Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/GqQ5brTUkbPmpyjbY0TcNW1eJQ0.roa
File: GqQ5brTUkbPmpyjbY0TcNW1eJQ0.roa (raw, json)
Hash identifier: wOT2CBcUsTCODg/PZ9tzhGnQ3ch7YYfB5Bo6u+py91s=
Subject key identifier: 1A:A4:39:6E:B4:D4:91:B3:E6:A7:28:DB:63:44:DC:35:6D:5E:25:0D
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0187E76C122FD53E923634F89E03A4F80E1B
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/GqQ5brTUkbPmpyjbY0TcNW1eJQ0.roa
Signing time: Thu 04 May 2023 15:40:32 +0000
ROA not before: Thu 04 May 2023 15:40:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.187.13.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:6c:12:2f:d5:3e:92:36:34:f8:9e:03:a4:f8:0e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 4 15:40:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aa4396eb4d491b3e6a728db6344dc356d5e250d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:16:0f:40:ea:55:13:6f:d6:a0:8b:a9:97:
92:5f:07:f3:34:88:31:02:a4:3e:c3:6d:55:3c:ae:
03:dc:a5:01:ea:7a:34:9a:dc:15:0a:01:4f:f7:11:
dd:3d:1a:f9:c4:d1:1f:e1:c0:5f:ea:a4:71:5d:c2:
97:f8:9e:df:3e:33:59:ee:f1:61:89:70:fc:84:0f:
78:4d:9e:ed:1b:7f:b7:f8:dc:cd:c7:a7:f7:ac:56:
73:3e:6b:45:69:c5:66:78:f1:33:8d:a7:ad:ae:38:
89:9f:14:76:e8:12:42:45:8c:da:26:f0:4d:bb:2a:
8a:8c:fb:2c:f7:36:68:16:84:a7:8a:26:c1:1a:39:
fd:43:e9:0c:94:c4:30:5a:be:74:cb:d4:74:76:e5:
93:f9:b7:3d:f8:21:d4:46:6e:3a:c3:60:d8:db:96:
5e:12:7b:8f:9b:7e:0a:60:9f:b0:9a:b9:92:41:0f:
28:5a:9f:f4:35:9c:05:4d:15:19:ee:a4:6e:d8:31:
0b:b9:8c:e0:d0:f8:a1:00:f4:25:fa:39:1e:10:0c:
59:b2:8b:1a:00:0e:f2:7b:eb:19:eb:c7:37:6b:c5:
c4:5b:67:97:93:e8:e8:57:05:49:6e:6b:64:e2:70:
88:83:ca:7c:44:77:fb:a1:52:36:5f:a6:34:08:a2:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A4:39:6E:B4:D4:91:B3:E6:A7:28:DB:63:44:DC:35:6D:5E:25:0D
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/GqQ5brTUkbPmpyjbY0TcNW1eJQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.13.0-89.187.14.255
89.187.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:6b:31:27:69:e6:8c:01:27:7b:45:6d:d0:c6:c9:0f:03:af:
19:3f:22:e6:3b:87:1c:cc:b2:f3:05:f1:55:3e:f5:05:80:be:
72:e5:dc:e0:e4:98:11:9d:fb:98:85:3b:75:8e:05:68:a6:f1:
cd:0f:ca:9d:6a:26:f1:ac:58:4f:a8:c8:ad:22:5e:a8:f7:bf:
4b:1c:4b:4c:f7:9d:bd:93:9e:f6:08:c2:17:67:21:f3:ec:13:
3a:7d:f3:22:6b:e7:c3:39:9f:ee:3f:19:9a:4d:5c:85:3d:18:
a8:f2:91:d7:ea:8a:37:cf:3e:a0:ab:e3:9c:6c:41:b1:de:c9:
0e:ab:9a:65:4f:68:21:5a:38:9e:b1:c4:af:de:05:ea:0b:42:
f0:8f:46:e4:62:85:63:71:4b:38:ad:0d:de:df:56:6f:98:15:
23:f6:b4:b1:81:ff:40:52:45:64:f1:7a:a0:23:21:cd:33:30:
4e:6e:48:ca:d8:38:b1:e0:d0:60:54:52:8e:a1:38:18:79:8c:
e4:3c:87:9f:96:dd:28:9e:a4:c3:01:98:38:fe:cf:c8:e5:29:
3b:f3:18:45:0f:d6:9b:4a:b6:7d:44:46:d9:7f:a1:92:a2:08:
6c:1a:c7:73:89:65:05:12:65:21:8d:60:32:1d:db:92:bf:1e:
e5:ea:08:39
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYfnbBIv1T6SNjT4ngOk+A4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjMwNTA0MTU0MDMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWE0Mzk2ZWI0ZDQ5MWIzZTZhNzI4ZGI2MzQ0ZGMzNTZkNWUyNTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYUWD0DqVRNv1qCLqZeSXwfzNIgx
AqQ+w21VPK4D3KUB6no0mtwVCgFP9xHdPRr5xNEf4cBf6qRxXcKX+J7fPjNZ7vFh
iXD8hA94TZ7tG3+3+NzNx6f3rFZzPmtFacVmePEzjaetrjiJnxR26BJCRYzaJvBN
uyqKjPss9zZoFoSniibBGjn9Q+kMlMQwWr50y9R0duWT+bc9+CHURm46w2DY25Ze
EnuPm34KYJ+wmrmSQQ8oWp/0NZwFTRUZ7qRu2DELuYzg0PihAPQl+jkeEAxZsosa
AA7ye+sZ68c3a8XEW2eXk+joVwVJbmtk4nCIg8p8RHf7oVI2X6Y0CKKCiwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBqkOW601JGz5qco22NE3DVtXiUNMB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvR3FRNWJyVFVrYlBtcHlqYlkwVGNOVzFlSlEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABZuw0D
BABZuw4DBABZux8wDQYJKoZIhvcNAQELBQADggEBADtrMSdp5owBJ3tFbdDGyQ8D
rxk/IuY7hxzMsvMF8VU+9QWAvnLl3ODkmBGd+5iFO3WOBWim8c0Pyp1qJvGsWE+o
yK0iXqj3v0scS0z3nb2TnvYIwhdnIfPsEzp98yJr58M5n+4/GZpNXIU9GKjykdfq
ijfPPqCr45xsQbHeyQ6rmmVPaCFaOJ6xxK/eBeoLQvCPRuRihWNxSzitDd7fVm+Y
FSP2tLGB/0BSRWTxeqAjIc0zME5uSMrYOLHg0GBUUo6hOBh5jOQ8h5+W3SiepMMB
mDj+z8jlKTvzGEUP1ptKtn1ERtl/oZKiCGwax3OJZQUSZSGNYDId25K/HuXqCDk=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org