Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/QirfQIwMLz-Z5kyW8mzH7G0IdwY.roa
File: QirfQIwMLz-Z5kyW8mzH7G0IdwY.roa (raw, json)
Hash identifier: 66bfKq61OK0Wby9u/AsgPNCWmLsxzQnTznbCSKVM6Lw=
Subject key identifier: 42:2A:DF:40:8C:0C:2F:3F:99:E6:4C:96:F2:6C:C7:EC:6D:08:77:06
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 01894F19B2C6B8F7F24D3BF39E8D98D50BFF
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/QirfQIwMLz-Z5kyW8mzH7G0IdwY.roa
Signing time: Thu 13 Jul 2023 11:53:51 +0000
ROA not before: Thu 13 Jul 2023 11:53:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60815
IP address blocks: 185.89.90.0/24 maxlen: 24
185.89.89.0/24 maxlen: 24
185.89.88.0/24 maxlen: 24
185.89.88.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4f:19:b2:c6:b8:f7:f2:4d:3b:f3:9e:8d:98:d5:0b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: Jul 13 11:53:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=422adf408c0c2f3f99e64c96f26cc7ec6d087706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:2d:2d:9a:47:94:f5:65:05:9e:6c:da:4e:
ff:21:15:21:2d:2d:43:2c:f9:ba:4e:a3:d8:37:88:
65:17:29:b8:27:91:b2:91:71:5e:ba:18:c5:08:1c:
90:90:8b:ef:cb:09:58:29:3b:6a:86:04:1b:21:43:
2a:d7:54:f3:61:64:5f:7c:46:de:bf:4c:26:ed:1c:
1f:bb:ad:d3:9c:84:4a:c0:ce:6a:ba:77:8b:c9:67:
58:10:1c:29:9f:3d:c6:67:b5:ba:9f:d9:3c:a0:0b:
3f:ea:9d:34:b9:1b:7e:65:4f:74:72:a7:cc:c6:5a:
3a:f3:6c:95:cb:b0:28:0f:c4:6e:b3:5a:d4:c1:b7:
1b:ef:99:ef:8d:88:b1:39:8f:eb:ce:7e:9a:64:8b:
74:11:63:63:8a:07:d2:87:66:10:00:9d:9f:8f:a6:
af:f2:08:6f:4b:0c:13:0d:28:fb:70:52:09:b5:96:
99:7b:96:ae:bd:87:35:1d:63:91:0c:7a:54:4e:5a:
88:04:6d:84:1b:68:b0:3f:fb:ac:5e:e6:6f:72:9c:
a6:5d:1a:bd:a2:ac:4f:f6:8a:f4:25:cd:56:12:a2:
87:c9:fd:22:e8:1e:2e:50:89:18:50:97:21:c6:db:
82:19:cf:bb:63:a4:c1:62:67:a3:98:63:6e:81:88:
3f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2A:DF:40:8C:0C:2F:3F:99:E6:4C:96:F2:6C:C7:EC:6D:08:77:06
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/QirfQIwMLz-Z5kyW8mzH7G0IdwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.88.0-185.89.90.255
Signature Algorithm: sha256WithRSAEncryption
58:3e:98:a2:27:ac:66:b1:dd:28:68:60:5e:f7:35:79:dd:c1:
d3:a1:ab:15:cc:be:6f:75:e8:02:b1:40:26:cd:ef:ae:64:db:
c5:68:7c:9b:54:35:34:b9:a1:d7:30:ae:a1:5e:0b:df:3f:5c:
48:44:ce:b9:ac:5b:1b:a1:95:99:57:62:e3:1c:ab:a1:c5:5c:
97:d8:2c:f1:ee:75:93:5b:26:bd:26:8e:d3:82:44:82:9f:0b:
88:1f:cb:5f:c0:85:b6:e6:4e:8d:96:9b:cd:2b:67:cc:04:dc:
6b:34:ee:7b:d8:61:0b:61:49:f3:83:81:e5:1a:78:ab:cd:cd:
f8:5f:cc:cf:f6:37:8f:5d:20:9d:5f:63:2e:5d:47:08:83:e5:
2b:79:d5:b0:4c:de:1d:56:c8:a9:b9:db:c9:61:73:2b:a1:f2:
b9:52:4e:d2:75:73:d5:a0:ce:5a:d7:33:66:87:39:8b:fb:85:
7b:9c:26:62:e9:3b:6a:99:85:52:44:b9:93:0f:48:e3:e4:1b:
70:c2:b4:be:2d:2e:33:6a:e3:87:04:8f:94:92:95:8b:35:4a:
1a:f5:c9:d4:2e:ed:b9:37:c0:6c:e2:63:12:20:be:0c:4b:9d:
5f:e1:c0:b5:22:97:69:17:54:45:32:8e:57:6a:86:54:ae:0c:
ed:b9:a3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-ams.rpki-client.org