Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/7CwbQ1o12Sl7kq7aVijFMwCgH1E.roa
File: 7CwbQ1o12Sl7kq7aVijFMwCgH1E.roa (raw, json)
Hash identifier: tfS2Pl50/v/sXQZ7xQyIdJSBpeXGXRc0aMRiEplRvBU=
Subject key identifier: EC:2C:1B:43:5A:35:D9:29:7B:92:AE:DA:56:28:C5:33:00:A0:1F:51
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01878B4B07F70322C7C525D0EAC4D62C3565
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/7CwbQ1o12Sl7kq7aVijFMwCgH1E.roa
Signing time: Sun 16 Apr 2023 18:19:22 +0000
ROA not before: Sun 16 Apr 2023 18:19:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39810
IP address blocks: 89.187.0.0/23 maxlen: 24
89.187.2.0/24 maxlen: 24
89.187.3.0/24 maxlen: 24
89.187.4.0/24 maxlen: 24
89.187.7.0/24 maxlen: 24
89.187.8.0/24 maxlen: 24
89.187.9.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.11.0/24 maxlen: 24
89.187.5.0/24 maxlen: 24
89.187.6.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.16.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.13.0/24 maxlen: 24
89.187.21.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
89.187.23.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.20.0/24 maxlen: 24
2a10:e400::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8b:4b:07:f7:03:22:c7:c5:25:d0:ea:c4:d6:2c:35:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Apr 16 18:19:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec2c1b435a35d9297b92aeda5628c53300a01f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:12:a2:a4:94:07:7f:ca:55:e3:a6:18:a0:
21:e6:da:28:07:4b:ff:1b:8f:75:8a:40:dc:fd:88:
4e:9f:27:92:ba:93:a3:3e:6c:46:1a:06:3c:3f:ed:
e0:8d:3d:0d:1b:0d:f8:47:1f:40:35:5b:1d:40:35:
58:68:3f:ac:19:59:27:0d:30:2d:d4:70:a7:80:1f:
61:55:58:9f:a9:59:cd:4d:b2:fc:59:25:67:8b:11:
4c:54:a0:c8:1b:8a:9f:ae:78:87:6c:a5:ae:ff:a2:
60:c9:51:cc:a9:b0:49:67:f6:75:0c:0a:33:f8:c5:
c6:24:c3:08:7c:61:20:00:de:a9:a4:85:04:db:f1:
8b:e3:51:8f:be:0b:9c:7c:91:a2:c1:ba:50:62:d4:
02:8e:51:02:df:85:78:9f:88:81:6b:2f:ed:b3:87:
5b:92:a6:11:a0:cc:fe:4e:03:95:5d:14:30:38:cd:
17:bb:12:40:0d:66:4f:95:02:99:4a:0a:18:31:cf:
6a:e4:a9:eb:e9:ea:ac:66:f9:af:67:23:fa:66:c1:
8a:74:04:be:14:bb:17:4a:ab:78:2e:bf:67:ab:b0:
f1:70:3a:25:15:9c:36:fc:9a:ad:97:ec:94:b5:23:
ad:5c:9a:be:46:c0:cd:7a:ce:32:81:97:73:c2:a4:
d8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2C:1B:43:5A:35:D9:29:7B:92:AE:DA:56:28:C5:33:00:A0:1F:51
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/7CwbQ1o12Sl7kq7aVijFMwCgH1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.0.0-89.187.23.255
IPv6:
2a10:e400::/29
Signature Algorithm: sha256WithRSAEncryption
6c:15:0c:3f:17:59:9d:01:eb:1e:13:89:5d:25:a0:3f:bc:c0:
e5:2d:6b:2f:00:60:a1:a4:70:37:7c:e0:5a:ec:87:5c:a4:86:
ea:d8:cc:09:a1:73:63:1d:3f:02:60:32:ec:1c:44:0d:c8:aa:
92:b9:98:24:31:8e:b5:15:25:7f:1f:1d:8d:39:aa:94:18:82:
3b:c7:5a:f8:2c:c6:fa:57:ba:86:c4:0a:91:01:18:f5:5a:40:
9f:ad:28:b0:94:3b:e9:4c:86:d8:96:4f:9f:ac:38:84:15:f4:
87:8d:dc:f8:03:58:bd:98:b0:01:6e:95:4f:86:2a:51:c6:f0:
b8:40:ce:45:03:3c:8b:47:6c:d5:79:be:65:2d:69:5d:9f:e7:
56:fd:97:78:6f:f4:90:75:83:cf:fb:53:b6:03:5f:0f:4d:2c:
3e:6a:6c:02:bd:98:53:1f:16:ec:d5:b3:6e:60:05:78:43:5c:
8b:36:1e:90:b0:12:8a:f3:2f:be:8b:d1:ba:15:99:34:05:5a:
48:04:e1:96:d3:62:1e:c4:6a:d6:29:c1:e9:86:aa:59:59:5e:
ea:37:51:19:d0:de:43:ee:90:92:0a:7d:b1:bb:ae:b1:eb:69:
eb:58:39:c5:2d:dc:26:1e:14:a7:57:d9:31:38:e3:47:6c:32:
b2:3a:0a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:15 2023 by rpki-client on console-fra.rpki-client.org