Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Ip92BclwzWglOkGBXup0xaxZYRs.roa
File: Ip92BclwzWglOkGBXup0xaxZYRs.roa (raw, json)
Hash identifier: Lvn1Pnp3mF0/4Xn0C1yYcW7plm9uYCHw3WPltGC17YI=
Subject key identifier: 22:9F:76:05:C9:70:CD:68:25:3A:41:81:5E:EA:74:C5:AC:59:61:1B
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0187B4ADCD0CF707289621C0AE9B4C25E91B
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Ip92BclwzWglOkGBXup0xaxZYRs.roa
Signing time: Mon 24 Apr 2023 19:11:41 +0000
ROA not before: Mon 24 Apr 2023 19:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 89.187.30.0/24 maxlen: 24
89.187.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b4:ad:cd:0c:f7:07:28:96:21:c0:ae:9b:4c:25:e9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Apr 24 19:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=229f7605c970cd68253a41815eea74c5ac59611b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:53:57:12:66:54:9e:21:91:b5:05:ba:05:
b5:79:8e:5e:42:6a:74:40:fe:11:9d:f2:75:77:b0:
28:da:50:34:4d:6f:db:97:38:9b:67:72:07:e0:1e:
a9:97:f3:76:8f:e9:e9:43:86:0a:ec:df:05:f9:f4:
4b:9a:69:01:20:91:43:0a:93:96:27:65:ed:65:c4:
c1:15:c5:63:ce:61:08:d4:f7:03:8d:42:0c:68:68:
0f:59:20:6c:03:e5:c7:54:e5:ff:7d:3b:f7:f7:45:
5d:b5:1b:b3:b9:4a:d5:22:0f:da:4d:32:62:99:ea:
e4:58:af:83:6a:dd:3f:8f:8c:bc:ab:a0:ad:0c:18:
2b:64:59:be:64:c1:b6:80:5c:9c:88:b7:0b:6d:ce:
34:71:e0:c6:2c:75:56:35:d0:93:15:b2:75:02:f3:
67:04:17:cc:49:6a:69:20:bb:53:73:b5:25:72:09:
e4:8e:e2:34:61:57:11:b3:59:10:ed:6c:27:a4:8a:
75:ee:82:84:1a:4e:12:1d:c2:54:a2:57:99:2e:22:
62:72:44:1b:f8:d3:0b:ba:20:78:eb:b0:d3:a4:1a:
f3:be:1c:96:12:e0:08:b8:23:97:05:a0:79:e8:71:
99:ac:26:ae:eb:a7:92:8e:6c:55:7d:39:f4:c5:81:
7f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9F:76:05:C9:70:CD:68:25:3A:41:81:5E:EA:74:C5:AC:59:61:1B
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Ip92BclwzWglOkGBXup0xaxZYRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.28.0/24
89.187.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:8d:1e:41:ed:54:26:97:40:65:72:ff:92:67:ee:8a:29:24:
62:dd:34:9e:26:a0:42:e8:66:a3:6e:2f:a5:63:44:cc:3e:c1:
30:dd:fb:5e:c6:e4:6f:03:4e:b6:d4:e2:15:02:f5:7f:62:fd:
e3:d8:a2:f3:92:20:a8:22:56:e0:e7:3d:04:0b:3e:53:e4:93:
c7:56:00:1b:ee:8b:3f:ac:a7:bd:8f:f3:0a:13:79:1c:60:20:
f6:45:0e:7f:fb:0d:1b:fa:55:aa:c1:97:f7:b2:f8:64:24:94:
fa:1b:ab:aa:75:3b:d0:8f:46:c4:ad:89:c2:c9:e0:6d:44:4d:
0f:11:2f:29:ba:52:b3:c7:ee:b0:46:30:79:f3:ea:3d:0a:5c:
71:56:28:fa:b3:be:75:7c:09:59:51:3f:a8:8f:a8:5b:78:c9:
c4:f1:e1:59:bc:6e:08:96:a1:bc:b0:2a:ba:2c:32:b9:27:46:
40:a9:c4:d8:19:37:bb:9e:c1:5f:48:86:fd:3e:8a:69:e9:c1:
ed:22:44:f2:16:0b:f8:75:48:99:a2:97:34:07:30:9e:a2:05:
4b:8f:c8:0b:2a:4d:17:b7:98:cd:8b:c4:01:ca:f5:21:8b:4c:
39:7f:f0:32:f4:07:b7:ce:f4:01:10:65:9c:86:25:a7:cf:f3:
75:a1:c2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org