Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/EnpAO2QNDYc5gVyLOK1Q3bmp0UA.roa
File: EnpAO2QNDYc5gVyLOK1Q3bmp0UA.roa (raw, json)
Hash identifier: SfmPlaLkLjWLvzNJ0j8kvzhap0zv2CvXT+n9ZXUQRgc=
Subject key identifier: 12:7A:40:3B:64:0D:0D:87:39:81:5C:8B:38:AD:50:DD:B9:A9:D1:40
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0191DD18D1AF02DCE172E16EECC5EB7CA986
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/EnpAO2QNDYc5gVyLOK1Q3bmp0UA.roa
Signing time: Tue 10 Sep 2024 18:01:16 +0000
ROA not before: Tue 10 Sep 2024 18:01:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.187.24.0/24 maxlen: 24
89.187.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 17:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dd:18:d1:af:02:dc:e1:72:e1:6e:ec:c5:eb:7c:a9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Sep 10 18:01:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=127a403b640d0d8739815c8b38ad50ddb9a9d140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:06:4d:f1:7f:cd:df:0d:59:6f:08:b2:a9:
d8:6f:ee:cf:09:70:9e:b0:93:c8:36:b1:98:b1:0b:
a0:b2:24:83:d1:7f:85:1a:02:ea:04:29:ad:6b:e4:
11:25:7f:9a:b9:08:8c:09:15:26:78:8f:59:07:df:
28:25:63:d6:0c:52:5c:1a:0f:45:ed:bc:c4:ce:05:
5a:19:58:a1:a6:e8:6a:00:5a:c3:4d:13:0e:e5:2f:
23:3b:63:07:16:1e:ae:70:34:d6:60:e2:9e:06:9c:
06:74:77:2e:b3:f2:d3:ee:a3:59:3d:72:9d:28:71:
95:6a:a5:94:20:f1:25:90:75:cd:33:3c:75:20:be:
af:90:89:74:80:50:62:49:60:b2:9a:b8:f2:c7:de:
8a:6e:31:06:07:b5:d8:7e:07:18:97:0e:39:97:0a:
27:71:83:1f:16:22:1a:5e:a8:6c:07:24:fa:0d:de:
29:cc:ac:61:cf:ec:92:8c:be:f8:0e:cc:0e:4b:c0:
e3:c9:49:b5:ed:f5:93:cb:62:ab:55:9a:0e:8a:2b:
bf:dd:14:d6:6d:3f:b5:35:e6:b3:7c:4a:72:4e:02:
91:a9:fe:06:25:a1:b1:96:78:4b:43:5d:5c:a9:8e:
e1:89:b9:15:5a:45:84:10:e3:cf:aa:be:da:8a:39:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7A:40:3B:64:0D:0D:87:39:81:5C:8B:38:AD:50:DD:B9:A9:D1:40
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/EnpAO2QNDYc5gVyLOK1Q3bmp0UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.24.0/24
89.187.26.0/24
Signature Algorithm: sha256WithRSAEncryption
59:91:d3:07:41:05:5a:62:4c:8c:7d:c7:58:56:3f:ca:78:c9:
7e:6b:df:e7:c8:28:9c:79:de:dc:44:2a:d4:61:64:f2:bc:53:
6f:91:cf:43:a5:da:1b:ec:cd:1c:35:cd:a3:05:f4:bd:a8:59:
d9:7a:1b:0f:5f:00:04:1e:04:48:35:4b:61:39:0b:22:93:86:
2b:62:0b:81:96:bb:46:e4:de:e0:c8:41:a3:66:31:b2:d3:56:
5e:41:28:41:4b:0a:65:dd:de:ad:c6:12:e4:ba:dc:13:b7:c7:
2f:37:c3:2e:ec:81:8a:75:37:a1:d7:f6:a8:f8:2e:02:5c:7c:
77:cf:e5:b4:e9:2c:0c:1f:8c:b5:93:2a:ed:35:7b:93:e9:e3:
18:75:01:fc:61:ea:8a:d7:18:9f:b0:30:4c:bb:61:ab:b9:3e:
6a:d7:49:06:a8:e1:8e:6c:3f:ec:e5:0d:e2:89:01:69:f4:ed:
dd:9c:74:43:7f:36:68:94:be:4d:26:8f:e7:19:da:54:3b:db:
20:51:42:2c:c7:90:fe:39:41:ab:7e:5a:16:cf:7b:3e:16:c7:
72:66:6e:c5:e2:e5:27:25:f5:96:50:48:e5:a7:4b:1b:f2:27:
b4:06:29:3b:be:65:2e:bf:e1:73:c5:a7:8a:0d:bf:6e:64:a2:
f5:97:1f:e1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZHdGNGvAtzhcuFu7MXrfKmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjQwOTEwMTgwMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjdhNDAzYjY0MGQwZDg3Mzk4MTVjOGIzOGFkNTBkZGI5YTlkMTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOwGTfF/zd8NWW8IsqnYb+7PCXCe
sJPINrGYsQugsiSD0X+FGgLqBCmta+QRJX+auQiMCRUmeI9ZB98oJWPWDFJcGg9F
7bzEzgVaGVihpuhqAFrDTRMO5S8jO2MHFh6ucDTWYOKeBpwGdHcus/LT7qNZPXKd
KHGVaqWUIPElkHXNMzx1IL6vkIl0gFBiSWCymrjyx96KbjEGB7XYfgcYlw45lwon
cYMfFiIaXqhsByT6Dd4pzKxhz+ySjL74DswOS8DjyUm17fWTy2KrVZoOiiu/3RTW
bT+1NeazfEpyTgKRqf4GJaGxlnhLQ11cqY7hibkVWkWEEOPPqr7aijk9WwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBJ6QDtkDQ2HOYFcizitUN25qdFAMB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvRW5wQU8yUU5EWWM1Z1Z5TE9LMVEzYm1wMFVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWbsYAwQA
WbsaMA0GCSqGSIb3DQEBCwUAA4IBAQBZkdMHQQVaYkyMfcdYVj/KeMl+a9/nyCic
ed7cRCrUYWTyvFNvkc9Dpdob7M0cNc2jBfS9qFnZehsPXwAEHgRINUthOQsik4Yr
YguBlrtG5N7gyEGjZjGy01ZeQShBSwpl3d6txhLkutwTt8cvN8Mu7IGKdTeh1/ao
+C4CXHx3z+W06SwMH4y1kyrtNXuT6eMYdQH8YeqK1xifsDBMu2GruT5q10kGqOGO
bD/s5Q3iiQFp9O3dnHRDfzZolL5NJo/nGdpUO9sgUUIsx5D+OUGrfloWz3s+Fsdy
Zm7F4uUnJfWWUEjlp0sb8ie0Bik7vmUuv+FzxaeKDb9uZKL1lx/h
-----END CERTIFICATE-----
Generated at Thu Oct 10 21:18:42 2024 by rpki-client on console-fra.rpki-client.org