Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/dihDUHB8s3rAhUOrwpjVFZDsk7c.roa
File: dihDUHB8s3rAhUOrwpjVFZDsk7c.roa (raw, json)
Hash identifier: z3tQ0oIjGyIOYOi422d/xbvICXlStTrAU48/L2LXVeM=
Subject key identifier: 76:28:43:50:70:7C:B3:7A:C0:85:43:AB:C2:98:D5:15:90:EC:93:B7
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0188505E1C160AA33F139CF6886DF449F049
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/dihDUHB8s3rAhUOrwpjVFZDsk7c.roa
Signing time: Thu 25 May 2023 00:45:24 +0000
ROA not before: Thu 25 May 2023 00:45:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.187.9.0/24 maxlen: 24
89.187.8.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.7.0/24 maxlen: 24
89.187.6.0/24 maxlen: 24
89.187.16.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.13.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:50:5e:1c:16:0a:a3:3f:13:9c:f6:88:6d:f4:49:f0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 25 00:45:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76284350707cb37ac08543abc298d51590ec93b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9a:23:b2:30:b0:c4:31:34:9c:9c:5b:33:40:
3b:7a:d3:6b:14:3f:81:0a:82:9a:57:01:fb:3c:a0:
53:41:48:f1:74:e5:ca:c8:06:6a:2e:06:4d:1b:7f:
a0:75:f8:18:71:58:78:9b:a0:f0:53:be:6c:21:97:
77:94:64:43:06:3d:8b:f7:97:80:1b:bf:e2:16:15:
46:8b:de:25:dc:b9:12:64:e5:33:25:ee:0c:95:bf:
f1:6e:e7:4e:4f:b6:ba:68:e6:1d:69:14:a8:a5:cb:
8f:78:0d:4b:89:88:77:bf:07:f6:9b:a2:81:11:c6:
13:bc:b0:5a:38:e9:62:0a:57:52:10:fd:98:ef:71:
c3:21:6f:b7:20:8b:fc:cc:28:4d:f3:7e:ee:09:d5:
b3:9e:e0:aa:e1:78:c0:ce:71:03:43:7e:25:51:68:
8d:ef:ba:62:cd:7e:4f:d9:82:39:0a:f5:01:2c:8b:
29:27:f0:68:36:50:1b:0a:8c:cf:df:f3:8f:cf:eb:
0e:2c:fc:01:88:81:ed:ef:a1:d6:d0:5a:79:01:c5:
ee:ff:33:1a:aa:2d:36:62:f7:a0:67:d1:26:15:bb:
44:da:e1:a4:b5:e8:46:98:a5:64:a5:c7:79:ca:96:
ba:52:b4:65:c1:4c:ca:65:ee:44:86:2c:1e:b3:40:
43:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:28:43:50:70:7C:B3:7A:C0:85:43:AB:C2:98:D5:15:90:EC:93:B7
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/dihDUHB8s3rAhUOrwpjVFZDsk7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0-89.187.10.255
89.187.12.0-89.187.20.255
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
51:c3:a0:98:13:df:70:bb:88:ba:68:35:d7:e0:ee:fe:6d:bf:
29:9e:d7:5b:48:d8:39:57:27:d0:13:25:2b:ff:91:95:8d:f1:
27:2e:7c:f6:b0:a8:63:1d:49:2b:80:35:c4:86:e6:55:ce:11:
da:d2:db:a7:66:79:2e:28:bd:be:93:e1:e5:75:d6:f9:71:33:
52:c7:6d:f3:e0:73:b8:85:21:7f:25:96:cc:53:46:8a:0d:a9:
52:8d:e3:89:d8:54:f1:a0:77:8f:2f:c0:4a:a1:4c:81:98:47:
97:9a:7b:31:d3:cb:53:73:96:8c:b1:b6:26:20:cd:e7:88:f3:
5e:31:5e:ea:62:71:2e:9f:ef:10:8a:62:aa:7b:84:5e:90:d6:
aa:82:c3:69:20:ed:bf:f8:cf:e7:43:9a:85:f9:21:51:23:07:
7a:ac:06:75:1d:73:15:0e:86:6f:b5:1f:74:e8:da:d4:49:2a:
34:f6:ff:b7:08:2c:94:d9:b0:01:4c:0c:8c:47:61:af:7e:45:
c8:21:46:e6:b3:16:32:55:94:fa:7c:aa:41:94:5c:18:9f:e5:
3f:97:d9:8e:4d:b5:c0:7b:e8:c5:28:0c:fa:5a:42:50:92:32:
ee:5a:82:8b:e0:20:0c:d3:a6:12:38:32:02:d9:50:a7:5b:b4:
ff:8c:55:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org