Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AGBUJh9cHuzHSH-p4TUq0i3iQWA.roa
File: AGBUJh9cHuzHSH-p4TUq0i3iQWA.roa (raw, json)
Hash identifier: +QnFj0mpWK5mQdb4/TQjyyN1V3mYQJ4fG5gJxsMMOGg=
Subject key identifier: 00:60:54:26:1F:5C:1E:EC:C7:48:7F:A9:E1:35:2A:D2:2D:E2:41:60
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189A6070DEA7F44BC6F91979773F4F74842
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AGBUJh9cHuzHSH-p4TUq0i3iQWA.roa
Signing time: Sun 30 Jul 2023 09:00:27 +0000
ROA not before: Sun 30 Jul 2023 09:00:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147291
IP address blocks: 89.213.5.0/24 maxlen: 24
89.213.135.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
89.213.134.0/24 maxlen: 24
89.213.138.0/24 maxlen: 24
89.213.137.0/24 maxlen: 24
89.213.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 15:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a6:07:0d:ea:7f:44:bc:6f:91:97:97:73:f4:f7:48:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 30 09:00:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=006054261f5c1eecc7487fa9e1352ad22de24160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ff:cf:6d:f1:a5:f8:96:0e:86:b5:59:42:7d:
c1:1c:89:96:dd:66:ed:d2:9f:7b:ba:2f:72:0b:2b:
73:39:4b:20:b4:dd:4a:dd:a5:3e:f2:f4:f5:81:3e:
3b:dd:2b:5a:bb:68:81:81:06:98:ca:24:a1:17:b2:
04:0e:ec:48:15:24:fe:e9:dd:ad:f2:75:34:54:40:
11:ba:d5:37:20:cb:e2:c0:df:b0:8e:6c:61:34:ff:
ac:a2:2f:29:f0:6f:b2:f6:8a:b7:c9:21:70:7e:da:
1b:89:06:17:03:f4:cf:d7:06:6d:2b:ff:20:28:20:
23:b8:fa:fb:e9:c5:8d:1c:03:ee:a1:6e:2a:4b:8c:
71:3c:fc:c6:86:57:60:62:bf:22:81:87:91:74:72:
3a:f1:20:d1:91:60:e1:79:7a:06:a4:a2:b8:d3:a5:
b1:b2:4f:07:6a:6a:d8:f6:60:b8:0b:42:3e:de:c9:
4e:5d:bd:12:61:04:1a:44:d6:b5:c4:d1:e6:4c:71:
f9:8f:b5:66:72:e6:13:50:94:32:f9:ac:d4:90:a1:
c7:45:0e:a7:36:44:95:10:55:67:cd:c7:b6:b3:aa:
34:f2:ec:d4:34:7f:6d:aa:3c:48:03:47:29:6b:1f:
4a:c0:d3:0d:ae:30:a8:d4:15:b9:9a:36:46:b5:96:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:60:54:26:1F:5C:1E:EC:C7:48:7F:A9:E1:35:2A:D2:2D:E2:41:60
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AGBUJh9cHuzHSH-p4TUq0i3iQWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.5.0/24
89.213.133.0-89.213.135.255
89.213.137.0-89.213.138.255
89.213.153.0/24
Signature Algorithm: sha256WithRSAEncryption
36:97:59:3e:3a:38:ca:2a:20:d7:51:dc:1f:00:b1:c3:29:25:
4c:81:43:b0:6e:bd:f2:f9:30:2b:a6:ad:c0:ed:64:df:e7:41:
92:ba:e2:45:01:55:7a:19:21:db:e5:7e:cc:27:93:29:d7:17:
18:df:96:de:b5:0a:0b:01:62:d9:c9:4f:55:b1:37:6d:4a:68:
96:d2:6b:3a:90:4e:57:42:28:1c:df:0c:cc:17:eb:7b:15:64:
e4:a6:5a:0d:76:a4:00:aa:bb:32:80:8b:a5:28:47:1d:64:85:
32:69:29:2e:2e:60:93:68:46:02:2d:aa:26:f8:c7:b6:b7:3b:
90:9d:fc:e4:13:f1:5d:02:18:55:1f:1b:ad:64:52:d2:0d:0b:
54:d2:5b:e8:69:91:06:93:eb:55:58:e7:f9:b5:6f:5c:e5:68:
75:ec:78:cd:af:6f:63:6a:8f:25:ec:db:00:f4:88:3b:2a:71:
6a:fd:ea:40:ee:5f:8d:4a:b2:60:bc:22:98:c3:1d:f4:53:a6:
21:67:b7:2e:43:15:25:03:80:89:87:ca:b6:24:24:b6:38:34:
89:f3:21:a1:25:62:f8:43:68:e3:f8:75:67:70:e7:ce:f3:72:
66:f4:c2:9c:f0:d1:d0:3f:f3:62:13:e9:e2:5b:82:8e:af:cc:
db:b3:e5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org