Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS24.roa
File: AS24.roa (raw, json)
Hash identifier: qNNSucZRK+kLtWzxlKGSRGaxllo2gAf/oPnqFY4AAaw=
Subject key identifier: 4F:24:A0:85:FD:C4:F6:BB:5C:EB:09:24:FA:FC:8E:E8:9F:D8:C3:A1
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 7AF8E90BA5ACCA1D176847060004EFE1BCE0E041
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS24.roa
Signing time: Fri 14 Jul 2023 22:24:37 +0000
ROA not before: Fri 14 Jul 2023 22:19:37 +0000
ROA not after: Fri 12 Jul 2024 22:24:37 +0000
asID: 24
IP address blocks: 192.166.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f8:e9:0b:a5:ac:ca:1d:17:68:47:06:00:04:ef:e1:bc:e0:e0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 14 22:19:37 2023 GMT
Not After : Jul 12 22:24:37 2024 GMT
Subject: CN=4F24A085FDC4F6BB5CEB0924FAFC8EE89FD8C3A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:17:88:bf:08:35:85:94:02:e6:12:e1:93:
59:7f:c3:f0:66:c5:2a:a1:ae:67:39:f5:b4:bd:c1:
d2:cb:8a:5a:c9:72:7f:11:ed:b2:2b:66:f1:cc:40:
cc:02:48:48:74:b1:f6:50:fe:ec:e8:20:58:39:bd:
91:eb:b2:ed:36:d5:b7:8a:f2:24:a3:0c:f9:94:8c:
15:6a:37:78:df:e7:1c:da:54:5c:3d:51:3b:08:fa:
34:e1:e3:04:fa:20:06:21:89:a9:b2:c7:33:eb:b3:
64:33:b8:de:05:2e:51:9e:3d:95:4f:f4:af:95:05:
4a:23:9b:9a:4b:9f:11:46:6a:5a:dc:a6:9d:1a:b9:
0e:34:9e:41:db:a5:28:da:7d:96:68:db:74:d7:44:
3d:41:a9:f1:ed:f7:3e:73:fb:73:19:fc:e1:a0:c4:
fd:6c:80:e2:56:cc:15:6a:ac:92:0f:97:11:ea:5a:
11:b4:22:7d:cb:ad:a3:6a:ef:81:8e:f2:62:7b:4c:
b3:fa:d2:c3:0d:e7:0d:24:11:a5:c1:f2:f5:18:91:
02:3c:88:40:30:00:e6:f6:64:fd:74:b1:08:ff:b7:
4a:26:b3:bf:d7:db:71:6b:33:af:8b:24:62:dc:d3:
18:3d:3a:52:16:12:ad:db:1a:51:94:1f:da:08:e1:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:24:A0:85:FD:C4:F6:BB:5C:EB:09:24:FA:FC:8E:E8:9F:D8:C3:A1
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS24.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.82.0/24
Signature Algorithm: sha256WithRSAEncryption
41:63:1b:ed:4c:ca:38:b4:09:ad:89:91:2a:04:b8:0e:af:87:
f8:51:da:50:f7:9d:20:33:88:14:53:7f:f7:74:f2:d2:1b:9b:
44:73:f9:82:e1:d8:0d:03:d2:d8:23:c9:20:0a:13:0d:a1:7a:
72:32:c9:1a:e0:af:58:84:21:60:ce:03:ba:db:f0:a2:03:18:
b1:2c:0f:3d:f2:82:d8:8c:fa:c8:10:76:2e:17:72:59:b0:ce:
f7:03:66:b6:e0:11:84:e7:b8:d1:5f:5a:af:23:f7:4a:54:08:
45:20:37:23:6c:9a:16:a2:61:32:66:3d:de:6a:59:37:0b:8a:
52:8a:a8:a7:4e:53:0b:be:54:7f:39:b7:92:bb:7c:1f:24:41:
66:8a:23:f6:86:94:49:e4:8f:b7:69:10:ad:5e:5e:d5:0e:f8:
bf:3d:6d:da:a7:fe:12:22:0c:94:13:ba:ca:8f:7e:ed:a7:d2:
8c:22:2d:b5:4a:da:2e:e6:3c:a8:51:a6:a7:7f:f2:d3:79:28:
a6:07:14:20:12:c2:75:54:c3:c0:30:23:1c:a1:fd:ec:50:c3:
2e:3b:5a:40:0e:cb:2f:0c:a2:66:2a:c5:33:e4:52:05:83:97:
db:68:e6:3c:9a:b2:c6:f8:19:52:90:96:14:1e:81:16:63:af:
d1:7f:e0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 11:39:34 2023 by rpki-client on console-fra.rpki-client.org