Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/tMF_yBKxAS7yoV5stoJZERNLCr4.roa
File: tMF_yBKxAS7yoV5stoJZERNLCr4.roa (raw, json)
Hash identifier: 1/qHhCX1AwDJIzQiye8mVVwkgU8jYZEViUo9Zo7rXWw=
Subject key identifier: B4:C1:7F:C8:12:B1:01:2E:F2:A1:5E:6C:B6:82:59:11:13:4B:0A:BE
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01884D8642EF6306EE2C9243B4A6BB442139
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/tMF_yBKxAS7yoV5stoJZERNLCr4.roa
Signing time: Wed 24 May 2023 11:30:24 +0000
ROA not before: Wed 24 May 2023 11:30:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.187.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 May 2023 00:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:86:42:ef:63:06:ee:2c:92:43:b4:a6:bb:44:21:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 24 11:30:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4c17fc812b1012ef2a15e6cb6825911134b0abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:7a:c3:69:8b:7c:9c:e2:1a:45:d9:52:32:
0c:b1:39:e5:3c:0a:57:02:1f:5d:27:53:2c:2c:40:
b9:b5:b1:26:5a:51:9d:2b:aa:f0:09:28:1f:94:61:
c7:51:5b:25:1a:88:cc:91:9f:a2:ea:08:a9:55:e3:
7f:dd:3a:c2:2c:47:7d:37:98:c5:e2:24:bd:cd:06:
1c:93:c9:09:01:04:85:51:12:29:4e:c6:33:5b:90:
0f:c6:25:34:c2:4a:9e:95:98:20:4f:cf:17:b1:97:
4e:da:35:1f:b0:3a:8d:1b:93:4e:e5:f0:cf:4e:bd:
d2:e7:da:bf:27:81:8a:4e:57:7a:33:fd:10:c8:6d:
ff:7d:3f:ca:56:30:6a:1c:6d:2e:2c:63:50:5d:22:
d1:be:d9:fb:18:f2:d2:35:06:15:ad:4b:2e:96:40:
33:cb:c5:e0:d2:e4:8e:56:3c:9e:a3:08:ab:e8:66:
bd:0c:e9:c0:10:73:fa:c8:d0:fa:48:2d:8b:5a:53:
35:33:c5:c6:c1:75:70:c1:c8:1b:74:66:1c:4c:09:
1c:2c:7a:dd:e3:22:37:ce:48:2c:91:af:cf:c8:93:
c2:22:75:ca:8e:cb:11:b4:4d:48:6e:95:26:c3:38:
f9:99:2b:8a:af:0c:69:c2:c6:73:16:02:b8:ca:01:
fa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C1:7F:C8:12:B1:01:2E:F2:A1:5E:6C:B6:82:59:11:13:4B:0A:BE
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/tMF_yBKxAS7yoV5stoJZERNLCr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:1c:02:7e:e0:5f:43:dd:fb:e6:ba:82:f3:24:29:44:43:8e:
97:1c:93:81:31:01:eb:31:88:e7:f5:2b:b6:d8:33:31:2d:5c:
9c:7f:84:50:48:1b:28:33:7f:da:d0:59:17:b8:7a:89:71:d2:
d0:a8:20:65:7f:c2:e5:fa:fa:aa:1a:2d:0b:78:3d:76:d9:92:
58:4e:03:bc:e0:3f:04:6c:dc:c0:38:58:c5:84:e8:dd:35:33:
1c:e1:92:5b:06:d5:a9:96:c0:78:bb:77:67:1f:84:e7:98:d8:
04:34:ba:22:01:37:0f:f8:43:4c:d5:3e:78:90:09:11:cf:1d:
2c:61:c7:11:aa:68:6f:9d:01:13:76:97:43:b2:6e:d9:fa:da:
82:2e:26:90:0e:8a:76:dc:dd:cf:8a:be:ac:0f:dd:5f:9d:85:
47:8a:ac:13:c5:a3:68:a0:f2:a3:9e:25:0e:9b:2d:ee:83:94:
ff:59:65:45:3d:dc:47:29:3f:4f:a3:ce:76:1e:7a:d0:2a:0a:
28:44:ec:93:cc:0f:51:48:23:89:64:0b:a2:70:5a:8c:31:3f:
51:f8:92:72:8e:d4:6b:d6:bb:87:4e:bc:c7:2f:3b:ec:d1:33:
54:e1:1d:00:4f:db:86:a0:ac:3f:b7:4f:87:8e:e7:a5:ba:78:
3f:b6:07:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:49 2024 by rpki-client on console-fra.rpki-client.org