Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/RoYIc1ssThxPyo-anY_7ZRgXNTo.roa
File: RoYIc1ssThxPyo-anY_7ZRgXNTo.roa (raw, json)
Hash identifier: 36cvYSO19FNNbbcKdqpHltkGaAL6//HoGTj6X0viYAU=
Subject key identifier: 46:86:08:73:5B:2C:4E:1C:4F:CA:8F:9A:9D:8F:FB:65:18:17:35:3A
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0187B8D7773292DAD81205A81A674A725944
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/RoYIc1ssThxPyo-anY_7ZRgXNTo.roa
Signing time: Tue 25 Apr 2023 14:35:41 +0000
ROA not before: Tue 25 Apr 2023 14:35:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 89.187.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 10:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:d7:77:32:92:da:d8:12:05:a8:1a:67:4a:72:59:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Apr 25 14:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=468608735b2c4e1c4fca8f9a9d8ffb651817353a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2d:66:c9:d2:5d:3e:05:ad:22:08:8d:4e:08:
6c:d3:7b:90:be:8f:46:17:10:02:b9:2a:ab:98:24:
ab:eb:cc:4c:f6:99:d2:ad:d6:ef:df:bd:fa:10:20:
79:e3:30:a3:2e:db:76:da:7c:42:49:ea:91:16:7b:
c0:57:d6:80:00:ef:d6:f9:35:68:43:b6:03:e5:64:
87:c3:c9:c6:0b:4d:39:65:33:a9:d7:49:69:c9:82:
03:c8:08:fe:05:d3:ae:a1:db:12:db:6a:06:f6:39:
87:37:09:e2:26:bc:ce:22:ee:6b:40:ef:77:c6:7e:
84:b2:9e:04:c3:a1:b5:3d:f4:dc:8f:9f:47:ac:d1:
aa:ea:7a:60:8a:fb:93:c2:fd:7b:e6:92:9d:66:d1:
c1:ff:bc:b1:8f:06:62:be:6c:9b:c7:2a:5f:cf:0d:
65:5c:97:8c:51:44:4c:35:f7:6f:8f:cd:ed:38:4c:
7d:6e:21:df:31:2f:bc:6c:2b:a4:69:59:74:1f:1c:
0d:88:a2:4e:11:a9:f2:2c:83:31:31:c8:77:ce:ac:
82:0e:f2:e5:8a:e7:ac:aa:1b:7b:b9:b6:f4:b4:11:
7f:00:f2:bc:4c:c4:17:2e:5d:c5:f9:5c:ee:e5:5c:
5f:87:af:e0:62:28:33:15:70:47:53:11:95:2b:3a:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:86:08:73:5B:2C:4E:1C:4F:CA:8F:9A:9D:8F:FB:65:18:17:35:3A
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/RoYIc1ssThxPyo-anY_7ZRgXNTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.9.0/24
Signature Algorithm: sha256WithRSAEncryption
18:75:f3:98:12:d4:69:23:52:85:d4:1b:af:95:04:43:c1:67:
3b:67:b0:7e:08:ca:de:6a:92:ae:45:a4:6f:0a:f1:12:5e:25:
ac:5b:b1:1b:a9:f5:b3:82:0d:9b:51:7c:9e:c5:be:97:96:a5:
59:db:03:a8:93:6f:e1:1a:45:99:ce:7d:7b:6e:da:7a:b8:c8:
08:ff:4f:4c:55:ca:4c:29:cd:46:ef:f7:9e:19:d4:48:46:1f:
22:68:40:7a:70:a6:93:3d:55:ae:7e:99:f0:a5:8a:fc:68:6d:
40:6b:8b:36:30:7b:e3:78:18:be:0b:b4:df:c9:a3:d5:3e:5a:
40:d2:81:67:25:83:f8:5b:27:c2:51:2d:5e:74:a4:b9:f3:3e:
c2:7e:df:18:2d:37:e1:cb:16:cc:2f:3b:6c:bf:2d:3a:97:47:
a1:0e:46:da:92:b7:0e:8b:98:ec:b2:62:0e:65:3e:ba:7f:05:
d7:a9:8e:eb:63:51:ee:1c:60:fc:83:1e:b2:14:2d:39:e1:8f:
e6:a6:22:ac:c2:c4:a3:16:47:2e:fe:95:27:75:a7:fe:9a:3c:
33:1d:06:46:cb:10:f7:dc:a9:27:ac:46:8d:7c:84:47:d3:06:
f4:31:86:95:89:c7:ca:9d:c0:cc:95:43:66:de:99:a6:9e:f9:
dd:8f:fa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:49 2024 by rpki-client on console-fra.rpki-client.org