Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/AVJ2OHGlIViG0Jw2f3uLXyzobUw.roa
File: AVJ2OHGlIViG0Jw2f3uLXyzobUw.roa (raw, json)
Hash identifier: A0/J0TbrUBG1syqsQPAYdUsjXDV5JEH8+IeJ1xTDzV0=
Subject key identifier: 01:52:76:38:71:A5:21:58:86:D0:9C:36:7F:7B:8B:5F:2C:E8:6D:4C
Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial: 018AB2988FE9FB432D0BA15D53CB1CAC1132
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/AVJ2OHGlIViG0Jw2f3uLXyzobUw.roa
Signing time: Wed 20 Sep 2023 12:37:37 +0000
ROA not before: Wed 20 Sep 2023 12:37:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39370
IP address blocks: 89.147.3.0/24 maxlen: 24
89.147.0.0/23 maxlen: 23
89.147.0.0/24 maxlen: 24
89.147.4.0/24 maxlen: 24
89.147.1.0/24 maxlen: 24
89.147.2.0/24 maxlen: 24
89.147.7.0/24 maxlen: 24
89.147.5.0/24 maxlen: 24
89.147.6.0/23 maxlen: 23
89.147.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:98:8f:e9:fb:43:2d:0b:a1:5d:53:cb:1c:ac:11:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Validity
Not Before: Sep 20 12:37:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0152763871a5215886d09c367f7b8b5f2ce86d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:52:b7:04:0a:95:90:d0:b8:0e:eb:70:90:c5:
12:13:fa:19:73:54:c6:ae:e4:85:b0:98:dd:1d:0a:
8a:08:2b:59:9f:df:66:0f:1a:da:73:21:e0:ae:c0:
96:f5:c3:25:fd:86:36:c7:26:c5:f4:62:9d:c1:6a:
df:09:8d:6b:2f:4c:f3:0f:ef:68:20:54:90:cb:59:
b9:eb:1c:cd:90:9f:5f:f4:ac:c4:a4:12:9b:5d:51:
88:e7:fa:73:19:64:69:8a:9d:8e:7b:67:d2:07:05:
74:31:c9:29:39:c0:12:ff:2d:11:d6:82:35:84:d1:
2b:9e:6d:54:7a:bb:ed:75:bb:3f:00:5a:3c:69:4b:
cc:b1:24:bb:ed:15:9e:68:32:99:78:75:98:35:26:
b5:da:c1:a0:73:8e:01:c7:ea:3e:66:49:dc:59:c6:
ba:fc:18:64:b3:d7:46:56:9f:8c:50:38:4b:cf:aa:
aa:94:26:5c:a8:55:46:a4:b9:55:23:80:93:38:59:
0f:7c:d3:f6:99:97:5e:4d:5f:b9:62:6c:70:df:38:
38:44:26:d0:30:1f:70:cb:a5:7a:26:b0:90:62:27:
28:c7:71:82:73:b7:dd:05:9e:db:f3:72:d1:3a:be:
bc:31:09:5d:fc:1a:db:f2:ab:d4:5c:f4:4f:74:e1:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:52:76:38:71:A5:21:58:86:D0:9C:36:7F:7B:8B:5F:2C:E8:6D:4C
X509v3 Authority Key Identifier:
keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/AVJ2OHGlIViG0Jw2f3uLXyzobUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.0.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:e6:39:95:18:92:af:c5:4f:75:20:a7:cb:09:f6:58:1f:3f:
44:ee:81:ae:19:f4:58:dd:33:b1:d3:b6:18:8e:2b:37:0c:a5:
eb:cd:df:8c:8e:a2:a1:49:07:82:bf:20:b6:22:ae:bf:73:b3:
ed:54:e4:63:07:2f:41:ba:d7:1b:74:7d:3c:63:0c:fa:39:a9:
9b:11:0d:49:2e:7c:d5:e8:b2:bd:70:65:17:51:ed:cc:c5:0d:
82:e7:54:d1:ef:b7:ef:55:9d:75:78:e8:6e:47:1b:ee:3a:b1:
a1:7a:25:c8:d4:5d:5a:fb:29:f2:e3:97:a7:79:d1:32:3c:8a:
dd:94:18:6e:79:c8:ef:02:76:1d:4e:a7:f3:cf:c2:89:16:41:
57:6e:d5:12:a5:46:11:5a:43:98:42:84:07:c0:5f:08:b2:04:
19:fd:69:24:ce:4b:eb:45:a3:91:0b:c9:8d:78:ec:f9:64:06:
fe:ba:ef:e5:fa:61:ab:58:55:11:2b:5c:4e:84:df:57:4c:70:
4d:db:ef:ce:b6:f3:5b:33:72:fc:cc:5b:01:80:39:f7:1e:36:
df:19:f2:77:4a:52:b7:b9:43:f5:67:9c:cf:87:ea:48:7c:ae:
93:d7:b8:c3:d3:1a:a4:0a:a0:7b:38:50:bf:1e:36:d5:48:c9:
7e:99:13:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:20 2024 by rpki-client on console-fra.rpki-client.org