Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/NLnz9sVHU48YD--tarzVXNauCyA.roa
File: NLnz9sVHU48YD--tarzVXNauCyA.roa (raw, json)
Hash identifier: vovo1qwwxVw3IxNRQNRXnccIgnOeVQmtZYB5IXWUQSE=
Subject key identifier: 34:B9:F3:F6:C5:47:53:8F:18:0F:EF:AD:6A:BC:D5:5C:D6:AE:0B:20
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0187C69319C02D73AF385E007834EA1B9A4D
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/NLnz9sVHU48YD--tarzVXNauCyA.roa
Signing time: Fri 28 Apr 2023 06:35:41 +0000
ROA not before: Fri 28 Apr 2023 06:35:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 89.187.7.0/24 maxlen: 24
89.187.13.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c6:93:19:c0:2d:73:af:38:5e:00:78:34:ea:1b:9a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Apr 28 06:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34b9f3f6c547538f180fefad6abcd55cd6ae0b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6e:20:54:d8:27:06:e3:28:f1:fe:eb:d4:70:
da:af:62:e4:04:d9:e4:ae:a0:e0:2b:2f:e7:3c:49:
33:77:db:cb:ef:8d:e5:df:cb:5b:09:01:7a:c0:11:
cb:01:91:cc:59:06:9f:07:ca:78:aa:23:60:b6:a0:
71:29:ab:1b:e7:3d:e4:34:fd:08:bb:39:d4:50:75:
e0:77:5b:a3:2f:08:78:5e:a5:f6:6f:68:97:59:3c:
ba:fc:cd:06:c5:d4:a6:d4:aa:ad:27:06:83:f0:b2:
a2:fd:07:fe:c5:9e:aa:8d:62:d8:66:12:39:7d:cc:
07:6f:59:33:70:1a:c4:8e:7d:8a:cb:45:a8:cb:cb:
d8:ae:72:4f:1c:48:32:89:d3:a5:8b:68:cb:3b:34:
8e:20:bb:e6:39:f0:24:8b:5f:fb:53:64:0d:5b:e1:
9d:6b:2e:c6:9e:b4:e2:a7:12:fd:02:6b:50:48:82:
a9:ab:9d:d8:86:66:2d:fd:c4:f9:c6:0c:ee:4a:d0:
e1:01:64:0a:dd:81:22:02:ca:11:cf:13:10:76:70:
8a:44:fe:51:1d:49:d7:9b:c2:d1:ef:fa:e3:d7:0e:
bc:d9:85:96:2e:69:7d:00:dd:4c:f9:c7:6d:7d:d9:
64:4c:1b:d0:27:a0:54:ef:ad:89:fc:71:41:b1:ea:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B9:F3:F6:C5:47:53:8F:18:0F:EF:AD:6A:BC:D5:5C:D6:AE:0B:20
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/NLnz9sVHU48YD--tarzVXNauCyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.7.0/24
89.187.13.0-89.187.14.255
89.187.31.0/24
Signature Algorithm: sha256WithRSAEncryption
90:6d:96:a4:f4:35:87:9d:58:9d:c1:bc:c6:75:a0:8e:b0:9b:
1c:81:43:46:32:6b:d4:be:84:31:ed:e5:5a:de:32:dd:1c:94:
d5:a5:61:1c:d9:8e:09:1d:3f:ca:f4:4d:e0:73:6a:4a:98:ba:
a3:d6:71:ba:da:4d:4b:f2:b7:99:a9:31:7f:45:fd:dd:d7:8d:
f4:02:f1:a7:1e:70:29:94:e1:1d:c7:76:c6:c1:01:a8:92:3c:
4f:54:f1:5f:c2:88:88:03:3f:63:cd:fc:d9:a6:1f:8e:65:d2:
64:a0:4b:73:69:cb:7d:65:03:31:eb:ad:dc:0c:b3:f7:0c:c4:
9d:13:b2:68:40:33:46:1e:b2:45:24:5e:7d:ee:7d:26:a1:f4:
ca:bf:80:f0:7a:7e:21:3f:85:3b:1c:d8:37:74:e9:17:22:c8:
a7:d9:8a:a7:41:50:a7:de:0d:a1:41:70:c2:4e:0e:e4:24:fb:
e6:fc:33:fa:b9:d6:56:87:d5:9e:bb:2e:f1:2f:14:ae:59:7c:
1f:7d:0b:2c:fe:94:71:b3:df:43:f1:90:bf:1f:d6:34:ad:1b:
81:23:34:30:b7:82:ef:78:53:8b:07:79:73:61:24:4b:55:86:
cb:73:91:fe:d6:99:76:29:6b:d3:43:cd:12:16:e0:ae:91:35:
2a:11:57:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:15 2023 by rpki-client on console-fra.rpki-client.org