Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/lyVrR-QwQEwuQooASxI43WTaXnY.roa
File: lyVrR-QwQEwuQooASxI43WTaXnY.roa (raw, json)
Hash identifier: DKLpTRPwg3+2RF+c9tyzPMMmGPKnKlIu08YM6zWS0Ns=
Subject key identifier: 97:25:6B:47:E4:30:40:4C:2E:42:8A:00:4B:12:38:DD:64:DA:5E:76
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01882A89DBC3CAB698C8B64577301A5C69C3
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/lyVrR-QwQEwuQooASxI43WTaXnY.roa
Signing time: Wed 17 May 2023 16:27:37 +0000
ROA not before: Wed 17 May 2023 16:27:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 89.187.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2a:89:db:c3:ca:b6:98:c8:b6:45:77:30:1a:5c:69:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 17 16:27:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97256b47e430404c2e428a004b1238dd64da5e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:96:cd:16:bc:97:5d:4e:26:e4:4e:c0:36:
c8:36:a0:cf:1f:99:75:8d:2b:7f:e1:99:bf:19:4b:
50:ad:b1:ff:60:52:2d:85:10:0b:50:d4:68:cb:ce:
e3:e3:b1:ee:58:2d:2c:ed:8f:a8:88:e1:21:f6:9d:
19:d6:27:d0:51:9a:1b:dc:c5:dc:d2:69:da:25:5d:
a7:2c:a5:88:2b:83:34:a2:2d:ff:f1:75:91:a8:7d:
66:a9:27:b4:2a:37:ff:db:3c:9e:a7:93:43:c5:dd:
d3:4e:58:2f:de:b3:6e:80:33:b5:01:bb:ed:ae:13:
0d:20:80:9e:dd:f9:2c:21:31:ac:88:a7:7d:d7:fe:
87:eb:6e:8d:5c:4a:c4:6a:0a:19:1c:f5:d6:2f:25:
cc:da:62:4e:f6:6b:fd:79:02:ab:ab:a7:78:1c:9a:
1b:96:88:e7:d6:a8:cd:66:9e:7c:41:2b:f2:19:d0:
2f:da:8e:1b:44:93:b1:b7:88:c9:68:c6:1b:8c:ec:
d3:0d:c3:5b:3e:d6:1a:b9:15:35:29:7d:e4:1e:87:
fc:9c:e9:27:4c:0f:55:b3:bb:60:b5:3e:6e:fa:c7:
69:9e:7d:89:e7:97:19:79:36:56:03:82:7f:96:c9:
7b:93:7c:d2:dd:3f:a3:3f:23:3c:8f:7a:93:4f:2c:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:25:6B:47:E4:30:40:4C:2E:42:8A:00:4B:12:38:DD:64:DA:5E:76
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/lyVrR-QwQEwuQooASxI43WTaXnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.31.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:aa:c8:3b:22:05:bc:94:9d:fd:47:c2:49:11:37:5a:de:17:
8b:b4:6b:c5:5f:d1:37:d5:4c:b9:5b:0f:25:17:55:0c:b4:1f:
c4:28:0a:0f:6d:5d:bd:8a:26:e5:ab:f3:eb:19:9f:46:f8:75:
c9:76:d7:f3:88:d0:cf:6b:58:df:87:3b:32:45:02:4c:b3:6d:
cd:7d:16:db:5a:5b:5a:78:b1:a8:86:f2:8a:5d:d0:c8:5a:09:
3a:2d:e8:37:de:31:92:6c:a9:84:7e:75:ef:00:68:c9:84:6d:
f9:24:61:9d:0c:4c:e5:bc:8a:ff:92:b7:d6:f4:e8:61:0a:fb:
8a:3f:3d:c9:e4:47:1a:29:ba:fa:f5:9e:22:f6:ba:e0:cf:90:
68:17:1a:ff:04:60:ee:0c:9c:c0:c2:aa:a0:65:49:2e:a5:24:
11:84:3c:57:18:7f:20:e3:f9:00:39:c5:3d:23:b0:40:65:a6:
71:35:62:f9:62:ba:11:23:7a:70:99:fd:aa:8f:cc:58:8e:62:
7f:41:26:76:6f:c0:fb:e4:ce:52:98:32:f2:2a:d0:9c:fb:28:
5f:6e:07:42:87:42:6c:60:48:4b:18:75:9e:6d:47:4b:a9:44:
66:f6:d1:b9:a1:82:91:8b:de:11:34:3f:fb:b6:8b:f5:06:e0:
12:01:0f:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgqidvDyraYyLZFdzAaXGnDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjMwNTE3MTYyNzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzI1NmI0N2U0MzA0MDRjMmU0MjhhMDA0YjEyMzhkZDY0ZGE1ZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngyWzRa8l11OJuROwDbINqDPH5l1
jSt/4Zm/GUtQrbH/YFIthRALUNRoy87j47HuWC0s7Y+oiOEh9p0Z1ifQUZob3MXc
0mnaJV2nLKWIK4M0oi3/8XWRqH1mqSe0Kjf/2zyep5NDxd3TTlgv3rNugDO1Abvt
rhMNIICe3fksITGsiKd91/6H626NXErEagoZHPXWLyXM2mJO9mv9eQKrq6d4HJob
lojn1qjNZp58QSvyGdAv2o4bRJOxt4jJaMYbjOzTDcNbPtYauRU1KX3kHof8nOkn
TA9Vs7tgtT5u+sdpnn2J55cZeTZWA4J/lsl7k3zS3T+jPyM8j3qTTyyf2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJcla0fkMEBMLkKKAEsSON1k2l52MB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvbHlWclItUXdRRXd1UW9vQVN4STQzV1RhWG5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbsfMA0G
CSqGSIb3DQEBCwUAA4IBAQDMqsg7IgW8lJ39R8JJETda3heLtGvFX9E31Uy5Ww8l
F1UMtB/EKAoPbV29iiblq/PrGZ9G+HXJdtfziNDPa1jfhzsyRQJMs23NfRbbWlta
eLGohvKKXdDIWgk6Leg33jGSbKmEfnXvAGjJhG35JGGdDEzlvIr/krfW9OhhCvuK
Pz3J5EcaKbr69Z4i9rrgz5BoFxr/BGDuDJzAwqqgZUkupSQRhDxXGH8g4/kAOcU9
I7BAZaZxNWL5YroRI3pwmf2qj8xYjmJ/QSZ2b8D75M5SmDLyKtCc+yhfbgdCh0Js
YEhLGHWebUdLqURm9tG5oYKRi94RND/7tov1BuASAQ/P
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org