Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/9-cAgx4dG8z87-0ey-SszwDDB_s.roa
File: 9-cAgx4dG8z87-0ey-SszwDDB_s.roa (raw, json)
Hash identifier: fJBKFEK/qG2RjA6iUtY0BMWrKH7RrCATTI94wNkJeNk=
Subject key identifier: F7:E7:00:83:1E:1D:1B:CC:FC:EF:ED:1E:CB:E4:AC:CF:00:C3:07:FB
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0187E132005B5ED59AEE97FD7A6B37597E19
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/9-cAgx4dG8z87-0ey-SszwDDB_s.roa
Signing time: Wed 03 May 2023 10:39:23 +0000
ROA not before: Wed 03 May 2023 10:39:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.187.8.0/24 maxlen: 24
89.187.6.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 10:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:32:00:5b:5e:d5:9a:ee:97:fd:7a:6b:37:59:7e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 3 10:39:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7e700831e1d1bccfcefed1ecbe4accf00c307fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:25:ca:8a:0e:2c:75:0a:92:a2:43:f4:47:
20:3b:48:9f:5f:85:a3:88:2e:f1:a3:65:80:27:37:
fb:fb:4f:2c:1b:26:cc:6e:a6:73:6d:26:32:28:4d:
da:36:41:a0:b4:b6:11:d1:70:0d:8f:dc:76:d8:02:
8f:79:a1:ce:82:67:27:f2:ac:83:50:c2:ce:a5:90:
fc:8c:41:7a:72:55:27:7c:c0:fb:24:d8:02:38:7b:
05:92:da:d3:c8:21:52:fb:fd:72:e0:ef:22:6f:5e:
2d:2f:5c:75:d2:fe:2b:39:0d:3f:b1:f1:4a:10:43:
37:b7:1a:1e:ef:1a:72:14:85:03:7d:97:45:2f:88:
36:ca:4e:70:cd:05:cf:90:c3:d7:e2:8d:56:ab:37:
87:a9:cd:38:7d:b7:c5:eb:fc:eb:2c:c8:05:92:f0:
1c:d9:1e:62:a3:ab:00:e1:00:4e:f9:b9:af:35:06:
4c:45:98:6a:9e:15:91:62:f9:97:dc:75:58:20:b0:
6c:a0:21:13:13:91:e2:41:3a:d9:d1:9e:33:fe:97:
c6:76:30:79:30:c2:37:86:ef:50:ac:64:99:9b:c9:
bf:18:a6:cf:57:4a:cc:d9:21:7d:ef:e6:77:7d:c9:
97:3a:57:e3:0e:7a:bb:c6:7b:70:4d:5e:15:0b:f5:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E7:00:83:1E:1D:1B:CC:FC:EF:ED:1E:CB:E4:AC:CF:00:C3:07:FB
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/9-cAgx4dG8z87-0ey-SszwDDB_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0/24
89.187.8.0/24
89.187.15.0/24
89.187.17.0-89.187.19.255
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:26:ca:76:9a:64:0a:c3:22:97:23:d0:fa:5c:e3:90:6f:d8:
dc:91:03:11:4a:dd:86:40:fa:f9:97:60:2e:11:d8:d9:50:5f:
4e:3f:f3:3d:c5:e0:ca:3d:96:dc:e2:f7:62:98:18:62:91:c8:
00:85:b7:33:f1:29:34:d9:78:62:73:f4:0c:96:e8:41:50:b4:
9f:30:97:be:08:dd:89:cb:01:28:44:15:3e:f4:44:91:80:ee:
8a:0f:3c:54:f6:2f:a7:7a:88:15:a9:c2:55:e4:29:e1:75:61:
e7:8e:44:25:33:6e:f3:94:e9:7b:d6:9f:38:81:8e:06:d1:e6:
0b:17:b6:5a:fe:ce:87:d7:f8:96:32:87:33:be:70:aa:84:5d:
ac:1d:fc:92:07:16:93:e4:4a:0d:58:4d:ce:3f:01:3c:97:12:
41:7b:6a:b0:b7:4a:bf:a8:40:3d:41:ec:24:c6:f8:e9:06:c3:
76:16:87:df:6f:46:bd:28:79:22:74:e5:f8:7a:53:7e:c8:d5:
d7:1a:1d:f7:32:36:38:7a:b9:ca:5b:b6:7b:1e:a2:8b:6c:e0:
60:d6:38:ea:cf:d0:42:cd:92:f6:7e:4a:7a:8c:15:47:de:23:
ee:ef:fb:00:68:10:8a:fb:23:fe:33:de:ad:2f:59:74:b6:ce:
db:1d:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:49 2024 by rpki-client on console-fra.rpki-client.org