Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/mFEEgSlSgmIcj5jO89vvZE0MmCY.roa
File: mFEEgSlSgmIcj5jO89vvZE0MmCY.roa (raw, json)
Hash identifier: Nec4IUm7L1pnEEH3/f6y4F7vWkrrVso2pgBrKYKuJCI=
Subject key identifier: 98:51:04:81:29:52:82:62:1C:8F:98:CE:F3:DB:EF:64:4D:0C:98:26
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0187E5804DBF0AED1737AC3C35A06B86C9CC
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/mFEEgSlSgmIcj5jO89vvZE0MmCY.roa
Signing time: Thu 04 May 2023 06:43:23 +0000
ROA not before: Thu 04 May 2023 06:43:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.187.8.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.6.0/24 maxlen: 24
89.187.16.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:80:4d:bf:0a:ed:17:37:ac:3c:35:a0:6b:86:c9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 4 06:43:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98510481295282621c8f98cef3dbef644d0c9826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:b4:8b:64:67:56:34:90:81:83:ed:d3:eb:
65:6f:f9:4d:14:b0:f8:7b:27:d6:d3:85:89:23:7f:
a4:d8:28:4b:e9:a1:8d:eb:7f:26:f5:a7:28:82:0d:
6f:68:f8:0f:90:bf:bf:81:32:56:3e:bf:67:55:97:
b5:33:78:8a:fd:14:d7:99:d5:be:c2:f2:2a:20:3c:
7b:04:dd:e9:a2:e1:11:c3:4a:d6:8e:73:5f:b2:63:
c7:6c:71:65:89:c6:f4:ad:ec:9a:c4:ad:15:da:bc:
ee:35:9d:ce:e1:c7:8e:14:68:e9:cc:0b:da:81:1d:
72:2e:fc:d8:62:6a:8d:21:73:b8:65:13:94:d9:ca:
5e:30:8a:73:af:bb:77:02:3a:56:a2:9a:a5:00:21:
d1:d2:07:81:bb:0b:da:51:30:59:df:91:c1:50:7d:
c4:58:95:92:76:75:d6:b2:42:56:6d:bc:40:e3:21:
e3:59:25:54:80:88:72:4a:aa:78:9f:81:f0:44:ec:
21:ea:7e:6e:26:c5:b6:f3:b9:b0:3d:e0:3a:a9:f0:
70:a9:eb:52:9b:5f:2e:9a:a6:8f:e6:d4:75:a0:72:
17:db:b1:36:f9:3f:20:fd:66:68:37:91:b3:4e:46:
b2:f4:55:ed:e8:78:a4:6f:f9:1d:8a:a7:02:7c:df:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:51:04:81:29:52:82:62:1C:8F:98:CE:F3:DB:EF:64:4D:0C:98:26
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/mFEEgSlSgmIcj5jO89vvZE0MmCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0/24
89.187.8.0/24
89.187.10.0/24
89.187.12.0/24
89.187.15.0-89.187.20.255
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
74:90:0d:f1:f1:3a:68:2b:22:ce:6a:c4:37:33:11:7f:67:38:
43:39:ae:94:f6:be:d4:08:c1:39:0c:6c:1a:09:34:a7:1c:b4:
76:a6:41:69:75:2f:cf:66:44:6a:46:83:78:63:16:3e:ab:34:
1d:71:77:86:22:f0:1e:af:27:9d:82:d9:e2:35:39:32:b4:c9:
17:89:7e:9a:c0:e3:93:52:73:cd:71:a5:17:b8:6e:75:0c:48:
62:c4:a5:cd:e4:c9:4c:8b:e1:e1:a9:13:37:e3:e8:04:37:9c:
8f:be:c8:7f:99:54:df:02:77:33:94:30:e4:2d:90:62:5a:02:
5a:04:a5:d4:fd:a9:f4:3b:b9:44:77:a9:02:e4:90:0a:e5:bc:
ab:26:37:22:11:dd:24:44:f3:21:6f:df:45:83:f9:54:01:e7:
28:05:9d:69:13:f6:72:9d:d5:bd:80:78:a2:e0:4a:45:b0:79:
90:67:5e:7d:82:ef:92:d2:0d:fd:78:02:96:88:e7:2f:4b:9d:
8b:3d:c6:12:9c:66:cd:ff:8a:a0:df:68:96:a8:e0:ff:04:e2:
89:fe:02:69:14:ee:b9:78:7b:47:e4:ce:05:c5:35:9a:68:60:
aa:22:ce:86:19:67:75:cd:46:9b:8a:06:c2:91:11:0c:e3:1a:
f0:f7:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:15 2023 by rpki-client on console-fra.rpki-client.org