39:bb:09:11:
74:f5:7e:4d:d1:86:01:9d:58:1c:4c:bf:6e:09:84:
ec:80:05:11:bf:f2:c2:38:5a:2c:a7:13:dd:95:cd:
c6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E7:70:A7:53:71:45:22:22:85:AA:A6:A6:41:90:8F:19:A0:8F:CF
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/6edwp1NxRSIihaqmpkGQjxmgj88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d8:4d:9d:c9:c6:f7:ae:2f:aa:b9:01:d9:b9:3f:e2:5a:38:
0d:df:e5:48:95:5b:f1:36:18:b4:c5:b1:ff:89:50:fc:5a:8f:
56:01:5e:ca:be:bc:08:3e:5f:23:d2:c0:0b:53:5c:43:64:c2:
27:0f:57:7e:09:1a:9d:6b:1a:50:08:4e:eb:2f:ab:16:e0:e5:
82:b6:18:5f:be:7b:ce:09:f6:6d:18:0e:e8:1e:c6:44:af:3e:
f8:8d:5f:fa:25:6b:0c:15:f1:43:95:f0:b6:a9:b3:59:ad:6a:
b4:ca:ec:7e:56:47:3e:54:0f:3f:1c:0d:ec:dd:31:27:00:fc:
20:37:c3:82:30:6a:6e:92:f9:f4:fa:9b:27:02:9d:e8:ef:36:
22:4f:b7:1a:bc:38:0a:fe:f4:17:0b:fd:35:16:93:03:e0:75:
b8:96:a5:46:8c:f8:5d:09:90:eb:33:04:a5:55:dd:6a:0a:02:
23:c6:0b:fe:0a:72:fe:a5:e6:4f:09:bc:49:10:1a:88:63:74:
52:17:57:ea:66:1c:8e:e6:8a:79:ad:98:47:06:72:2c:eb:f8:
20:40:37:83:36:b0:73:eb:e1:db:a8:f8:45:18:4e:6d:c6:46:
18:56:1d:7a:4c:8f:69:af:97:63:c4:60:e7:d3:01:27:14:93:
9b:3b:97:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:04 2024 by rpki-client on console-ams.rpki-client.org