Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/AZJYsWG4pU_MirspmYprewmT_JI.roa
File: AZJYsWG4pU_MirspmYprewmT_JI.roa (raw, json)
Hash identifier: QAvFWe7rO0CDHMwa1LBDORPrfplYrnI5FfK+KPR+YTg=
Subject key identifier: 01:92:58:B1:61:B8:A5:4F:CC:8A:BB:29:99:8A:6B:7B:09:93:FC:92
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0191C2E042481EBCC049DABBE4F91843A16B
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/AZJYsWG4pU_MirspmYprewmT_JI.roa
Signing time: Thu 05 Sep 2024 15:49:22 +0000
ROA not before: Thu 05 Sep 2024 15:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49127
IP address blocks: 89.187.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 23:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c2:e0:42:48:1e:bc:c0:49:da:bb:e4:f9:18:43:a1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Sep 5 15:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=019258b161b8a54fcc8abb29998a6b7b0993fc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:da:d8:ff:e3:d8:ee:bb:ef:c3:0d:65:31:
11:46:a1:29:a5:73:2b:3a:54:5d:d4:de:1d:cf:7a:
1b:87:08:cf:fa:1e:55:81:38:24:0e:b3:24:cc:27:
a5:72:ae:68:e0:4a:86:e3:22:1a:b2:9f:b6:17:b3:
a0:c5:c0:b9:39:0b:6c:0c:84:61:ed:51:a9:1c:8d:
61:f2:88:13:95:e3:7f:de:55:b3:7b:65:97:90:f2:
f3:44:3a:d6:5a:10:df:47:38:7d:84:4d:f9:59:92:
e3:58:8f:38:53:e1:7e:e7:30:be:f3:d5:bd:7c:02:
e8:94:2f:d9:ad:4a:fe:72:d9:f4:ec:42:bb:94:56:
b6:74:ab:3b:cb:8e:b4:56:d9:c4:59:2f:07:69:af:
09:e3:d2:3c:db:aa:69:83:af:83:f8:45:4d:34:0b:
af:50:34:16:28:f3:4e:d3:84:99:75:5c:4f:c0:57:
cd:52:ad:45:ae:26:8e:c6:b8:79:39:16:60:f1:95:
a1:b2:8f:68:71:50:4e:90:e1:24:3c:cf:5c:0a:c5:
17:8d:b8:e6:06:bb:21:9a:eb:d4:7f:54:e5:e0:46:
1c:d3:31:2d:71:40:21:5d:24:19:79:8b:06:a9:d9:
de:14:a6:13:ba:9a:16:7d:b5:37:ba:ad:69:fb:7f:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:92:58:B1:61:B8:A5:4F:CC:8A:BB:29:99:8A:6B:7B:09:93:FC:92
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/AZJYsWG4pU_MirspmYprewmT_JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.25.0/24
Signature Algorithm: sha256WithRSAEncryption
de:81:bb:17:d0:c9:f9:78:f6:81:52:5e:e4:e4:8d:b7:ba:f5:
5c:98:7d:6b:63:a5:d0:e0:14:7d:b9:fa:e0:df:7d:71:a1:08:
49:49:f1:2e:b8:db:65:6f:0b:97:62:f1:63:18:bd:9a:ed:14:
fc:0c:52:0b:ec:84:c6:f5:c8:18:24:79:64:56:8d:b9:13:fe:
74:bd:4e:bc:70:71:f8:ef:41:1e:3d:66:f4:b2:ef:00:9d:ad:
d0:67:57:e5:82:fc:98:f9:00:95:68:07:22:f5:e7:dc:0f:69:
6a:51:a6:d6:45:d6:cd:8d:71:e5:10:ab:b0:1b:90:7b:dc:03:
d4:bc:d2:14:10:c2:13:a5:a0:ee:b9:33:07:03:ed:71:60:82:
ad:be:38:be:72:6b:7d:7e:29:76:65:d6:12:51:93:8e:19:52:
c9:ba:fb:55:0e:3d:dc:84:e4:c0:b3:65:3f:5d:b1:08:3d:8b:
4f:14:6f:96:d7:3c:cb:da:96:03:9a:7a:ab:fe:4d:91:b8:c6:
53:e3:42:9d:10:72:a4:7a:19:f5:1f:a6:1e:09:18:92:18:92:
a8:b8:7f:df:0f:2a:37:b9:bf:5a:ec:95:26:d4:f3:9c:74:3b:
f1:af:24:de:5b:5d:60:e7:5a:a2:72:77:d2:b3:0d:5c:83:30:
5f:11:30:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHC4EJIHrzASdq75PkYQ6FrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjQwOTA1MTU0OTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTkyNThiMTYxYjhhNTRmY2M4YWJiMjk5OThhNmI3YjA5OTNmYzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr7a2P/j2O6778MNZTERRqEppXMr
OlRd1N4dz3obhwjP+h5VgTgkDrMkzCelcq5o4EqG4yIasp+2F7OgxcC5OQtsDIRh
7VGpHI1h8ogTleN/3lWze2WXkPLzRDrWWhDfRzh9hE35WZLjWI84U+F+5zC+89W9
fALolC/ZrUr+ctn07EK7lFa2dKs7y460VtnEWS8Haa8J49I826ppg6+D+EVNNAuv
UDQWKPNO04SZdVxPwFfNUq1FriaOxrh5ORZg8ZWhso9ocVBOkOEkPM9cCsUXjbjm
BrshmuvUf1Tl4EYc0zEtcUAhXSQZeYsGqdneFKYTupoWfbU3uq1p+38U9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAGSWLFhuKVPzIq7KZmKa3sJk/ySMB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvQVpKWXNXRzRwVV9NaXJzcG1ZcHJld21UX0pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbsZMA0G
CSqGSIb3DQEBCwUAA4IBAQDegbsX0Mn5ePaBUl7k5I23uvVcmH1rY6XQ4BR9ufrg
331xoQhJSfEuuNtlbwuXYvFjGL2a7RT8DFIL7ITG9cgYJHlkVo25E/50vU68cHH4
70EePWb0su8Ana3QZ1flgvyY+QCVaAci9efcD2lqUabWRdbNjXHlEKuwG5B73APU
vNIUEMITpaDuuTMHA+1xYIKtvji+cmt9fil2ZdYSUZOOGVLJuvtVDj3chOTAs2U/
XbEIPYtPFG+W1zzL2pYDmnqr/k2RuMZT40KdEHKkehn1H6YeCRiSGJKouH/fDyo3
ub9a7JUm1POcdDvxryTeW11g51qicnfSsw1cgzBfETD0
-----END CERTIFICATE-----
Generated at Fri Nov 15 01:01:24 2024 by rpki-client on console-fra.rpki-client.org