Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/FIEnWiXbSFq9WW0NVGU6_5aQQJU.roa
File: FIEnWiXbSFq9WW0NVGU6_5aQQJU.roa (raw, json)
Hash identifier: vBWzzhycuSVkhE9UNNMNauHOVPFbidPPm4TZI8pF5Sg=
Subject key identifier: 14:81:27:5A:25:DB:48:5A:BD:59:6D:0D:54:65:3A:FF:96:90:40:95
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0187EBEB6589C43B918F8D94CB860E93D403
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/FIEnWiXbSFq9WW0NVGU6_5aQQJU.roa
Signing time: Fri 05 May 2023 12:38:05 +0000
ROA not before: Fri 05 May 2023 12:38:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.187.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:eb:65:89:c4:3b:91:8f:8d:94:cb:86:0e:93:d4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 5 12:38:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1481275a25db485abd596d0d54653aff96904095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0d:44:04:03:4a:18:5d:1a:df:7b:0e:5f:c3:
4c:b4:1b:cc:28:3f:3a:06:56:ce:11:76:7b:fb:15:
1f:f7:d1:cf:6a:ac:02:94:e6:77:f5:18:4f:cf:34:
bb:9e:ed:0c:9b:78:c6:22:62:13:f6:c0:8d:2d:04:
7b:24:56:95:75:c6:a2:48:4c:22:fe:b6:72:e1:82:
dc:fd:42:7c:22:7f:59:53:bf:79:5b:6b:3f:38:4d:
e6:f0:47:c8:8c:3d:8a:23:ac:10:42:52:10:5d:11:
9f:26:49:9e:9a:7c:ef:9a:a7:a2:f3:b3:32:f9:97:
b8:64:88:57:1b:e3:dc:72:15:20:b5:54:29:bb:9f:
65:fc:7d:f3:de:9a:09:13:1b:a1:9d:fb:35:40:b1:
c3:37:63:e0:4c:a9:37:69:b0:e1:c9:79:2a:3a:4f:
37:94:24:1d:0e:54:25:58:61:08:9f:e4:a2:6b:be:
20:79:a2:43:7f:f2:56:5b:9b:fa:09:fb:4b:c9:98:
bc:7a:bb:eb:15:e0:9a:74:2a:fb:8f:77:ff:ad:cb:
58:74:1f:94:5e:0e:50:43:35:b5:94:76:33:16:11:
b6:d3:41:4e:4a:31:17:3f:91:46:cc:eb:57:57:93:
b6:5d:5c:3c:85:49:b9:17:75:94:8e:2e:eb:0a:b3:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:81:27:5A:25:DB:48:5A:BD:59:6D:0D:54:65:3A:FF:96:90:40:95
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/FIEnWiXbSFq9WW0NVGU6_5aQQJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.31.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2e:2e:63:9b:b8:9d:49:21:09:61:b5:4b:58:2b:bf:fa:eb:
e4:6c:33:47:2f:fa:ea:60:7d:24:ef:51:f4:e5:93:71:31:8e:
c0:a8:b1:36:f7:ef:5f:ce:6c:37:89:70:d6:9b:b4:22:e8:57:
74:86:a3:f0:35:4a:0a:12:20:12:eb:59:d2:de:a5:2a:e0:a5:
e9:d1:b4:8f:3a:51:4c:0f:6d:9d:4a:d2:e7:5f:4a:df:a7:10:
5f:78:2a:70:c9:ec:db:c3:7e:4f:e7:2b:6a:97:c4:a8:ba:41:
a8:56:b3:e5:26:a3:e5:50:9a:98:8a:88:54:2e:3a:c9:25:95:
75:5d:eb:3e:c2:5f:0a:cb:da:bb:a9:4f:16:a2:b8:ce:d0:b5:
4f:31:d4:4b:3e:6c:93:f9:46:cb:38:53:14:8e:91:f6:9d:5b:
7a:79:ea:f5:52:bc:78:37:00:d9:d2:4f:2d:4e:b1:2b:2a:1a:
14:88:e3:df:6c:c5:70:61:66:01:15:97:9d:08:de:28:1e:7b:
7c:f7:98:60:c5:64:80:05:17:01:84:7f:bd:b6:ef:3a:1d:8d:
33:95:59:e3:3b:af:ad:27:dd:1b:e9:52:84:b9:12:5b:d3:fc:
b5:ca:3f:9c:6a:b9:02:c7:bd:82:18:9d:5f:a6:eb:8f:1a:60:
d0:c0:13:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org