Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/BqnWxJ7ASemshWbnby07MuKkdKY.roa
File: BqnWxJ7ASemshWbnby07MuKkdKY.roa (raw, json)
Hash identifier: 5il/WqoB2aYrccnoqYRK2K0nTbwGK8LaOXOu079nIwc=
Subject key identifier: 06:A9:D6:C4:9E:C0:49:E9:AC:85:66:E7:6F:2D:3B:32:E2:A4:74:A6
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0187E112E07604D43AEBA8DBB66B65F67B30
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/BqnWxJ7ASemshWbnby07MuKkdKY.roa
Signing time: Wed 03 May 2023 10:05:23 +0000
ROA not before: Wed 03 May 2023 10:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 89.187.5.0/24 maxlen: 24
89.187.11.0/24 maxlen: 24
89.187.16.0/24 maxlen: 24
89.187.23.0/24 maxlen: 24
89.187.28.0/24 maxlen: 24
89.187.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 10:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:12:e0:76:04:d4:3a:eb:a8:db:b6:6b:65:f6:7b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 3 10:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06a9d6c49ec049e9ac8566e76f2d3b32e2a474a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:27:2a:04:b2:f8:23:41:12:5e:68:ef:50:
00:ed:ad:fb:dd:a9:33:f7:dc:c5:35:82:7b:70:20:
2a:a7:fc:5b:e9:30:4b:7d:fe:15:a7:3f:4c:ce:33:
f8:c6:a2:c5:d9:46:19:95:85:dd:c2:65:f5:5d:b6:
86:22:ba:27:61:ec:c2:3e:e5:0b:27:a5:40:97:fc:
0d:a3:40:e7:ba:f6:bd:0b:9c:6a:11:84:2f:7c:3d:
58:1b:3d:a4:7d:b7:58:94:f1:26:51:2c:e0:e1:6d:
18:c7:6e:aa:5f:b6:68:a9:2f:16:d1:da:59:c5:db:
d0:ad:78:49:67:36:80:7d:c1:fe:cc:e0:cf:d2:c4:
bd:65:6f:ed:c2:a6:76:75:97:fb:e7:4f:25:bb:8c:
0a:9e:55:99:25:25:13:70:d7:e3:95:62:04:c0:47:
fa:34:0a:e5:e9:ab:78:48:7e:9e:a0:a3:9e:d7:c2:
9f:f2:42:e9:51:15:87:ea:93:39:62:d3:a0:c3:26:
0b:37:7f:61:61:b5:f8:b5:78:af:69:6d:c3:24:91:
4b:f2:2b:c0:70:13:68:f4:e4:07:84:9b:41:97:89:
3d:65:b6:10:08:80:30:e3:4b:e0:b7:81:d3:3f:fc:
75:6a:e8:a1:10:12:ea:b8:5a:f5:e9:a1:55:91:6e:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A9:D6:C4:9E:C0:49:E9:AC:85:66:E7:6F:2D:3B:32:E2:A4:74:A6
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/BqnWxJ7ASemshWbnby07MuKkdKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.5.0/24
89.187.11.0/24
89.187.16.0/24
89.187.23.0/24
89.187.28.0/24
89.187.30.0/24
Signature Algorithm: sha256WithRSAEncryption
42:94:56:a6:44:1c:bf:cd:01:d7:3f:e5:da:be:4d:71:5a:10:
80:79:50:21:eb:79:c4:0e:67:d0:27:32:3f:f9:c1:60:e5:27:
fc:3a:a1:4e:db:bf:11:4d:83:2e:e0:ab:c1:d6:b2:b5:04:69:
75:cf:8b:f6:24:69:2f:39:a4:20:d3:66:fc:ff:95:80:09:f2:
23:32:f5:d5:66:f0:72:4c:b3:ce:a7:33:82:49:f2:3c:44:ee:
0d:a2:05:a2:83:b7:95:be:c0:d2:8c:f8:7d:a6:08:e7:e4:ff:
57:21:c7:ee:57:08:34:74:cb:f5:d0:f0:17:c9:aa:45:27:16:
a2:05:b2:d8:b6:77:ac:bc:40:64:ac:76:bb:7a:13:4e:bd:42:
6c:49:ed:7b:e7:c0:d5:b5:bf:b4:9a:f3:3d:12:dc:3b:73:d4:
45:8c:3e:c5:be:27:37:5c:ee:3e:df:c1:43:69:8c:2e:37:11:
42:fd:88:a5:16:1e:38:f8:d6:40:b3:b4:6a:39:b9:4b:d4:f5:
d1:5d:86:5a:92:31:8b:0f:2f:2c:03:45:69:8d:5c:ca:00:be:
f1:bb:49:c6:2d:0f:bc:86:7e:1c:a6:3d:24:a2:30:3e:1b:00:
b8:ab:cb:5b:da:32:90:6e:99:0b:3f:65:91:c6:77:b0:e4:5f:
4d:90:c6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:49 2024 by rpki-client on console-fra.rpki-client.org