Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/AK89k1_loL-hWDSOPf6M5QNlxs0.roa
File: AK89k1_loL-hWDSOPf6M5QNlxs0.roa (raw, json)
Hash identifier: BqLHpfWr27ZOqg9/xuHFtnv/894hwBrhYZdq6NtAHjw=
Subject key identifier: 00:AF:3D:93:5F:E5:A0:BF:A1:58:34:8E:3D:FE:8C:E5:03:65:C6:CD
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CD812EDA01CD2AE61B104F5501BE3225E
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/AK89k1_loL-hWDSOPf6M5QNlxs0.roa
Signing time: Fri 05 Jan 2024 05:22:48 +0000
ROA not before: Fri 05 Jan 2024 05:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 89.23.112.0/24 maxlen: 24
89.23.115.0/24 maxlen: 24
89.23.116.0/24 maxlen: 24
89.23.118.0/24 maxlen: 24
89.23.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 06:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d8:12:ed:a0:1c:d2:ae:61:b1:04:f5:50:1b:e3:22:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 5 05:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00af3d935fe5a0bfa158348e3dfe8ce50365c6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:db:bc:cb:90:88:91:22:cf:bd:8f:89:56:88:
42:68:e7:0c:c3:98:a5:a0:29:f5:ef:b6:55:ed:55:
05:0e:31:13:17:68:40:bd:b9:67:31:53:67:9c:06:
30:d0:b6:fb:6e:28:b0:1d:f7:6b:88:f1:f4:b0:e2:
86:c5:d5:f1:68:77:4e:c0:20:de:67:be:21:8f:95:
d0:98:17:47:7f:b8:b4:e6:42:31:80:43:c1:05:f2:
23:71:b7:d3:d9:6d:fe:c0:db:29:35:38:7e:07:e7:
a9:dd:07:56:3c:e8:35:06:37:c6:02:45:69:b3:5c:
d5:08:94:5e:ef:91:bf:29:a6:1c:ec:9c:c9:1a:41:
be:b8:a6:88:32:49:68:31:1a:b8:85:d5:c2:8c:67:
7a:7f:34:49:cb:30:7a:45:ab:c4:9e:f5:d3:6b:bf:
30:19:6d:95:cb:60:f8:cf:30:a7:d6:ed:f9:d3:79:
15:cc:c1:18:e3:1f:c5:53:c8:9f:cc:a1:ca:c2:2c:
92:8a:0b:69:af:fc:b2:76:0b:91:60:ca:7c:a1:35:
cf:e6:45:d5:f8:4a:00:79:cc:86:16:09:de:9d:46:
a9:08:86:9b:03:0a:b7:d5:95:90:dc:ed:3f:11:6e:
e3:15:f1:ac:95:87:29:a2:cc:e0:3c:a6:c0:ff:47:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AF:3D:93:5F:E5:A0:BF:A1:58:34:8E:3D:FE:8C:E5:03:65:C6:CD
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/AK89k1_loL-hWDSOPf6M5QNlxs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.112.0/24
89.23.115.0-89.23.116.255
89.23.118.0/23
Signature Algorithm: sha256WithRSAEncryption
41:47:28:85:2a:a3:b4:b9:0f:dc:9f:0c:ba:d3:c6:53:10:4d:
46:1b:c4:b1:93:26:51:a0:82:f0:9d:6f:a1:30:2f:36:18:f2:
0f:a8:b6:4d:7c:8f:63:51:41:81:45:b2:35:05:dc:a0:c0:84:
55:d4:f1:31:98:88:fb:9b:bb:77:d1:68:42:25:0c:ff:38:af:
35:1b:de:49:6b:00:63:a5:28:34:36:78:cd:37:a1:d3:75:dd:
46:d6:7d:1a:67:2b:43:a2:30:68:a3:22:99:f6:10:9d:0e:79:
36:d6:2f:b9:81:16:83:f4:5c:f2:df:eb:92:0e:53:85:75:6c:
1a:b6:86:58:6f:a1:6d:05:36:80:01:92:95:25:ab:fc:dd:4e:
f3:e6:2c:a8:12:62:7a:3f:58:c0:5a:1b:6e:fd:0d:63:aa:2b:
ff:34:63:c7:37:77:c9:c4:0a:64:ed:d5:38:ae:19:d9:02:fc:
02:ec:a6:e4:6d:80:39:f6:83:e0:09:1a:51:87:64:ac:4e:68:
4d:f0:d7:f6:84:ce:5c:16:f4:08:67:67:32:40:e8:95:b6:74:
64:3e:90:bf:e1:11:a7:81:29:21:51:22:9c:d6:f7:f5:a8:5d:
23:28:7d:2c:93:d1:1c:65:31:a5:cb:3e:39:d7:a5:ce:ef:85:
0d:db:1e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:33 2024 by rpki-client on console-ams.rpki-client.org