Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Evvq2coQgf0-6Ge3uBhR4NWrseU.roa
File: Evvq2coQgf0-6Ge3uBhR4NWrseU.roa (raw, json)
Hash identifier: JdTIjEesskkbJlklR3mZN1hhewMGx4lRk8For6+S8z4=
Subject key identifier: 12:FB:EA:D9:CA:10:81:FD:3E:E8:67:B7:B8:18:51:E0:D5:AB:B1:E5
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01899764B7F157F14F6146DD53E1961EF697
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Evvq2coQgf0-6Ge3uBhR4NWrseU.roa
Signing time: Thu 27 Jul 2023 12:48:27 +0000
ROA not before: Thu 27 Jul 2023 12:48:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 89.187.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:64:b7:f1:57:f1:4f:61:46:dd:53:e1:96:1e:f6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jul 27 12:48:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12fbead9ca1081fd3ee867b7b81851e0d5abb1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:11:40:ed:06:f4:83:af:70:b2:81:1a:a5:34:
74:4e:42:95:f9:89:25:8a:97:93:a8:69:57:57:e8:
22:19:a2:3b:f4:d3:6d:06:7e:28:29:ee:97:de:dd:
03:fb:4a:cf:5e:ce:af:1c:c3:46:ae:8f:16:2b:ed:
c2:3c:d9:68:3a:31:a9:aa:67:94:e6:d2:07:94:c8:
92:01:a2:0f:f3:fc:5d:cc:65:bb:08:f7:8d:b9:df:
90:79:e6:ed:cc:95:4c:d2:0d:8e:42:9c:e4:48:a3:
7f:01:62:85:68:4e:f4:23:b1:18:cd:70:cb:26:eb:
53:ba:9c:b3:62:1f:59:70:61:69:ee:89:99:12:4e:
25:b6:0f:f8:9f:37:6d:ae:12:d4:bc:1b:e3:e1:34:
aa:3a:d2:c6:39:36:3b:2b:1f:4d:ae:9c:20:10:e8:
95:b9:6e:f8:8d:42:09:11:c4:8f:19:cd:dd:33:67:
2c:fa:41:c1:c1:b5:de:d6:96:98:3f:bf:b1:ae:03:
8d:87:a9:70:5a:f3:c0:78:00:02:10:2f:c6:21:33:
63:58:0d:10:ac:13:c4:5c:33:90:28:fe:ea:a3:49:
f0:d1:a9:14:38:ed:0e:35:1c:44:53:eb:d0:a2:41:
bb:96:b4:63:f4:be:a2:f4:b6:5f:63:18:b0:f4:82:
6d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FB:EA:D9:CA:10:81:FD:3E:E8:67:B7:B8:18:51:E0:D5:AB:B1:E5
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Evvq2coQgf0-6Ge3uBhR4NWrseU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.31.0/24
Signature Algorithm: sha256WithRSAEncryption
af:46:1c:32:de:cb:e3:f2:c0:25:1b:6d:bd:8a:18:dc:36:31:
9f:64:18:39:5e:a9:75:24:72:14:b6:e6:aa:5d:03:c1:f7:39:
38:bc:42:f4:4d:9d:92:c4:ca:0e:11:eb:df:0b:4d:b7:87:1c:
47:e9:62:cd:c9:57:8f:8a:37:b9:70:ed:6d:f1:cd:da:4f:02:
0b:93:7d:29:41:29:fe:ef:b7:2f:a5:31:8d:7c:60:20:a2:17:
4e:7a:83:a6:fd:b1:b4:44:52:d9:d7:d3:f3:6a:b5:7d:1f:bb:
34:54:e1:da:5c:7b:f0:db:b3:93:56:64:18:94:cc:e8:17:5c:
a3:3c:fb:a1:c8:ef:04:bc:1f:54:29:e6:9f:e6:45:6a:a1:aa:
a4:4e:cf:9b:45:30:fa:02:18:3a:82:f2:74:c3:64:f4:f0:39:
fc:08:1f:52:7a:68:dc:a9:d6:cc:75:41:8f:98:d2:ae:57:1d:
bf:d1:24:24:6e:6c:6d:2b:3d:17:23:0c:c8:2f:3d:45:de:9f:
f8:7a:c1:4f:a8:f0:96:d5:b6:1e:01:92:bc:e3:f4:5b:44:69:
53:33:c0:47:79:cc:66:40:8f:43:4c:be:9b:94:97:70:9c:b4:
cf:7d:3f:86:ab:9b:90:13:94:99:6f:d6:6f:fc:91:d2:30:45:
96:59:bc:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmXZLfxV/FPYUbdU+GWHvaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjMwNzI3MTI0ODI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmZiZWFkOWNhMTA4MWZkM2VlODY3YjdiODE4NTFlMGQ1YWJiMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BFA7Qb0g69wsoEapTR0TkKV+Ykl
ipeTqGlXV+giGaI79NNtBn4oKe6X3t0D+0rPXs6vHMNGro8WK+3CPNloOjGpqmeU
5tIHlMiSAaIP8/xdzGW7CPeNud+QeebtzJVM0g2OQpzkSKN/AWKFaE70I7EYzXDL
JutTupyzYh9ZcGFp7omZEk4ltg/4nzdtrhLUvBvj4TSqOtLGOTY7Kx9NrpwgEOiV
uW74jUIJEcSPGc3dM2cs+kHBwbXe1paYP7+xrgONh6lwWvPAeAACEC/GITNjWA0Q
rBPEXDOQKP7qo0nw0akUOO0ONRxEU+vQokG7lrRj9L6i9LZfYxiw9IJtjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBL76tnKEIH9Puhnt7gYUeDVq7HlMB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvRXZ2cTJjb1FnZjAtNkdlM3VCaFI0Tldyc2VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbsfMA0G
CSqGSIb3DQEBCwUAA4IBAQCvRhwy3svj8sAlG229ihjcNjGfZBg5Xql1JHIUtuaq
XQPB9zk4vEL0TZ2SxMoOEevfC023hxxH6WLNyVePije5cO1t8c3aTwILk30pQSn+
77cvpTGNfGAgohdOeoOm/bG0RFLZ19PzarV9H7s0VOHaXHvw27OTVmQYlMzoF1yj
PPuhyO8EvB9UKeaf5kVqoaqkTs+bRTD6Ahg6gvJ0w2T08Dn8CB9SemjcqdbMdUGP
mNKuVx2/0SQkbmxtKz0XIwzILz1F3p/4esFPqPCW1bYeAZK84/RbRGlTM8BHecxm
QI9DTL6blJdwnLTPfT+Gq5uQE5SZb9Zv/JHSMEWWWbwW
-----END CERTIFICATE-----
Generated at Mon Aug 28 13:23:25 2023 by rpki-client on console-ams.rpki-client.org