Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/AAR_yxHKhmCX2iFMsoP-cOWwy4c.roa
File: AAR_yxHKhmCX2iFMsoP-cOWwy4c.roa (raw, json)
Hash identifier: Oi4spYmcExu7Jx3RPRJHo5z7XSBxUMRFbssGsMu99Fo=
Subject key identifier: 00:04:7F:CB:11:CA:86:60:97:DA:21:4C:B2:83:FE:70:E5:B0:CB:87
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 018F2C7873E64F2933A07A62A20336B23F3A
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/AAR_yxHKhmCX2iFMsoP-cOWwy4c.roa
Signing time: Tue 30 Apr 2024 00:47:22 +0000
ROA not before: Tue 30 Apr 2024 00:47:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12929
IP address blocks: 89.8.0.0/15 maxlen: 15
89.9.72.0/23 maxlen: 24
89.9.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 May 2024 22:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2c:78:73:e6:4f:29:33:a0:7a:62:a2:03:36:b2:3f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Apr 30 00:47:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00047fcb11ca866097da214cb283fe70e5b0cb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:98:d9:da:45:1a:54:5c:a7:e5:17:7a:af:12:
49:d3:c5:cb:55:37:78:3b:15:97:18:87:30:7d:6b:
8d:0a:18:2a:18:c6:46:a1:2f:7c:db:a5:45:00:50:
30:75:76:bc:aa:ab:47:2c:1a:09:eb:60:47:f2:70:
31:01:a7:3d:81:2b:12:e6:a5:5f:40:e6:a6:5b:ab:
88:d3:6f:3f:fa:2c:9c:e1:43:05:bd:e5:12:bd:5d:
05:17:81:d1:e6:d9:bf:4e:b2:cc:2c:52:ce:a1:3b:
09:ff:45:ec:be:ca:51:01:7b:0a:5c:93:e0:70:43:
90:14:34:ba:74:b0:a2:9b:a8:8a:26:a1:15:9a:af:
01:7b:38:c1:c4:a7:14:45:7c:82:30:cd:8d:14:5e:
07:72:cd:c7:ac:d2:75:28:db:54:19:80:6d:7b:43:
af:30:67:16:13:4f:e0:d1:2c:5d:36:65:9e:db:48:
5f:d7:37:ca:76:3e:05:dc:44:2f:f4:da:4b:af:43:
be:34:24:03:a7:e6:0a:62:91:32:32:e3:51:d3:b8:
28:68:de:bf:6d:c1:4f:d3:a7:50:2c:97:90:8c:38:
ad:27:69:48:73:64:aa:78:dd:d0:6e:32:2a:a6:ea:
14:15:20:09:2a:24:ba:45:72:78:a1:8c:98:88:49:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:04:7F:CB:11:CA:86:60:97:DA:21:4C:B2:83:FE:70:E5:B0:CB:87
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/AAR_yxHKhmCX2iFMsoP-cOWwy4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.8.0.0/15
Signature Algorithm: sha256WithRSAEncryption
75:53:9f:72:10:8e:15:93:ef:d7:25:d4:a0:3b:35:6c:7f:73:
c0:e7:20:bd:ff:97:de:ea:86:f1:c0:8a:0a:9f:8e:6e:a9:8a:
5d:eb:06:cd:e1:bd:23:55:38:c2:28:e5:d1:28:d5:8f:b6:3e:
4d:f3:ad:6e:69:0a:29:1c:da:95:a7:d1:2f:d5:96:73:9e:b4:
4e:ed:31:03:03:17:45:18:e3:b2:83:91:72:43:63:63:1f:75:
1b:60:31:f1:35:8a:b8:22:e9:21:26:32:25:8e:d2:ba:2a:3f:
6b:af:d0:79:58:14:ca:d6:76:f4:bd:52:b4:13:23:45:07:3d:
0e:01:d9:a9:db:17:3c:24:3a:a8:67:56:9c:8a:3f:54:55:f4:
07:b1:ac:c1:10:5b:bb:f1:84:64:6f:b5:c9:c8:8a:a5:4f:7a:
3a:83:6b:2f:fa:d6:bd:aa:c3:0b:8a:b6:b3:3a:e8:fe:b2:15:
f6:43:08:e6:a1:4b:7f:29:ac:1a:00:84:06:63:2b:5e:49:9b:
d2:5a:59:d8:ab:39:c0:86:0e:00:85:07:9b:43:0b:d1:37:9c:
d6:3e:b5:3a:ea:02:94:fc:f3:64:f1:ed:8a:97:dd:d7:08:a7:
51:3c:50:ef:9a:b2:6d:45:96:73:e3:26:c0:be:f0:9e:fd:0a:
46:40:61:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:43 2024 by rpki-client on console-fra.rpki-client.org