Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/9_Cc7LrxqQ8PgdAksEGoczlydv8.roa
File: 9_Cc7LrxqQ8PgdAksEGoczlydv8.roa (raw, json)
Hash identifier: eWgJlL+hUWeOxI/NHozwM7yXdqphs+x7qrDtRyHNsQg=
Subject key identifier: F7:F0:9C:EC:BA:F1:A9:0F:0F:81:D0:24:B0:41:A8:73:39:72:76:FF
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 0189877E8EE07C93024C660D2C856CF0C6EB
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/9_Cc7LrxqQ8PgdAksEGoczlydv8.roa
Signing time: Mon 24 Jul 2023 10:42:45 +0000
ROA not before: Mon 24 Jul 2023 10:42:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197677
IP address blocks: 85.237.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:87:7e:8e:e0:7c:93:02:4c:66:0d:2c:85:6c:f0:c6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jul 24 10:42:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7f09cecbaf1a90f0f81d024b041a873397276ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f6:37:4f:6c:f9:af:5b:e0:70:37:e8:e8:cb:
47:78:b0:08:05:2f:d2:4a:7f:60:0d:12:c4:1b:9a:
1a:f5:1a:6d:e0:d0:3b:62:b2:1a:07:bb:cc:7c:04:
77:94:3e:26:ac:82:c0:bb:f8:63:bc:ad:35:0e:26:
5d:64:3f:7b:8b:9a:27:0a:88:2b:ce:13:99:8c:8b:
3c:d7:2e:a8:a8:db:f1:4e:74:5a:94:e4:a4:ad:27:
e6:fd:99:23:60:fe:d9:19:87:b7:bf:6e:d1:05:46:
48:50:db:08:62:b4:3c:fb:d2:0b:59:2f:dd:45:6c:
09:de:1f:1a:82:16:db:2e:95:84:cf:1a:4b:cf:4a:
63:e6:b0:ba:2e:dd:df:9f:9a:ed:ec:ea:df:bf:2b:
d2:ff:52:18:b5:6f:ad:69:df:6f:ed:5f:ee:8a:e7:
df:7e:8a:d1:5c:a8:c0:c3:a9:fd:13:54:4c:be:94:
0b:d4:b9:61:0c:b0:90:10:11:9d:fa:d4:3c:0f:47:
45:33:29:01:ca:67:8d:ce:35:4f:e0:0e:7b:1d:f2:
1f:91:ce:4a:46:1f:a7:ee:43:e6:cf:ae:4b:33:87:
8d:02:ef:d3:33:52:be:aa:7a:5e:46:45:9c:2c:15:
e5:5f:f3:d9:cd:d9:45:82:bc:54:57:dd:93:12:74:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F0:9C:EC:BA:F1:A9:0F:0F:81:D0:24:B0:41:A8:73:39:72:76:FF
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/9_Cc7LrxqQ8PgdAksEGoczlydv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.89.0/24
Signature Algorithm: sha256WithRSAEncryption
22:dc:c8:6b:7e:fa:49:df:f8:d9:9e:ea:30:50:ec:6f:5d:1b:
04:f3:61:9f:af:58:1a:39:18:86:2c:68:a9:70:8e:c4:4e:7b:
04:98:e6:67:c2:da:bd:a6:52:20:a1:4f:0d:2d:66:8d:4d:a8:
e4:dc:80:c3:8d:a5:9a:4c:f8:ce:fb:d9:04:71:4b:d3:e6:aa:
65:c2:97:66:06:35:6b:fe:91:36:39:03:36:ee:1a:ae:29:33:
05:07:56:0d:b9:a2:58:bb:90:10:e2:bc:a6:1d:8f:be:35:a4:
6a:4a:94:bd:11:fe:c2:d1:a2:64:28:05:f4:1d:05:d3:cc:55:
98:34:4b:9e:d7:73:d7:44:bd:2b:d3:41:d3:e8:20:5e:19:39:
55:64:d8:53:52:d5:22:ff:cd:8c:93:99:62:17:a1:6c:d4:77:
d5:4e:a8:81:5c:e0:d9:33:7a:43:31:3f:5f:f2:20:58:ca:bc:
3d:f0:74:24:32:cc:42:7b:82:de:93:5e:55:c3:40:e9:2f:dc:
3b:40:8a:4b:f7:92:ba:ac:52:b9:53:06:f2:fa:55:49:24:23:
70:ea:2c:85:bb:8b:cd:9a:11:cb:4a:75:34:6f:7c:21:ea:59:
a4:c0:bf:65:d6:b1:e4:ad:7c:72:98:29:54:6b:ce:b1:4f:40:
43:4c:b9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 09:21:48 2023 by rpki-client on console-fra.rpki-client.org