Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/JbxfwwTVkQ7rkEluNtfyNHpL-sM.roa
File: JbxfwwTVkQ7rkEluNtfyNHpL-sM.roa (raw, json)
Hash identifier: EVhQnMzTc3pm1pRjjA7GtIWDnNgqkxMvSK1DtaPqmhw=
Subject key identifier: 25:BC:5F:C3:04:D5:91:0E:EB:90:49:6E:36:D7:F2:34:7A:4B:FA:C3
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 018A3D4CD2835EA12010A81B7025B165FAB2
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/JbxfwwTVkQ7rkEluNtfyNHpL-sM.roa
Signing time: Mon 28 Aug 2023 17:59:19 +0000
ROA not before: Mon 28 Aug 2023 17:59:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5065
IP address blocks: 89.187.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3d:4c:d2:83:5e:a1:20:10:a8:1b:70:25:b1:65:fa:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Aug 28 17:59:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25bc5fc304d5910eeb90496e36d7f2347a4bfac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:e6:5e:a2:e2:36:d3:65:14:6f:66:6a:fb:
39:da:ac:f9:25:8c:09:81:6e:a3:62:b0:28:97:9e:
03:3f:ad:72:fa:b5:93:17:84:8d:64:11:b1:c5:01:
c4:fb:cc:88:01:8e:e1:cb:19:c6:71:94:c5:8b:30:
bb:54:74:dc:b9:8b:29:7c:9d:df:7d:b7:a7:0c:85:
37:c0:9c:82:19:1b:6f:ed:88:29:4f:e7:f7:1d:d5:
6b:12:91:b0:82:5c:dd:f4:e6:b5:b1:8b:08:03:aa:
40:01:e2:e6:aa:df:aa:68:9b:0f:8a:23:8b:1e:73:
c0:b4:72:15:eb:4a:83:10:10:e8:68:4f:25:48:92:
b2:8c:3d:27:07:ac:df:af:e1:6c:d0:ad:5c:d4:ed:
1b:db:67:84:73:f9:22:2b:9f:15:e3:49:9b:af:22:
bd:2f:d8:5b:8d:0c:51:08:7c:ff:07:8b:49:c8:9c:
a6:27:7c:84:9e:9b:25:05:a7:4d:9c:dd:4c:8a:86:
b8:24:ac:e6:9f:85:f9:22:a3:00:2b:0c:7e:8c:ad:
6e:94:9b:76:a3:f3:90:96:29:0a:59:49:43:96:90:
7d:9e:24:25:8c:6b:76:87:20:a7:37:bf:1f:e0:80:
78:df:51:6e:24:31:f9:54:4c:df:7f:51:e8:43:23:
bf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BC:5F:C3:04:D5:91:0E:EB:90:49:6E:36:D7:F2:34:7A:4B:FA:C3
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/JbxfwwTVkQ7rkEluNtfyNHpL-sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5c:eb:fe:45:19:2d:03:d6:75:b2:39:15:ad:97:ed:5f:ef:
9c:99:dc:77:69:c1:32:6a:c9:38:f9:03:c6:18:4a:d6:ef:de:
d9:51:95:16:fa:04:a0:63:0f:55:0d:f6:91:3f:44:a3:34:cd:
cd:2f:90:74:85:46:bb:fd:eb:6f:83:e9:90:d2:00:c7:92:71:
76:95:ef:a8:b7:b5:fb:06:59:79:7d:07:13:14:60:7f:42:5a:
72:1b:5b:d3:95:52:5d:7a:c8:78:11:bc:3e:96:29:e4:d9:11:
a4:7e:16:8f:fe:87:2e:b1:f7:24:56:3c:64:22:c6:4a:b5:3c:
b3:a1:6f:01:47:c7:57:09:5f:72:cd:c3:37:b4:ba:8c:80:71:
20:46:7b:20:b4:a8:9f:b0:a4:cd:53:6f:aa:ae:a8:07:00:40:
a6:d6:34:6d:cd:74:5f:0f:59:10:65:13:a8:8c:17:52:11:bf:
b6:16:ac:aa:62:3d:f3:fa:f1:e3:42:f2:40:5c:92:46:f3:e0:
84:50:eb:55:39:ca:ae:71:51:36:d7:2c:06:27:a5:b5:e6:2e:
56:aa:4e:33:05:05:96:8f:10:ba:ce:33:e1:a7:25:e7:c5:10:
36:bc:dd:34:cb:9e:6b:2a:57:37:7f:cf:0e:94:ef:53:af:fa:
0e:e8:a4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 08:34:05 2023 by rpki-client on console-ams.rpki-client.org