Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/7hYfEmdDMkimT4k-L_RIxadqU_A.roa
File: 7hYfEmdDMkimT4k-L_RIxadqU_A.roa (raw, json)
Hash identifier: BYM1rNuwbqHbA3+e0qYXXndqnjwGDIatHWyBipB3tPM=
Subject key identifier: EE:16:1F:12:67:43:32:48:A6:4F:89:3E:2F:F4:48:C5:A7:6A:53:F0
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0187E131162C453934C1F40A2ED7AFE061FD
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/7hYfEmdDMkimT4k-L_RIxadqU_A.roa
Signing time: Wed 03 May 2023 10:38:23 +0000
ROA not before: Wed 03 May 2023 10:38:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.187.16.0/24 maxlen: 24
89.187.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:31:16:2c:45:39:34:c1:f4:0a:2e:d7:af:e0:61:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 3 10:38:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee161f1267433248a64f893e2ff448c5a76a53f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:ef:9b:1a:87:ad:2f:98:cb:25:fa:18:5e:
0a:a1:c1:81:73:a0:dc:56:16:2e:77:20:78:49:1d:
2c:89:f1:33:2d:21:69:93:4c:11:6c:ba:7f:94:91:
86:d5:1b:d2:9d:93:67:4a:29:63:2d:fe:32:bb:fc:
03:94:11:de:e9:a0:d1:9a:8b:e8:00:08:52:84:b1:
5b:93:81:d0:2d:4d:0c:7e:b0:91:a6:1d:a8:8f:e5:
f1:89:6f:2d:d1:22:ba:b5:37:88:be:3e:65:ff:87:
3e:c0:11:f9:38:91:b9:a2:0d:8e:44:76:5f:3e:9d:
76:dc:e5:a8:48:d9:fc:8b:e4:83:3f:b1:2d:e4:6a:
e5:e4:de:bf:1a:d3:2d:ca:76:aa:c3:f3:79:98:26:
53:1d:4b:c7:19:8c:37:ef:d8:ce:b1:56:15:36:fe:
5f:81:58:9a:26:f5:e3:1c:24:83:2f:d2:f2:82:4c:
6e:1e:78:c8:7e:60:51:fe:a1:9c:6a:3f:84:04:82:
f8:33:f3:2f:dd:b5:0b:33:17:2e:90:c6:7f:38:05:
fd:3e:f2:8e:40:e7:61:20:7c:56:1b:a4:a9:17:73:
36:fc:09:b4:d0:72:91:a8:d6:b1:94:7f:e5:66:34:
c9:ce:56:b9:f1:69:1b:4e:c3:77:16:f4:1b:cd:e8:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:16:1F:12:67:43:32:48:A6:4F:89:3E:2F:F4:48:C5:A7:6A:53:F0
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/7hYfEmdDMkimT4k-L_RIxadqU_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.16.0/24
89.187.20.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:53:83:5d:8c:52:bf:5a:52:41:5b:de:44:0b:4f:23:e2:7a:
7d:e8:9f:1c:6d:4b:5a:88:06:0f:83:ac:9b:f1:84:7f:e1:ba:
5d:79:97:c3:2e:fc:15:19:76:3c:03:c1:cb:b1:5f:71:7b:1c:
42:7d:02:5a:b5:d6:12:6c:6d:82:1b:2d:1f:a2:f2:db:e2:33:
fd:28:11:f0:d0:42:fe:5b:d9:42:9e:c6:12:c0:a6:af:9c:9f:
9c:e5:c9:c6:78:8d:9d:ce:53:7d:8f:6e:92:b1:c9:de:47:2c:
af:57:3d:e9:25:f4:c7:d4:5b:66:a4:e5:ae:7c:69:2c:e5:72:
84:7f:d3:2a:23:b2:42:5d:b4:8e:f8:ec:cc:86:74:b9:4e:34:
1b:3d:e5:85:3e:77:6f:da:ad:6d:81:2c:28:17:7d:f2:3b:a2:
3c:65:9c:97:c9:78:7a:c3:7f:73:05:8b:98:d3:11:dd:13:c9:
3c:75:4a:6f:e2:84:5b:10:2e:53:1b:e7:9e:0e:3e:fb:72:11:
d1:16:9a:cc:1e:18:b3:23:04:8b:f4:a8:82:b9:13:0c:b2:91:
d9:9a:e6:91:46:6e:b1:72:26:d3:0d:e3:29:32:61:09:48:29:
70:ad:0b:13:ed:2a:04:81:f0:2c:17:6d:6c:47:70:c2:7d:8c:
17:58:ec:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org