Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Ewqo48bdoEkhAiyBlC1j8xWFTn4.roa
File: Ewqo48bdoEkhAiyBlC1j8xWFTn4.roa (raw, json)
Hash identifier: 8sCSEPMNxQEebWUTuPzkuq2FCtWYGUzp3BMLfM1QSmI=
Subject key identifier: 13:0A:A8:E3:C6:DD:A0:49:21:02:2C:81:94:2D:63:F3:15:85:4E:7E
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01882A89DB3B3C44F20C21A294917EFCFEE8
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Ewqo48bdoEkhAiyBlC1j8xWFTn4.roa
Signing time: Wed 17 May 2023 16:27:37 +0000
ROA not before: Wed 17 May 2023 16:27:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.187.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2a:89:db:3b:3c:44:f2:0c:21:a2:94:91:7e:fc:fe:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 17 16:27:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=130aa8e3c6dda04921022c81942d63f315854e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:35:74:88:aa:4c:ea:9b:36:45:c0:eb:ac:
89:f1:92:ff:3b:bd:af:aa:d0:4d:77:16:99:0a:25:
71:04:b1:9f:a9:46:d6:d8:8b:95:ed:6d:ab:18:f2:
58:7b:0e:29:c1:33:44:11:c9:7f:5e:06:cd:aa:9b:
e6:21:b6:5a:b6:36:7b:18:7d:17:59:a2:0e:9c:c8:
ff:6c:f7:41:8b:98:8a:0c:9d:27:7e:4f:39:a2:ef:
69:80:cb:15:54:dd:2a:5d:72:90:5f:3a:44:bc:86:
bd:e2:73:54:0c:0f:e6:04:51:6b:8a:a6:d9:22:1f:
0f:86:77:b1:04:5c:b6:a3:27:5d:9d:5b:8f:af:d3:
a3:56:33:0a:02:74:58:f4:f0:e1:89:00:4e:63:fb:
d8:cf:0b:a3:31:36:c9:61:25:88:e2:c5:09:99:ce:
21:a9:e8:c7:ca:71:e3:03:ed:6f:43:14:b2:94:f6:
41:1e:02:ae:40:11:41:d0:62:77:79:9f:80:71:74:
40:27:ef:7c:ef:ac:97:b3:f0:f7:ff:6e:37:4e:cc:
ab:67:ea:48:ac:62:a7:53:2a:e7:eb:3f:57:62:3e:
b8:92:cb:4a:ad:0b:ce:58:28:76:e1:c0:bf:f0:09:
31:bd:31:4c:d8:02:78:cb:69:f6:0d:e5:27:65:67:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0A:A8:E3:C6:DD:A0:49:21:02:2C:81:94:2D:63:F3:15:85:4E:7E
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Ewqo48bdoEkhAiyBlC1j8xWFTn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.9.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:d6:cd:e3:77:86:a7:a7:27:31:00:b1:77:e3:f4:43:02:17:
d8:54:0c:ae:86:99:85:30:eb:43:c7:83:9a:99:6d:f0:39:c9:
9d:00:71:7a:b3:e8:a9:cd:7b:0e:19:8a:c3:c6:b4:41:b4:20:
6c:ae:a0:b4:4e:55:c7:69:2f:7c:0e:44:c3:43:6a:f7:d0:26:
a3:6b:60:26:6a:d5:eb:e4:37:89:6d:04:1e:37:58:26:1f:41:
b5:38:58:06:8e:0a:b6:51:f3:a3:45:34:dc:8b:74:36:ad:9d:
f5:d2:41:53:bd:a6:1c:34:e0:95:1a:09:7b:69:69:be:43:3c:
d1:a9:ab:68:ea:1c:1a:34:d6:be:ed:08:b2:11:9a:b4:3e:ea:
fe:18:a3:6c:81:e4:44:2c:43:5f:3c:cc:14:99:b4:be:7d:76:
a7:19:27:63:60:69:f4:be:64:b3:30:5d:ba:ed:6d:43:86:f3:
28:3f:aa:19:d2:a3:e7:1c:88:da:ec:7b:fb:70:f1:83:40:d5:
6f:d0:fd:98:38:03:d3:69:b0:71:df:ea:df:06:60:b4:f3:86:
47:23:13:68:79:2a:4d:7a:06:c5:bd:4c:c6:db:78:18:b4:4f:
6e:4c:04:84:b5:79:2b:63:a2:da:f3:0f:db:ec:15:a2:5a:a0:
ce:1a:a7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org