Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/qtwPaHqAonGKpynvASnXYhV6P0I.roa
File: qtwPaHqAonGKpynvASnXYhV6P0I.roa (raw, json)
Hash identifier: Pc/TQmiWpRCU3AlI/8ku896H7XI0v6JhVJBviCdTBfs=
Subject key identifier: AA:DC:0F:68:7A:80:A2:71:8A:A7:29:EF:01:29:D7:62:15:7A:3F:42
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0187C8BCFD6ABDF9FC1D4F81FDAE24B3C154
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/qtwPaHqAonGKpynvASnXYhV6P0I.roa
Signing time: Fri 28 Apr 2023 16:40:41 +0000
ROA not before: Fri 28 Apr 2023 16:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 89.187.7.0/24 maxlen: 24
89.187.13.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.29.0/24 maxlen: 24
89.187.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c8:bc:fd:6a:bd:f9:fc:1d:4f:81:fd:ae:24:b3:c1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Apr 28 16:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aadc0f687a80a2718aa729ef0129d762157a3f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:f4:ee:c4:83:b6:61:5a:b0:70:df:27:f6:
75:31:71:ce:3e:9d:22:58:4d:4c:91:54:e2:e3:8f:
af:c8:ec:d5:5a:19:c2:2e:75:6a:a6:86:4a:07:7c:
eb:bb:8a:db:ea:6b:4e:b9:0a:36:e5:31:f9:bd:fa:
59:d8:9f:95:90:ee:c4:2a:09:02:21:cd:ac:c1:5c:
23:14:af:28:fa:bf:a3:88:8e:45:ff:b8:22:7f:52:
8a:c7:69:34:a3:e5:ce:ab:bb:ff:08:a0:e8:68:14:
b7:fc:b3:43:97:26:43:da:e6:02:b3:72:04:5f:d5:
52:2d:9d:e6:78:85:e9:ef:ef:fa:57:66:07:f5:8d:
92:24:79:5b:ed:71:2a:70:cd:34:60:74:24:57:06:
50:7e:e7:d6:ec:e8:55:bd:58:86:3c:33:19:67:5c:
bc:4b:b9:b1:93:fe:c9:91:63:6d:fc:c9:b1:63:98:
b7:38:cc:60:e9:a1:fd:4d:90:c0:f6:63:f7:0e:dd:
86:f3:e8:87:8b:e8:82:5b:f3:5e:d1:1b:27:cb:88:
c7:47:c7:2a:da:96:cb:ca:f8:6b:4d:0e:c5:59:53:
b1:cd:d0:c8:ea:37:b5:41:f6:bb:fa:5c:81:48:b4:
71:c4:fc:1c:86:bf:e7:29:00:d9:fd:f0:a5:d8:5c:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DC:0F:68:7A:80:A2:71:8A:A7:29:EF:01:29:D7:62:15:7A:3F:42
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/qtwPaHqAonGKpynvASnXYhV6P0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.7.0/24
89.187.13.0-89.187.14.255
89.187.29.0/24
89.187.31.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7c:da:13:e8:ed:15:ad:7d:0f:34:3d:27:88:34:7d:22:0d:
7e:32:a3:eb:f0:c7:fc:e4:ec:1e:d5:40:f4:f8:88:a3:42:b8:
4c:59:e6:ba:17:e1:e2:9a:c6:79:00:28:41:b5:f7:77:1b:87:
d9:ce:f8:e0:10:68:72:99:4c:33:60:72:f1:cc:e9:53:4e:08:
6a:eb:c4:be:9d:cb:88:00:de:0c:a5:93:8f:88:8a:37:52:0b:
78:92:f7:ad:e8:c0:e2:83:d7:bb:f0:e0:c3:30:e9:02:07:e3:
94:9a:8a:e2:82:55:17:04:35:ea:37:dc:bf:81:20:7f:88:43:
f4:e6:fd:e1:78:cc:26:2c:48:ac:8f:f4:05:df:7c:eb:72:0b:
74:17:3e:d0:b5:93:32:61:a8:b9:9e:02:34:f6:51:5b:3d:21:
b9:aa:fb:11:0b:02:2e:39:3b:62:04:cf:f8:50:55:e4:ec:90:
80:26:fb:e4:48:d2:d8:c3:cd:e3:b2:8b:f1:44:69:dc:61:3a:
63:22:e2:9e:71:44:7a:cb:c9:fe:8e:75:cb:32:85:36:21:0a:
6b:cb:dd:7a:aa:6e:7e:9b:f9:19:51:51:be:c3:e3:5b:9b:02:
92:1c:ff:c1:2c:62:7d:98:37:9e:b7:40:d5:3d:16:69:5f:17:
5f:43:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org