Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/biholV6EQ1bum4Q7Q7EjZ9WKMeI.roa
File: biholV6EQ1bum4Q7Q7EjZ9WKMeI.roa (raw, json)
Hash identifier: 1X/eQEaXnealLxIqB5FD34lG+vlB5T4oZMH8wQnJAqk=
Subject key identifier: 6E:28:68:95:5E:84:43:56:EE:9B:84:3B:43:B1:23:67:D5:8A:31:E2
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 018B42C3C03AFD5D587CE2A37FD54FAF588C
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/biholV6EQ1bum4Q7Q7EjZ9WKMeI.roa
Signing time: Wed 18 Oct 2023 12:30:06 +0000
ROA not before: Wed 18 Oct 2023 12:30:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.187.8.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.7.0/24 maxlen: 24
89.187.6.0/24 maxlen: 24
89.187.16.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.13.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:c3:c0:3a:fd:5d:58:7c:e2:a3:7f:d5:4f:af:58:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Oct 18 12:30:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e2868955e844356ee9b843b43b12367d58a31e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:f4:ba:6b:81:63:8e:25:4b:80:b4:5a:30:
e6:53:e5:63:28:a0:00:fe:a6:06:36:49:32:68:b3:
45:9e:10:59:df:11:ef:37:17:83:40:b2:84:48:ef:
63:30:57:11:d9:a7:90:4d:62:fa:c2:20:4e:17:33:
80:4d:8e:83:72:fc:ca:2e:3d:c1:2e:6c:30:c5:97:
02:68:b0:94:61:72:a1:3f:33:21:40:35:36:b9:84:
13:ad:43:92:e0:d5:7f:08:fe:bc:b5:d4:ea:24:f6:
0d:ea:13:a3:e3:5c:35:f5:0d:39:28:54:b5:de:98:
27:f6:86:cb:69:88:74:b7:60:4c:d0:45:89:8c:c5:
10:4b:07:60:59:a0:62:e1:d3:ee:ce:57:ac:69:8f:
71:11:52:c7:76:d0:68:47:30:38:30:b6:82:6a:c1:
4c:d3:f8:d8:9a:1a:47:30:8e:06:cf:5e:9f:f3:26:
f4:cf:78:5a:19:1b:51:01:a3:d9:9f:48:d1:f2:52:
15:23:b4:41:01:2d:ed:26:a5:11:8b:4b:34:4e:9a:
07:55:b7:28:3e:40:d0:10:9f:26:b3:23:4d:5d:c4:
d9:c0:1c:fe:96:da:fb:c4:cb:a4:6e:64:66:f7:98:
9d:86:e4:05:48:99:a3:13:45:7a:aa:e8:ca:56:ae:
8d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:28:68:95:5E:84:43:56:EE:9B:84:3B:43:B1:23:67:D5:8A:31:E2
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/biholV6EQ1bum4Q7Q7EjZ9WKMeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0-89.187.8.255
89.187.10.0/24
89.187.12.0-89.187.20.255
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d2:bb:46:15:68:65:68:07:42:db:93:4b:1b:9b:0e:f6:ce:
59:0c:04:67:f5:be:33:43:05:85:fb:c8:7b:c5:b5:ba:85:74:
32:d0:c7:f3:d0:09:5b:49:90:5c:ce:6e:83:e2:3e:58:86:06:
0a:f6:05:9f:b1:32:06:ab:09:75:68:b2:13:14:d4:df:1f:4f:
78:23:d2:0c:47:78:70:52:91:b4:a8:0c:d3:9a:28:92:44:fa:
14:ee:15:63:bf:d7:6e:cd:f2:23:d3:d9:b5:31:c0:a2:51:ef:
39:cc:d6:75:e7:d5:30:20:1e:2d:e8:64:b1:4b:5a:e7:61:6e:
f2:21:a5:63:00:4a:32:dc:59:91:52:94:56:4a:de:19:92:18:
a7:a8:20:ae:65:e7:52:c3:3f:5c:19:b2:6c:9e:55:63:1b:06:
61:d4:d0:80:49:0a:d5:94:77:56:6a:99:82:d9:dc:2c:f3:12:
e7:68:1e:a3:81:94:1e:dc:ab:0b:73:67:ef:53:44:e7:3b:fc:
df:41:44:a4:4d:07:b0:34:40:ac:4c:43:b5:fd:9c:e2:97:12:
18:ed:a6:1f:79:3a:5d:5e:6c:ce:20:58:42:3c:b2:1d:04:5b:
ce:54:fc:b1:98:54:b5:47:5a:b6:16:24:fd:83:59:0e:3c:83:
e1:e9:a6:23
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYtCw8A6/V1YfOKjf9VPr1iMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjMxMDE4MTIzMDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTI4Njg5NTVlODQ0MzU2ZWU5Yjg0M2I0M2IxMjM2N2Q1OGEzMWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXP0umuBY44lS4C0WjDmU+VjKKAA
/qYGNkkyaLNFnhBZ3xHvNxeDQLKESO9jMFcR2aeQTWL6wiBOFzOATY6DcvzKLj3B
LmwwxZcCaLCUYXKhPzMhQDU2uYQTrUOS4NV/CP68tdTqJPYN6hOj41w19Q05KFS1
3pgn9obLaYh0t2BM0EWJjMUQSwdgWaBi4dPuzlesaY9xEVLHdtBoRzA4MLaCasFM
0/jYmhpHMI4Gz16f8yb0z3haGRtRAaPZn0jR8lIVI7RBAS3tJqURi0s0TpoHVbco
PkDQEJ8msyNNXcTZwBz+ltr7xMukbmRm95idhuQFSJmjE0V6qujKVq6NywIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFG4oaJVehENW7puEO0OxI2fVijHiMB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvYmlob2xWNkVRMWJ1bTRRN1E3RWpaOVdLTWVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAFZuwYD
BABZuwgDBABZuwowDAMEAlm7DAMEAFm7FAMEAFm7FjANBgkqhkiG9w0BAQsFAAOC
AQEAatK7RhVoZWgHQtuTSxubDvbOWQwEZ/W+M0MFhfvIe8W1uoV0MtDH89AJW0mQ
XM5ug+I+WIYGCvYFn7EyBqsJdWiyExTU3x9PeCPSDEd4cFKRtKgM05ookkT6FO4V
Y7/Xbs3yI9PZtTHAolHvOczWdefVMCAeLehksUta52Fu8iGlYwBKMtxZkVKUVkre
GZIYp6ggrmXnUsM/XBmybJ5VYxsGYdTQgEkK1ZR3VmqZgtncLPMS52geo4GUHtyr
C3Nn71NE5zv830FEpE0HsDRArExDtf2c4pcSGO2mH3k6XV5sziBYQjyyHQRbzlT8
sZhUtUdathYk/YNZDjyD4emmIw==
Generated at Sat Oct 21 02:52:27 2023 by rpki-client on console-ams.rpki-client.org