Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Va8pTGb3c9jngFBIoBS53m7_Org.roa
File: Va8pTGb3c9jngFBIoBS53m7_Org.roa (raw, json)
Hash identifier: xEJPBB0Pf0ca4dBj1AW8zgpLDvmTWVsGZqTomsEIdhw=
Subject key identifier: 55:AF:29:4C:66:F7:73:D8:E7:80:50:48:A0:14:B9:DE:6E:FF:3A:B8
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0187A968F8FE5E0B4144D8410B5D6618204A
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Va8pTGb3c9jngFBIoBS53m7_Org.roa
Signing time: Sat 22 Apr 2023 14:40:41 +0000
ROA not before: Sat 22 Apr 2023 14:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 89.187.24.0/24 maxlen: 24
89.187.27.0/24 maxlen: 24
89.187.26.0/24 maxlen: 24
89.187.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a9:68:f8:fe:5e:0b:41:44:d8:41:0b:5d:66:18:20:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Apr 22 14:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55af294c66f773d8e7805048a014b9de6eff3ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:c5:df:b2:f4:29:db:82:84:bf:da:24:48:
ed:a7:f4:46:2f:0f:77:aa:a2:33:6c:ef:d5:b0:41:
b3:1c:91:84:9d:a4:13:10:ed:9e:0b:31:5c:2c:9f:
fd:c7:af:f3:35:58:27:62:69:40:39:d8:7f:4e:3a:
e2:04:d5:cd:a0:f0:2f:07:ae:b5:eb:fc:e6:9e:3b:
5b:94:ef:79:47:fb:af:08:8c:d6:5a:e6:4c:86:d9:
b6:b7:64:e8:a1:82:52:73:c1:c5:23:53:02:ad:9b:
3a:81:f1:f4:36:61:d0:b8:f2:ce:ad:5c:06:e2:af:
09:a1:dd:b5:81:77:31:6a:2c:ef:65:a3:f6:ca:4f:
ec:d2:0b:c3:40:f1:47:85:8c:49:0d:ef:71:51:75:
93:c6:ab:6b:fa:41:a3:a7:cc:ba:12:5c:81:0d:d1:
36:1d:dd:28:44:ea:b0:78:4f:2f:62:ab:0f:0a:d0:
25:eb:7d:f0:fd:0b:27:3c:6c:96:3a:e2:bb:13:5a:
62:87:8e:6a:0a:01:98:5c:55:93:31:31:b2:52:b4:
b8:af:71:5d:8f:bb:b7:94:8e:24:a0:36:9b:8b:b5:
b0:41:55:98:83:fc:84:d5:a5:52:e5:44:9f:18:2c:
51:45:3b:e3:8b:35:09:13:42:d9:5a:e5:07:8b:4a:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AF:29:4C:66:F7:73:D8:E7:80:50:48:A0:14:B9:DE:6E:FF:3A:B8
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Va8pTGb3c9jngFBIoBS53m7_Org.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:54:7f:a0:de:a2:4f:1d:7a:25:55:04:4a:bc:f8:fc:fc:41:
95:01:1a:b3:d3:1a:c4:1e:7c:58:c0:00:4d:4d:6b:87:af:c1:
e1:b1:48:ee:08:d6:06:1b:1e:a0:8e:c5:9c:bd:1c:90:1b:2f:
46:14:62:14:c4:55:bb:76:49:cf:b1:0c:32:c3:dd:55:20:7a:
15:e7:ea:6d:cf:33:80:f2:34:b1:a8:db:e8:31:70:17:3a:e1:
bb:7b:ff:9f:a5:59:ad:a0:4f:f9:a3:16:5d:4f:2e:3c:b2:df:
40:1b:4e:cd:59:d8:b1:14:c8:46:05:e5:8b:07:71:f0:f1:9b:
91:94:e3:94:0a:34:91:a7:f0:c0:a9:42:ca:da:b0:7e:de:d7:
2a:c3:28:48:07:86:76:7c:e5:14:4f:d0:dd:df:58:41:b1:a5:
91:ce:f8:b9:1a:d6:20:49:84:80:2b:1f:e2:e5:cb:10:c7:49:
5d:24:6f:d7:70:22:d6:4b:32:57:bc:9a:c5:b3:cf:80:c7:c7:
e6:06:55:11:76:ab:00:3c:b4:cf:c7:0c:f6:69:b8:b2:5e:74:
fd:9c:2f:c8:9f:2c:81:eb:f1:f3:3f:bf:27:c8:60:80:a7:a8:
c9:c8:7a:13:58:3e:fe:70:f7:36:a8:a2:56:16:a2:a3:ea:c4:
ff:6f:fb:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYepaPj+XgtBRNhBC11mGCBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjMwNDIyMTQ0MDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWFmMjk0YzY2Zjc3M2Q4ZTc4MDUwNDhhMDE0YjlkZTZlZmYzYWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUzF37L0KduChL/aJEjtp/RGLw93
qqIzbO/VsEGzHJGEnaQTEO2eCzFcLJ/9x6/zNVgnYmlAOdh/TjriBNXNoPAvB661
6/zmnjtblO95R/uvCIzWWuZMhtm2t2TooYJSc8HFI1MCrZs6gfH0NmHQuPLOrVwG
4q8Jod21gXcxaizvZaP2yk/s0gvDQPFHhYxJDe9xUXWTxqtr+kGjp8y6ElyBDdE2
Hd0oROqweE8vYqsPCtAl633w/QsnPGyWOuK7E1pih45qCgGYXFWTMTGyUrS4r3Fd
j7u3lI4koDabi7WwQVWYg/yE1aVS5USfGCxRRTvjizUJE0LZWuUHi0rXwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFWvKUxm93PY54BQSKAUud5u/zq4MB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvVmE4cFRHYjNjOWpuZ0ZCSW9CUzUzbTdfT3JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWbsYMA0G
CSqGSIb3DQEBCwUAA4IBAQCKVH+g3qJPHXolVQRKvPj8/EGVARqz0xrEHnxYwABN
TWuHr8HhsUjuCNYGGx6gjsWcvRyQGy9GFGIUxFW7dknPsQwyw91VIHoV5+ptzzOA
8jSxqNvoMXAXOuG7e/+fpVmtoE/5oxZdTy48st9AG07NWdixFMhGBeWLB3Hw8ZuR
lOOUCjSRp/DAqULK2rB+3tcqwyhIB4Z2fOUUT9Dd31hBsaWRzvi5GtYgSYSAKx/i
5csQx0ldJG/XcCLWSzJXvJrFs8+Ax8fmBlURdqsAPLTPxwz2abiyXnT9nC/InyyB
6/HzP78nyGCAp6jJyHoTWD7+cPc2qKJWFqKj6sT/b/vw
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:04 2024 by rpki-client on console-ams.rpki-client.org