Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/rfLBUt_aBqZ-8LQHqXLj1Wbta1g.roa
File: rfLBUt_aBqZ-8LQHqXLj1Wbta1g.roa (raw, json)
Hash identifier: Fkxq5Oes8zne0q9m2PqArDiXH2YJdht7l6P9RlzSgbY=
Subject key identifier: AD:F2:C1:52:DF:DA:06:A6:7E:F0:B4:07:A9:72:E3:D5:66:ED:6B:58
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01884D8643ABD40A1261CC2496E37D2502EC
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/rfLBUt_aBqZ-8LQHqXLj1Wbta1g.roa
Signing time: Wed 24 May 2023 11:30:24 +0000
ROA not before: Wed 24 May 2023 11:30:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 89.187.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:86:43:ab:d4:0a:12:61:cc:24:96:e3:7d:25:02:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 24 11:30:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adf2c152dfda06a67ef0b407a972e3d566ed6b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:57:f1:7e:7c:15:6f:35:5d:80:71:f6:da:
2f:c5:91:45:cb:69:40:d7:31:49:f5:a9:76:65:f2:
da:4f:0c:d5:b1:60:7e:29:f6:aa:cc:b6:3b:9e:95:
e1:98:1a:96:72:4c:cf:e2:c8:c0:2d:0c:6b:34:3e:
ca:d9:f1:14:97:1f:12:3d:ee:75:a0:44:21:25:3f:
cc:40:1c:87:13:b2:cf:c9:e7:37:22:92:38:1f:a9:
80:6a:fc:18:d2:a4:5a:ef:90:61:fd:15:b3:a5:45:
9c:9e:69:06:5e:be:76:35:27:48:b2:16:45:2d:95:
76:88:ec:c4:b5:dc:10:af:85:7f:69:14:3a:fc:4c:
0b:02:42:15:64:45:c3:4a:41:3d:29:d5:13:0a:da:
cb:2d:5f:1d:4e:91:2f:2f:a1:04:40:8b:45:8a:90:
b0:07:f2:0b:f6:71:3d:21:04:73:a2:e1:c0:79:fc:
29:42:de:ab:dc:09:ed:81:13:d8:3d:2b:30:ba:4f:
d0:9b:06:97:7d:74:03:e7:bf:40:56:81:b3:c1:f4:
c8:60:71:a6:3f:d5:8d:62:d8:7a:9a:be:f9:58:20:
7e:97:39:dc:e1:24:cc:d4:57:02:17:4f:6a:01:98:
a6:e1:58:cc:0b:4d:3d:59:c3:a7:dd:a5:1d:b4:12:
bb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F2:C1:52:DF:DA:06:A6:7E:F0:B4:07:A9:72:E3:D5:66:ED:6B:58
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/rfLBUt_aBqZ-8LQHqXLj1Wbta1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.29.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ca:00:11:97:e2:a3:b6:7c:dd:28:24:0e:50:9d:d2:e6:45:
b3:90:0d:49:fd:08:00:d5:33:a4:17:69:41:c5:94:c0:3a:43:
84:96:3e:eb:22:f5:c8:22:74:28:85:80:21:18:9d:0f:c2:3f:
c2:a5:6e:1c:f7:2b:64:92:e5:8f:2c:d2:b0:88:67:02:c9:e5:
ef:af:0c:69:31:f3:90:65:4e:0b:51:e2:f7:fc:52:e9:c8:45:
a2:e5:01:5e:c5:fe:43:ca:97:28:75:0f:38:e3:51:7c:a1:d9:
68:e4:e4:08:38:0c:62:39:26:01:ab:67:43:0a:39:60:c6:e4:
8b:a9:0a:d8:6a:56:32:91:ff:ba:aa:a4:ec:8a:57:3d:e2:54:
bc:7a:bf:6b:d2:e7:4e:7f:9a:5a:b5:d1:2e:85:4d:cf:9f:0d:
66:9d:0c:cb:61:cd:37:00:78:89:d3:d4:c8:93:f8:a7:34:54:
f2:bc:a8:47:e9:7d:9f:f7:66:c2:6c:5b:2c:b7:72:61:f8:9d:
ef:89:41:7e:12:94:be:b5:d4:1f:76:4b:6c:c9:1f:12:f3:fd:
f6:bb:16:91:bf:95:1c:74:bf:6f:31:62:0e:b5:ae:1f:92:73:
3b:19:82:87:e3:cb:2b:29:d9:6c:70:44:fb:1d:a9:83:ad:6f:
01:f0:3c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:15 2023 by rpki-client on console-fra.rpki-client.org