Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/GCkP6_eFU49dRiIKHGp8XCLQOjE.roa
File: GCkP6_eFU49dRiIKHGp8XCLQOjE.roa (raw, json)
Hash identifier: 2p9Ad0uTgFckEUHC4tOSk7rzD2kPBUuLUwB9jivmUo4=
Subject key identifier: 18:29:0F:EB:F7:85:53:8F:5D:46:22:0A:1C:6A:7C:5C:22:D0:3A:31
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 018CC86FE8E650763A94D1E1B44B66844AEF
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/GCkP6_eFU49dRiIKHGp8XCLQOjE.roa
Signing time: Tue 02 Jan 2024 04:30:26 +0000
ROA not before: Tue 02 Jan 2024 04:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56913
IP address blocks: 89.187.5.0/24 maxlen: 24
89.187.11.0/24 maxlen: 24
89.187.23.0/24 maxlen: 24
89.187.28.0/24 maxlen: 24
89.187.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:e8:e6:50:76:3a:94:d1:e1:b4:4b:66:84:4a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jan 2 04:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18290febf785538f5d46220a1c6a7c5c22d03a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:42:c5:e0:10:6b:90:47:13:75:27:a5:53:50:
d4:dc:d9:cc:25:b2:c1:bb:8c:0b:03:89:86:e1:17:
32:4c:bf:9c:83:a3:98:42:af:d4:05:63:80:fe:c1:
10:3a:bc:4a:2a:b4:d1:70:1d:c9:96:c8:65:b7:e6:
6d:7f:62:7a:3e:9d:93:4d:d8:0d:4e:d0:59:79:5f:
27:c0:8d:c6:7e:3c:80:6b:57:2c:42:3a:46:4d:cd:
24:a8:48:af:e0:86:ef:71:ed:43:ed:78:84:3a:63:
9d:43:e9:4a:d9:9a:4b:45:10:c3:74:65:bb:82:be:
b2:04:bb:01:7a:66:34:91:e3:66:d0:1f:67:84:84:
c6:e9:33:eb:e4:90:cc:44:4e:af:2e:b3:78:15:51:
ab:db:7f:96:40:24:a8:08:4d:06:19:57:ed:f4:f4:
a3:6e:a5:f8:0b:03:b6:f2:40:39:fd:1f:54:30:eb:
46:8a:87:94:a3:7a:17:de:11:7d:2e:5c:bc:48:cb:
8b:05:12:b1:2b:bb:bf:9b:89:c6:db:94:98:9b:8d:
17:ad:db:7d:b4:e3:94:ac:0e:82:a6:24:bc:d7:db:
71:ac:eb:8f:69:7f:8e:86:6d:96:29:be:fe:2c:32:
23:b2:f9:91:6d:95:67:d7:ab:e8:8f:bc:22:bd:c1:
3e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:29:0F:EB:F7:85:53:8F:5D:46:22:0A:1C:6A:7C:5C:22:D0:3A:31
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/GCkP6_eFU49dRiIKHGp8XCLQOjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.5.0/24
89.187.11.0/24
89.187.23.0/24
89.187.28.0/24
89.187.30.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ac:c3:1b:66:c2:e5:c8:11:d5:e1:90:c3:27:c6:c1:41:6d:
42:ed:ae:ae:0d:ba:de:2f:7d:0b:75:ba:9b:61:2f:cb:6d:16:
ef:5f:be:80:67:c3:6e:71:1c:7b:51:0e:b8:85:9c:13:c6:9d:
01:25:17:13:4d:90:cc:18:a8:f4:e7:d1:e0:e8:36:3d:17:b1:
e1:b3:99:98:3b:9e:3a:52:3f:9d:ef:56:10:c7:ec:e2:bf:65:
06:f4:e6:5a:78:96:9e:24:0b:46:ec:d1:07:d9:85:3f:86:24:
e1:98:7e:00:99:b6:02:72:6f:d1:28:a0:4a:0f:8e:6d:1c:17:
53:a6:5a:b6:f4:f8:57:68:f8:d2:eb:c9:d7:80:2c:f6:c4:73:
65:83:9a:88:46:45:bb:fe:ac:d3:b0:b7:0e:a2:49:53:41:74:
7c:96:1f:d1:36:9e:db:e7:a3:1e:94:06:15:b5:a5:11:1c:95:
9a:a5:4e:d0:ce:b3:87:76:45:a3:ed:ca:04:ee:8f:1b:e4:7c:
0c:97:6c:f1:be:d5:77:11:44:13:84:cd:b4:f1:4b:ad:2b:00:
7d:5e:16:67:b6:29:9a:39:2d:00:60:7a:3d:9e:b4:f1:3e:ec:
2e:17:0e:ad:05:c5:2e:a8:04:93:f1:29:b2:19:26:5b:bc:36:
2d:c5:d5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 03:54:49 2024 by rpki-client on console-ams.rpki-client.org