Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203893.roa
File: AS203893.roa (raw, json)
Hash identifier: ryZlA4T+3o7ypnt+bR9nUP1dYRZUxbliSwM/ugrCQ1E=
Subject key identifier: 62:CF:AE:E9:24:6F:BD:6A:DB:DE:D6:75:28:08:39:9E:62:9E:CF:EA
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 30478E2D703F1EB288EB553E2CD5E3071AD8BDBE
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203893.roa
Signing time: Thu 29 Dec 2022 12:26:21 +0000
ROA not before: Thu 29 Dec 2022 12:21:21 +0000
ROA not after: Thu 28 Dec 2023 12:26:21 +0000
asID: 203893
IP address blocks: 147.78.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:47:8e:2d:70:3f:1e:b2:88:eb:55:3e:2c:d5:e3:07:1a:d8:bd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 29 12:21:21 2022 GMT
Not After : Dec 28 12:26:21 2023 GMT
Subject: CN=62CFAEE9246FBD6ADBDED6752808399E629ECFEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:e1:3f:0f:1e:4e:9b:cc:b3:63:92:fe:31:
dc:55:87:70:19:67:50:ce:61:cd:c6:f2:ea:f3:c9:
b2:fe:f6:c4:9f:b5:92:82:6c:d0:11:b4:8f:9d:06:
7c:3a:0a:1d:ad:55:c6:7b:c1:ff:ab:ad:6e:42:bd:
dc:45:99:8a:4a:d7:15:7c:a9:81:a8:aa:89:67:43:
dc:c7:d2:9c:66:75:3b:ac:16:a0:1e:97:71:78:59:
77:65:62:97:11:0e:75:12:c6:3e:19:bc:fc:7f:49:
11:fd:df:e8:1f:6e:a9:9e:d0:e5:b0:6b:2d:40:93:
ee:18:39:42:6b:6b:24:f4:e7:74:f1:00:d4:8b:dd:
4d:ed:c5:64:94:d1:32:00:b3:06:3a:b2:48:0a:a8:
7c:92:aa:44:ef:87:d5:35:47:c4:f9:a3:8a:b7:98:
94:ee:8a:02:ed:45:3b:d0:cd:fe:a0:ef:ea:9a:d2:
36:e0:c3:ae:e4:cd:e6:e1:ec:bf:94:bf:cd:46:7a:
cd:e6:89:13:f5:5a:36:f3:63:93:c3:81:b2:ca:65:
05:31:16:8b:14:6d:3d:09:35:16:29:c0:32:52:bd:
9b:9f:38:63:9d:e2:db:1d:4e:91:bc:b1:4b:90:50:
16:79:b5:ef:03:1b:b3:75:07:19:80:38:f5:83:1f:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CF:AE:E9:24:6F:BD:6A:DB:DE:D6:75:28:08:39:9E:62:9E:CF:EA
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203893.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.122.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:6a:ea:ad:cf:58:e6:83:8f:b4:a2:29:1b:41:d7:09:61:c6:
7c:41:36:1e:38:57:cf:64:d5:cc:31:41:67:21:50:25:1d:95:
8f:17:a8:9c:78:51:ae:63:1a:97:91:c4:fa:9a:3c:70:63:f7:
f7:cb:42:fd:3a:57:c2:e3:d0:8c:49:0f:62:bd:60:0a:df:47:
6e:0e:aa:9d:6a:cf:b7:46:93:46:a1:c9:1c:37:8d:1a:81:38:
3c:84:5e:c6:5b:16:72:e0:d6:51:ac:8b:7e:b5:0f:d8:e0:36:
50:1d:ca:de:e7:bc:df:e1:57:ac:d9:7e:44:28:a1:ce:84:5f:
c9:0d:0e:c1:0e:79:4e:ab:b9:7f:a1:f3:d6:f4:21:10:56:89:
53:b8:7e:d3:7f:63:dd:54:7f:9c:04:1e:d0:6b:b6:28:23:23:
9d:c2:8a:36:a3:fc:64:f4:ab:5e:ac:e1:8b:15:41:cf:90:1e:
76:d2:74:4b:5e:2c:9e:a1:3d:95:53:d1:f3:ef:59:89:e7:bd:
4e:c0:c6:44:1c:33:09:d9:65:31:a5:f0:dc:72:82:4e:fb:67:
4e:71:a3:9d:bc:d4:03:cd:c1:ef:79:f8:5d:72:13:ff:9f:98:
e0:f6:cd:33:37:43:d4:2c:47:dc:ce:9d:cf:25:5f:0c:49:91:
6a:39:a7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org