Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/9nQ7jRsxWyusGa-C6OCfsL9rHZ4.roa
File: 9nQ7jRsxWyusGa-C6OCfsL9rHZ4.roa (raw, json)
Hash identifier: NvZr5b7UYbF4B6kyh1WHtTZYpxGLVcPj1RY5oR7pufI=
Subject key identifier: F6:74:3B:8D:1B:31:5B:2B:AC:19:AF:82:E8:E0:9F:B0:BF:6B:1D:9E
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0187E112DFD766F49035F064DCC87DFED98B
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/9nQ7jRsxWyusGa-C6OCfsL9rHZ4.roa
Signing time: Wed 03 May 2023 10:05:23 +0000
ROA not before: Wed 03 May 2023 10:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.187.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:12:df:d7:66:f4:90:35:f0:64:dc:c8:7d:fe:d9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 3 10:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6743b8d1b315b2bac19af82e8e09fb0bf6b1d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:70:1a:72:3b:03:43:05:66:75:0b:6f:58:
98:db:3a:4e:a4:60:6f:e7:a4:81:53:e2:27:19:7d:
34:d0:e5:63:55:a3:cd:4c:0d:c4:88:34:38:ca:2b:
ae:44:8e:ac:7c:b6:fa:fc:b7:dd:06:df:bd:74:f7:
25:3c:86:fc:58:1f:1f:27:fe:03:fd:cf:d8:2b:6a:
7f:2c:8c:e3:e6:73:85:d5:00:7c:37:5e:58:0b:c8:
a6:0f:ce:86:70:8d:e8:34:2a:59:7d:e4:25:17:5a:
14:e6:3c:79:b7:e6:32:d6:3c:e5:e8:8e:4d:ab:7b:
be:85:80:7f:fb:a5:3c:d9:59:48:dd:59:1f:03:95:
74:a0:c5:6c:d9:26:5e:53:f1:f0:cf:16:94:16:2a:
ab:68:2f:3c:7a:55:b1:2d:06:ec:dc:96:3f:4b:50:
4b:ac:27:13:85:56:ad:94:d0:be:f3:8c:f5:7d:77:
38:c6:40:7c:e9:2b:d8:f0:6b:81:9f:e7:df:4b:76:
52:09:44:70:90:42:55:ee:05:1c:01:3e:4a:93:72:
51:e0:08:ca:de:be:6d:7e:11:34:54:9f:84:98:69:
90:0d:72:e0:4d:c8:8a:55:d0:66:42:c3:03:b3:c6:
cf:04:7d:90:3b:a7:2f:8a:ac:ba:84:f5:c1:56:b1:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:74:3B:8D:1B:31:5B:2B:AC:19:AF:82:E8:E0:9F:B0:BF:6B:1D:9E
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/9nQ7jRsxWyusGa-C6OCfsL9rHZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.20.0/24
Signature Algorithm: sha256WithRSAEncryption
15:2e:04:0c:69:d5:64:65:d1:48:37:ff:10:30:19:93:dc:f0:
ad:56:cc:0c:ca:64:b0:f9:42:09:ff:89:1d:ae:4f:fa:09:e8:
b0:03:bd:00:6c:5d:e3:c0:e1:2c:0e:70:c1:b9:06:e7:7e:c4:
59:26:55:6f:96:b3:bc:f0:79:5a:ad:c5:69:11:d2:48:c0:9a:
14:ae:dd:4e:bd:94:14:38:37:c1:22:86:ce:1c:21:d7:ed:a9:
42:0f:40:c3:a6:2d:b3:e8:d9:ef:a5:d8:ce:9f:d1:78:cc:69:
1b:81:5c:e7:4c:a0:fb:ba:1d:b2:87:c7:0f:26:f0:da:1c:0e:
df:36:6e:84:0f:55:3b:c7:cc:79:40:2a:21:8a:23:12:09:a6:
87:7f:36:d9:02:1a:c0:0e:7b:c8:e1:ab:69:ce:61:2a:5b:bf:
59:90:b8:86:f4:67:15:6a:44:cf:ce:0c:65:7d:bd:c4:e4:60:
e1:2f:67:7d:b1:7e:55:53:c6:3f:28:23:0f:1d:6f:42:e3:73:
01:6f:1a:b2:b2:cb:84:e5:73:3f:2a:de:4a:9a:51:57:86:9c:
24:03:a1:ac:f7:e9:05:4b:75:d1:b5:85:f1:cb:4e:de:2e:5a:
cc:28:91:2d:a5:2b:98:5a:63:26:2c:ac:4c:fe:cf:38:56:ff:
f3:ce:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:15 2023 by rpki-client on console-fra.rpki-client.org