Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/aTq1FaEhYVjO2RyhVRx_r0SySfg.roa
File: aTq1FaEhYVjO2RyhVRx_r0SySfg.roa (raw, json)
Hash identifier: 6OxCwPz0J4fgy1ROiP3e2Cn8MVbIpqAf5LivOhSy6vM=
Subject key identifier: 69:3A:B5:15:A1:21:61:58:CE:D9:1C:A1:55:1C:7F:AF:44:B2:49:F8
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0188C1C614F51BB52AA4B46BDEC7D8040CA7
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/aTq1FaEhYVjO2RyhVRx_r0SySfg.roa
Signing time: Fri 16 Jun 2023 01:16:04 +0000
ROA not before: Fri 16 Jun 2023 01:16:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.187.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 19:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c1:c6:14:f5:1b:b5:2a:a4:b4:6b:de:c7:d8:04:0c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jun 16 01:16:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=693ab515a1216158ced91ca1551c7faf44b249f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:89:48:15:7b:7e:c5:b3:b7:17:78:cf:b3:
e4:94:74:bd:e2:80:ad:f5:11:4e:bf:e6:98:7f:b2:
c0:fd:d0:7e:9c:84:ac:45:36:eb:30:65:85:c3:b2:
25:78:e5:b7:88:46:50:8d:c0:50:13:97:eb:7e:20:
87:4e:0a:da:95:cd:21:be:6c:e0:db:12:3b:89:05:
df:5f:c3:78:9b:bb:3a:63:fe:84:b9:22:ad:55:f5:
12:07:98:f7:91:38:f5:ac:8a:e1:1e:03:c1:fb:ac:
13:8b:f0:52:83:f8:20:b3:36:72:83:b6:61:51:b2:
83:ad:f6:a5:95:fe:e9:b3:db:fa:ea:cf:c2:50:07:
f1:0a:61:90:67:d4:b7:01:b2:3a:6c:30:e7:08:74:
0a:ff:bc:0f:2c:29:e2:c7:fe:64:d3:61:54:2e:b4:
f4:d0:3b:5e:8b:1e:9b:80:18:e2:75:40:cd:9d:03:
d9:4c:95:f8:55:3c:ea:95:eb:7d:33:ff:00:7d:cf:
91:25:f3:ed:f5:e7:ea:6c:e2:e2:f8:60:27:e4:25:
3b:4d:80:40:ec:dc:10:bf:c4:47:97:74:5f:6c:ee:
71:8a:52:d4:f3:a9:ca:17:23:7d:0d:fa:08:3f:69:
e4:c3:76:43:ff:dd:3d:aa:cc:39:59:0b:b5:d8:1a:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3A:B5:15:A1:21:61:58:CE:D9:1C:A1:55:1C:7F:AF:44:B2:49:F8
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/aTq1FaEhYVjO2RyhVRx_r0SySfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.31.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f3:51:19:ce:b8:66:c7:ca:be:3a:f2:8b:0a:35:31:92:e1:
41:ff:0c:3f:24:ee:f7:4d:f4:17:17:56:7c:ea:51:81:a9:d8:
10:fc:e1:5b:3f:a7:41:57:6f:c2:82:12:5d:b5:62:92:8d:54:
c7:47:38:0b:85:12:dc:41:c8:7b:98:8e:bf:6c:fd:61:6e:2e:
af:4d:f0:01:05:51:e4:6c:8e:e6:61:84:7f:fd:61:96:1b:74:
6b:10:82:26:09:8f:17:81:41:9a:85:ae:56:34:90:8c:cd:d9:
00:83:aa:c7:50:25:fa:44:33:7e:fd:24:cc:ba:91:f2:c2:63:
52:42:c5:73:38:4b:d4:18:4b:59:53:e3:77:ce:b4:ee:0e:e0:
2e:e7:e0:2b:cb:9c:2b:43:5b:a9:c4:0e:67:73:91:3c:ff:d5:
71:59:eb:e9:b7:c5:f5:a3:d8:45:9f:4c:88:91:bd:7d:31:a8:
bf:43:01:d6:a6:e9:fe:af:d4:50:b0:26:e5:87:8c:0e:1f:16:
de:05:20:2a:7e:f1:b4:35:83:1b:80:4d:c5:0a:f9:af:28:3d:
b9:c8:17:a9:12:20:e7:ad:f6:93:d3:57:9a:00:e0:96:32:26:
c7:3e:94:11:d6:5b:4f:59:48:f7:57:e3:d9:de:84:c5:86:a8:
f1:4d:be:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjBxhT1G7UqpLRr3sfYBAynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjMwNjE2MDExNjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTNhYjUxNWExMjE2MTU4Y2VkOTFjYTE1NTFjN2ZhZjQ0YjI0OWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxqJSBV7fsWztxd4z7PklHS94oCt
9RFOv+aYf7LA/dB+nISsRTbrMGWFw7IleOW3iEZQjcBQE5frfiCHTgralc0hvmzg
2xI7iQXfX8N4m7s6Y/6EuSKtVfUSB5j3kTj1rIrhHgPB+6wTi/BSg/ggszZyg7Zh
UbKDrfallf7ps9v66s/CUAfxCmGQZ9S3AbI6bDDnCHQK/7wPLCnix/5k02FULrT0
0Dteix6bgBjidUDNnQPZTJX4VTzqlet9M/8Afc+RJfPt9efqbOLi+GAn5CU7TYBA
7NwQv8RHl3RfbO5xilLU86nKFyN9DfoIP2nkw3ZD/909qsw5WQu12Br40QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGk6tRWhIWFYztkcoVUcf69Eskn4MB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvYVRxMUZhRWhZVmpPMlJ5aFZSeF9yMFN5U2ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbsfMA0G
CSqGSIb3DQEBCwUAA4IBAQAj81EZzrhmx8q+OvKLCjUxkuFB/ww/JO73TfQXF1Z8
6lGBqdgQ/OFbP6dBV2/CghJdtWKSjVTHRzgLhRLcQch7mI6/bP1hbi6vTfABBVHk
bI7mYYR//WGWG3RrEIImCY8XgUGaha5WNJCMzdkAg6rHUCX6RDN+/STMupHywmNS
QsVzOEvUGEtZU+N3zrTuDuAu5+Ary5wrQ1upxA5nc5E8/9VxWevpt8X1o9hFn0yI
kb19Mai/QwHWpun+r9RQsCblh4wOHxbeBSAqfvG0NYMbgE3FCvmvKD25yBepEiDn
rfaT01eaAOCWMibHPpQR1ltPWUj3V+PZ3oTFhqjxTb4V
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:49 2024 by rpki-client on console-fra.rpki-client.org