Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/h2QgwyTfn5cVpNQy0BfLkqA7DWU.roa
File: h2QgwyTfn5cVpNQy0BfLkqA7DWU.roa (raw, json)
Hash identifier: jvRSeb4/fYFaw8EpSZUqajk2y90+7pzZ1JrJxjIqj+0=
Subject key identifier: 87:64:20:C3:24:DF:9F:97:15:A4:D4:32:D0:17:CB:92:A0:3B:0D:65
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01882BD846166EAB09B0244B920FC9EC2F94
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/h2QgwyTfn5cVpNQy0BfLkqA7DWU.roa
Signing time: Wed 17 May 2023 22:32:53 +0000
ROA not before: Wed 17 May 2023 22:32:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.187.9.0/24 maxlen: 24
89.187.8.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.6.0/24 maxlen: 24
89.187.16.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.13.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2b:d8:46:16:6e:ab:09:b0:24:4b:92:0f:c9:ec:2f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 17 22:32:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=876420c324df9f9715a4d432d017cb92a03b0d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:30:a7:45:23:0e:90:a2:52:59:e5:83:83:
b3:e1:ca:91:34:4d:78:ac:91:56:0a:27:35:03:01:
f3:56:b3:7c:8b:f0:6b:b3:20:4f:76:59:09:c3:f2:
61:d6:26:0e:62:07:98:b0:06:4d:63:89:89:da:19:
8f:0f:fe:de:a3:73:61:0b:a0:29:d6:0d:f3:73:50:
6e:03:9d:42:1e:40:13:86:aa:7f:10:c0:dc:db:8a:
36:be:a5:b8:d3:9c:5c:cd:84:ff:88:cb:a8:e1:ad:
f3:b9:87:9d:e7:21:96:e9:41:67:6c:ec:ed:39:b3:
db:9e:10:9d:73:39:2f:8f:52:00:01:18:50:72:dc:
7a:81:43:89:18:f9:33:ff:e1:8b:0b:26:f7:95:f9:
41:b0:13:a8:f5:f7:2d:22:78:1f:5b:16:8d:9a:d3:
a6:47:c1:4b:1f:7c:52:70:bb:29:4c:6b:56:3d:ea:
8e:81:dd:b0:f4:dd:2d:9d:83:a9:ef:6b:4b:74:09:
ec:ba:5e:d6:18:1c:9a:2d:da:83:3e:89:93:a2:eb:
31:14:b7:e0:0a:2b:57:fc:46:e8:c4:ba:a1:9a:08:
9c:79:df:ba:6d:e6:01:30:8a:09:61:9b:83:5f:73:
a8:f7:f1:d7:66:37:a9:db:85:d5:82:6c:e3:f3:9b:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:64:20:C3:24:DF:9F:97:15:A4:D4:32:D0:17:CB:92:A0:3B:0D:65
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/h2QgwyTfn5cVpNQy0BfLkqA7DWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0/24
89.187.8.0-89.187.10.255
89.187.12.0-89.187.20.255
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
07:33:39:fb:75:8e:ba:a5:9b:6a:d9:f1:1f:bd:24:98:01:ef:
c5:1c:83:e0:3d:a5:6f:c1:6b:79:a1:19:45:5c:87:7b:81:be:
8d:3b:df:ed:65:6a:10:7e:d0:9b:d1:85:5b:e7:78:87:a5:8b:
ae:a7:9e:25:40:b7:f9:b1:f2:49:95:39:bc:42:54:34:5e:0a:
7f:75:41:73:6e:33:65:9f:f6:00:54:88:63:d0:f9:69:01:05:
a5:50:b5:11:4c:d6:fc:bb:c0:e9:fd:61:13:a2:b5:2b:94:cd:
5c:0d:56:74:20:68:bf:d0:a0:2e:e8:7d:86:cc:ca:44:d6:80:
7e:44:1d:09:4b:25:7e:77:fc:bc:98:b2:6c:6b:1b:24:68:21:
ea:bb:b4:c1:c8:ca:88:35:4c:89:9f:5a:f3:f7:91:54:ac:1e:
f4:6d:b0:8f:ce:86:cc:e6:16:ab:ef:54:41:6f:ac:80:1c:eb:
1a:df:36:3e:d1:b2:27:b6:35:d7:bf:07:e9:e6:4f:9e:fd:ac:
02:11:d7:72:06:1d:2e:e4:86:69:97:2a:92:24:ee:82:e1:e5:
4b:82:1a:c7:c3:6b:ae:ef:92:f7:3d:1c:48:08:43:86:c7:34:
b4:49:fa:11:9d:c4:3a:f8:a0:02:21:69:85:d9:9f:d8:fa:a4:
78:3f:7f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:15 2023 by rpki-client on console-fra.rpki-client.org