Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/8kbQ87N_loV-4gBLSCB4WtOOKWg.roa
File: 8kbQ87N_loV-4gBLSCB4WtOOKWg.roa (raw, json)
Hash identifier: cfHOjO4XV8BXJSjv3UdFQoWXoQiILHW7XvhlwtDcoe4=
Subject key identifier: F2:46:D0:F3:B3:7F:96:85:7E:E2:00:4B:48:20:78:5A:D3:8E:29:68
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01878ADD1581B35CF252DADCD3388D29D88F
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/8kbQ87N_loV-4gBLSCB4WtOOKWg.roa
Signing time: Sun 16 Apr 2023 16:19:17 +0000
ROA not before: Sun 16 Apr 2023 16:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39810
IP address blocks: 89.187.0.0/23 maxlen: 24
89.187.2.0/24 maxlen: 24
89.187.3.0/24 maxlen: 24
89.187.4.0/24 maxlen: 24
89.187.11.0/24 maxlen: 24
89.187.7.0/24 maxlen: 24
89.187.8.0/24 maxlen: 24
89.187.9.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.5.0/24 maxlen: 24
89.187.6.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.16.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.13.0/24 maxlen: 24
89.187.21.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
89.187.23.0/24 maxlen: 24
89.187.24.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.20.0/24 maxlen: 24
2a10:e400::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8a:dd:15:81:b3:5c:f2:52:da:dc:d3:38:8d:29:d8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Apr 16 16:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f246d0f3b37f96857ee2004b4820785ad38e2968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:c9:0d:ec:d7:86:34:9d:af:4f:6c:c1:7d:
67:0e:88:28:cb:6d:bb:97:0b:5b:0a:63:6a:4c:4f:
71:36:c2:0b:11:38:b4:d3:6f:4d:82:3c:5b:83:d7:
75:31:c6:35:2a:0b:ce:f3:0d:2b:e1:d4:40:0d:5b:
7e:02:15:21:2b:fc:65:91:6c:ee:03:ff:5b:39:cb:
d3:cb:0b:e8:1b:31:f8:20:64:6e:07:ca:d8:5c:74:
5e:4b:1b:f7:7f:72:80:60:80:91:31:71:e7:85:f8:
1c:78:83:20:8e:81:cc:83:c1:3c:f8:5d:bc:76:92:
98:47:85:8e:fc:21:6b:dc:f2:83:52:fc:a9:a7:69:
15:3e:07:d8:85:f2:5d:ac:2b:e4:45:98:47:1a:29:
c5:a7:77:7b:d0:b9:df:33:c8:80:a4:4c:5b:48:82:
28:d3:5d:bd:d4:d2:99:fd:68:f4:5e:aa:98:8e:ac:
d9:e8:0a:37:12:1b:63:a8:ba:11:b8:77:18:d7:7a:
ed:43:0f:e9:d7:6c:b9:f5:f9:50:06:08:78:51:aa:
9a:9e:e0:11:f7:e2:14:2f:83:23:7f:4c:e4:1d:2c:
1e:8a:dd:05:04:c0:3f:12:3a:6d:c7:80:d4:5b:90:
98:b5:4c:58:76:ff:98:2f:a6:23:71:85:4d:dd:6a:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:46:D0:F3:B3:7F:96:85:7E:E2:00:4B:48:20:78:5A:D3:8E:29:68
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/8kbQ87N_loV-4gBLSCB4WtOOKWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.0.0-89.187.24.255
IPv6:
2a10:e400::/29
Signature Algorithm: sha256WithRSAEncryption
6b:2e:63:87:46:aa:22:49:0f:e6:aa:ee:ea:ab:22:5f:49:e5:
7d:8e:bf:1f:c4:83:2e:1a:fa:89:7c:13:b4:f0:31:d6:dd:fc:
b5:57:5e:99:f6:27:37:85:cd:58:61:d9:e1:e5:6e:eb:59:82:
85:d6:2b:38:1b:93:cf:ca:71:6f:86:5f:1a:f7:fe:15:77:1a:
5e:1b:0b:83:04:a5:e5:c3:99:19:08:87:e6:ef:b9:bc:bf:24:
6d:f4:4c:b2:14:d3:c1:1a:55:8a:35:c3:99:6e:09:be:76:1c:
e8:3a:d0:da:9a:3d:2c:12:67:9a:4c:5d:67:ce:45:1b:c2:d5:
d8:7b:16:ac:de:72:4d:fd:6c:9d:6d:3c:70:9c:01:00:82:b5:
b2:6b:cc:4b:6e:27:4f:a3:16:de:74:df:da:7b:56:58:2b:f8:
6e:0c:ba:2a:5f:d1:76:f6:15:e2:56:f7:56:d6:c7:08:a8:f2:
68:10:74:6b:d3:5b:47:de:86:af:9e:2b:a3:41:8e:f7:3e:87:
67:a6:e1:e1:b5:be:5a:96:12:77:e3:47:66:e2:37:ce:cb:13:
9c:9b:9f:85:fd:0d:9e:54:3e:b4:f6:52:cc:f3:b7:1c:15:95:
b7:50:81:3d:a8:24:23:35:16:a1:d7:a0:c3:0b:0f:97:64:0c:
01:10:c1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org