Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/02bvEPfWBAMzVWrA5EZdsVQInrE.roa
File: 02bvEPfWBAMzVWrA5EZdsVQInrE.roa (raw, json)
Hash identifier: wzOuG5UKsaEj5am3dz8mbB8VYDF73mpo7htP3w3Aq6A=
Subject key identifier: D3:66:EF:10:F7:D6:04:03:33:55:6A:C0:E4:46:5D:B1:54:08:9E:B1
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018A2C0B682EB2B466D4F486A6A692EFB758
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/02bvEPfWBAMzVWrA5EZdsVQInrE.roa
Signing time: Fri 25 Aug 2023 09:34:19 +0000
ROA not before: Fri 25 Aug 2023 09:34:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211238
IP address blocks: 94.137.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:0b:68:2e:b2:b4:66:d4:f4:86:a6:a6:92:ef:b7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Aug 25 09:34:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d366ef10f7d6040333556ac0e4465db154089eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3a:12:3e:97:3d:2f:8e:ab:84:a3:ea:4d:66:
0c:dc:17:99:6d:29:33:ff:1b:1e:47:d6:ec:c0:7a:
33:bc:fe:60:6c:16:80:1d:a8:4b:f5:fc:88:22:0d:
46:f2:28:f8:df:3e:6d:7b:af:d4:a5:7a:01:db:ae:
65:b2:79:28:4b:44:f1:1e:0d:9b:07:34:8b:21:08:
b9:ff:02:b1:94:cc:e0:5e:ba:21:4e:f4:37:74:73:
09:54:7a:a4:12:10:1d:03:97:30:c8:dc:df:2b:d9:
02:92:7e:72:96:3b:64:d6:8c:46:77:9f:6b:b9:8b:
76:2a:c1:f5:da:bb:54:f6:c5:73:1f:4d:6a:c3:9d:
00:02:01:70:9b:3d:ec:e6:ee:45:a3:a7:75:d3:94:
90:16:df:e7:95:98:fa:18:e2:99:3e:ec:6f:78:08:
f2:88:d4:3f:8a:d7:e8:67:9c:ab:62:5e:90:1a:72:
71:97:96:26:da:17:65:40:1a:70:a2:97:58:ff:6e:
4a:3f:2f:3d:dd:28:2b:7f:b8:5f:7b:26:3e:0a:0c:
60:61:0c:81:76:ac:42:d7:9d:5e:23:95:67:ee:f8:
3f:c6:a2:24:c9:ff:97:b5:dd:69:ef:c8:53:62:d5:
fe:c8:c6:e3:a9:06:a5:25:40:98:b5:63:88:6b:aa:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:66:EF:10:F7:D6:04:03:33:55:6A:C0:E4:46:5D:B1:54:08:9E:B1
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/02bvEPfWBAMzVWrA5EZdsVQInrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a4:d1:ba:97:ee:c7:4c:8d:7e:2d:89:14:8d:2f:dc:4c:97:
55:1c:80:3e:8a:49:0c:4a:33:1d:db:a2:24:c8:88:bf:13:0d:
f1:91:61:d7:fa:dd:56:db:80:87:3c:b7:17:0c:01:6a:bd:c4:
00:e8:36:c0:c9:6b:64:f1:69:8e:ea:08:2a:ec:55:24:a9:1a:
2d:0b:26:bf:c8:3b:39:10:c3:30:c0:6a:1f:d7:00:77:27:c3:
80:f0:dd:33:ec:3e:5f:04:d2:68:93:11:de:02:cd:44:0a:d4:
83:52:c9:42:39:75:e9:61:ce:4f:c4:57:8b:d4:9e:f7:7b:a0:
d4:fd:7a:8b:46:61:eb:e9:c3:97:bd:ce:de:1d:ed:25:7f:a5:
f5:7b:53:e7:e9:d2:5c:af:83:00:43:b6:63:74:a2:19:c5:07:
43:5a:93:90:0f:c1:07:1e:9f:e2:58:f1:f3:63:bf:69:4a:42:
cb:20:2b:28:f5:d0:68:3f:f2:11:43:d7:6b:77:d7:1c:62:11:
10:f9:2e:22:3f:17:0b:c1:ce:8d:3e:b2:46:a1:4e:6f:a5:dc:
17:14:d4:98:68:20:06:9f:b0:2e:52:4e:5a:ce:7a:0d:11:63:
26:3d:b9:49:df:67:6b:da:15:c4:c6:53:b4:ee:ab:6b:5f:5a:
41:32:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 22:56:22 2023 by rpki-client on console-ams.rpki-client.org