Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/c_i_0-cGB-a-XHhm5c5CMV034W4.roa
File: c_i_0-cGB-a-XHhm5c5CMV034W4.roa (raw, json)
Hash identifier: gQeg1U4hZ53slsvkudBrIsyD327pKok/sfU978G+0rk=
Subject key identifier: 73:F8:BF:D3:E7:06:07:E6:BE:5C:78:66:E5:CE:42:31:5D:37:E1:6E
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0187EBEB65DC6248D708BF1BCE38886313C2
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/c_i_0-cGB-a-XHhm5c5CMV034W4.roa
Signing time: Fri 05 May 2023 12:38:05 +0000
ROA not before: Fri 05 May 2023 12:38:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.187.8.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.6.0/24 maxlen: 24
89.187.16.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.13.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:eb:65:dc:62:48:d7:08:bf:1b:ce:38:88:63:13:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 5 12:38:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73f8bfd3e70607e6be5c7866e5ce42315d37e16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b9:02:11:8a:bc:a5:1b:5e:3e:f5:ce:e8:3d:
26:9f:03:9e:8f:b1:23:b1:b5:54:08:f3:c6:65:0c:
c1:8b:ab:41:1b:0f:d1:58:29:b1:7e:be:c8:14:19:
30:ac:f1:bb:8b:6e:69:5b:f2:4c:cb:56:26:33:c1:
8a:33:d1:e1:84:9d:44:78:44:f5:a9:07:76:85:a5:
23:92:ba:20:4f:bf:09:b7:99:d1:a3:ab:23:8e:20:
7c:f7:03:46:8d:5b:ac:78:c8:50:1c:4c:84:23:aa:
67:b6:56:f3:74:f5:38:54:fe:2d:77:99:d6:72:da:
98:22:4e:61:75:04:40:b6:d3:80:6b:cd:f6:a3:7c:
a0:7b:af:29:fe:b4:34:aa:aa:9c:65:58:c1:bf:00:
78:1c:ea:52:b6:b8:ec:68:05:8e:9c:fd:41:72:10:
4d:f2:7a:65:bd:04:57:de:fe:d4:4f:16:e5:48:36:
f9:c2:15:96:4f:d0:aa:c2:2a:fe:75:e0:0a:72:19:
b8:26:fa:bf:95:c7:27:ef:4a:4f:9d:7c:57:d9:17:
48:c1:a9:ef:46:9d:1e:8d:7e:34:80:20:17:61:51:
35:0f:7b:c8:1e:26:27:eb:15:0b:db:d2:d7:9b:a4:
cf:b3:7f:e8:b7:29:cd:f3:d0:a4:dd:ce:7d:ee:ca:
e6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F8:BF:D3:E7:06:07:E6:BE:5C:78:66:E5:CE:42:31:5D:37:E1:6E
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/c_i_0-cGB-a-XHhm5c5CMV034W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0/24
89.187.8.0/24
89.187.10.0/24
89.187.12.0-89.187.20.255
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:67:0a:7e:e8:46:e6:1f:02:2a:c2:b5:30:b6:5b:59:9b:04:
8f:62:59:31:23:2c:18:b8:42:c1:99:3e:c4:52:1f:f5:47:75:
76:56:3f:91:59:97:f6:e9:e4:36:c3:57:ad:0b:d4:8d:5e:01:
20:e0:be:ee:b0:25:26:15:dd:49:68:c6:90:bd:bd:88:bf:cd:
0e:83:ce:8c:a1:51:eb:d2:e5:b6:19:74:9c:41:af:2a:dc:65:
62:e7:ea:6f:a4:3a:24:8f:a4:95:42:fc:9d:03:78:ab:40:ca:
f9:d8:26:12:d4:63:3b:f1:1d:bc:dd:4f:3a:b6:cd:be:d8:27:
56:cc:ca:77:98:14:5b:63:6c:6c:6f:6b:4d:35:31:bc:1f:e7:
1d:e2:a2:ed:87:1f:03:77:0c:b7:c3:24:bd:4e:50:d7:c1:e2:
2b:99:e0:24:24:28:9a:73:af:4f:33:16:7a:b6:a3:70:16:5a:
76:4b:38:79:01:ef:89:c8:8d:0e:7c:19:b3:83:a9:05:0f:37:
4c:6a:07:57:6a:8a:76:39:53:22:31:1b:00:99:2c:39:cf:5e:
cc:bf:4f:fa:96:d4:79:5f:1f:6b:4a:0d:b3:6b:1c:a1:0a:a5:
3f:5f:20:fb:d5:14:28:9f:36:69:45:48:4a:c3:33:76:09:33:
db:03:7f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org