Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/AOGbtjARRkewGk_HwHcPbQQjxOE.roa
File: AOGbtjARRkewGk_HwHcPbQQjxOE.roa (raw, json)
Hash identifier: FLh63f1gXqWbQyLO+ElQyKuGeMHl9D4krmldXVvD3HM=
Subject key identifier: 00:E1:9B:B6:30:11:46:47:B0:1A:4F:C7:C0:77:0F:6D:04:23:C4:E1
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01911F8AF048152F2A2528EB85FB32957C82
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/AOGbtjARRkewGk_HwHcPbQQjxOE.roa
Signing time: Sun 04 Aug 2024 22:38:04 +0000
ROA not before: Sun 04 Aug 2024 22:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 89.187.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 09:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1f:8a:f0:48:15:2f:2a:25:28:eb:85:fb:32:95:7c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Aug 4 22:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00e19bb630114647b01a4fc7c0770f6d0423c4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e9:a4:e7:99:cf:b9:72:fe:22:1a:fa:ad:2c:
b8:8a:27:a3:83:39:e1:28:55:ee:62:12:26:a1:37:
a1:90:1f:b5:76:9e:64:38:a8:7e:19:07:aa:10:a6:
75:ee:53:e4:f5:ca:06:23:21:f6:1a:05:1d:b7:18:
78:e4:75:6d:4a:71:f9:fa:90:57:f2:16:50:e8:7b:
2a:10:53:7d:96:41:4b:da:30:8f:fb:08:ec:ff:66:
5a:be:df:ef:51:7f:61:12:c9:b2:57:3d:7f:45:2b:
d3:68:b8:04:f7:6c:58:6d:4a:a2:dc:5b:90:fd:0c:
98:b8:ef:d0:d7:7c:a3:ba:7b:ba:f0:5a:4a:98:c6:
47:b1:c7:06:d6:84:03:1c:c8:b2:19:f1:a7:96:ef:
b2:d6:24:53:b7:b7:73:90:fc:ff:d8:2d:b0:80:26:
af:ec:3e:9a:f9:e3:a5:e3:ff:4c:7f:5d:c4:cc:8d:
f1:6a:4d:6e:a3:92:34:c3:57:49:50:e6:13:48:0c:
21:cd:a5:af:b4:57:e4:25:ef:a9:62:b2:09:a5:1b:
b5:9e:f2:9a:05:88:17:81:8e:ff:30:6a:d1:4f:05:
93:ea:db:c0:9f:43:30:d6:f0:09:0d:11:ed:82:7e:
bd:94:cd:06:2f:dd:36:0e:59:6d:5f:7f:4d:ae:bb:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E1:9B:B6:30:11:46:47:B0:1A:4F:C7:C0:77:0F:6D:04:23:C4:E1
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/AOGbtjARRkewGk_HwHcPbQQjxOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.20.0/24
Signature Algorithm: sha256WithRSAEncryption
04:44:dd:c6:db:02:de:ab:91:94:fd:ec:7d:6f:1e:c6:2d:55:
ba:94:5c:74:7d:24:d9:d5:e2:47:96:dc:f1:9e:57:35:7f:19:
e4:3e:57:fc:32:c4:91:c3:3b:e2:b5:ef:e1:81:2b:b8:09:51:
c4:3c:fa:67:f8:c6:25:a7:d5:2c:fc:8b:06:a9:83:54:9b:92:
79:4a:52:53:62:91:6b:6e:73:5f:70:38:ef:4b:b3:a0:f1:f3:
9c:97:a0:82:05:a2:5a:1b:f6:44:38:4e:08:a7:b8:c8:a5:2b:
43:48:e9:e4:5c:81:25:b2:c2:b6:82:53:9b:5e:06:08:1c:8e:
13:c9:35:8f:c5:34:11:6a:7a:60:ab:63:45:b4:7c:c2:37:ba:
87:1e:0e:08:79:e4:0e:54:ef:b1:bb:16:3d:e4:ef:0f:9b:77:
25:ed:41:7c:20:ae:60:36:4b:e9:bd:19:e6:91:5a:cf:42:6b:
3a:fc:d4:c8:69:b9:64:15:c6:dc:cd:49:27:cf:b4:bb:fd:9e:
52:64:76:87:38:f9:ac:ab:39:22:96:02:2f:1c:ba:b9:08:85:
4c:ed:d5:7f:7f:20:94:76:b2:d0:e2:f9:18:b6:e4:12:35:45:
04:6e:fd:82:a0:5a:a6:19:d6:5e:b8:a0:06:b3:e3:35:e4:da:
e2:83:e9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 13:10:43 2024 by rpki-client on console-ams.rpki-client.org