Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/AsemODaYOaQDoc77VDD1w8jmbpA.roa
File: AsemODaYOaQDoc77VDD1w8jmbpA.roa (raw, json)
Hash identifier: zrEnbK3JRi6rgloLTijMwcBEaFuyyS5yC8xraRrM0gU=
Subject key identifier: 02:C7:A6:38:36:98:39:A4:03:A1:CE:FB:54:30:F5:C3:C8:E6:6E:90
Certificate issuer: /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial: 01883466E6F41E0885E0A17C330B6D8FF02C
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/AsemODaYOaQDoc77VDD1w8jmbpA.roa
Signing time: Fri 19 May 2023 14:25:38 +0000
ROA not before: Fri 19 May 2023 14:25:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31204
IP address blocks: 89.149.84.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:34:66:e6:f4:1e:08:85:e0:a1:7c:33:0b:6d:8f:f0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Validity
Not Before: May 19 14:25:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02c7a638369839a403a1cefb5430f5c3c8e66e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b7:e1:aa:6d:a5:97:8a:5a:e1:e2:24:f3:86:
94:1b:1b:95:cd:e0:73:b0:61:aa:88:e4:79:1a:96:
d4:9c:60:9c:2c:dc:92:eb:5c:51:63:9a:d6:7b:ee:
5f:c4:64:6f:c9:85:24:da:29:56:af:8c:92:55:b0:
65:d9:04:ee:f8:b0:d0:e7:00:dd:05:6b:78:6c:18:
5f:79:59:40:c2:0c:59:c9:6e:15:f4:51:f9:58:48:
2c:65:78:bb:ac:2d:5f:7f:aa:e8:be:b3:b8:ac:68:
b8:70:ec:87:29:02:ee:c2:03:2b:53:8a:94:98:20:
5f:6b:12:51:78:f0:50:6d:b4:d1:ba:94:9a:3e:d8:
88:32:50:be:be:34:7d:9f:ea:52:fd:a4:19:1d:c5:
de:0f:8c:30:8e:e6:ec:c4:6b:ad:91:93:21:9b:7b:
15:0d:5e:5e:c5:ed:34:28:fe:ab:2e:50:9d:90:ef:
97:81:a8:be:f1:dd:14:b5:1f:e9:62:82:e9:72:83:
9d:a5:a8:eb:c4:93:f3:8f:16:c9:75:c8:04:36:a9:
6d:d1:4a:9a:89:c3:e1:46:c9:79:61:75:52:39:f1:
94:ec:20:cd:ef:f8:b4:4e:fb:ff:3a:da:fc:29:4f:
f1:07:c3:53:2e:83:78:eb:cd:0e:5d:0c:af:71:dd:
b6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C7:A6:38:36:98:39:A4:03:A1:CE:FB:54:30:F5:C3:C8:E6:6E:90
X509v3 Authority Key Identifier:
keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/AsemODaYOaQDoc77VDD1w8jmbpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.149.84.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:af:80:61:31:43:e4:6f:fa:78:ed:8b:e2:4c:80:54:bc:58:
53:99:93:96:6d:61:9b:86:a5:f3:55:a4:40:a2:9e:e2:8a:f4:
b5:2e:40:66:54:ed:38:eb:1f:e3:39:0f:2a:8a:88:0e:d7:a7:
16:8f:2b:4a:70:cf:ff:85:2e:7f:52:52:81:c0:13:75:b3:b9:
f6:f3:c4:91:37:a4:40:12:d3:f0:ae:cd:ff:b7:c6:2a:8b:96:
fc:cd:d7:b4:57:c3:91:60:c8:2a:fd:93:d9:10:48:3b:53:8e:
39:96:d8:97:52:7a:97:de:3f:21:7a:33:63:53:65:83:0a:40:
81:d9:37:b8:e9:1e:de:9a:7f:45:15:47:97:87:f3:28:46:9e:
ac:fd:ef:02:0c:f7:99:34:06:0f:0f:ee:d9:64:87:a6:1e:42:
3e:32:9b:e3:cb:37:68:b0:ae:42:f8:a1:43:29:d2:db:ba:36:
6a:fc:df:3f:ae:58:7b:18:6f:a0:03:79:5a:a2:be:30:90:fe:
0f:74:a6:41:68:22:b7:cd:7a:5f:28:43:c2:69:19:5b:c4:43:
91:5c:0d:d7:d3:3c:7c:a2:dd:2c:c4:1d:b9:d4:11:2d:dc:8f:
3e:75:18:53:6d:d9:b4:87:9a:9e:14:94:26:10:11:af:04:bf:
d5:59:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:33 2024 by rpki-client on console-fra.rpki-client.org