Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210164.roa
File: AS210164.roa (raw, json)
Hash identifier: pr28Oo2R+yQA0t7po7fU/NNBoMoZYewgI9cuH5EbImk=
Subject key identifier: 2A:A1:6C:7B:8E:CA:39:75:98:64:C7:03:11:54:0D:B6:28:3C:A1:2F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 65B82B92D36249717A4F50FEC1C87D4BB970D4FD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210164.roa
Signing time: Wed 01 May 2024 00:00:39 +0000
ROA not before: Tue 30 Apr 2024 23:55:39 +0000
ROA not after: Wed 30 Apr 2025 00:00:39 +0000
asID: 210164
IP address blocks: 140.233.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 May 2024 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b8:2b:92:d3:62:49:71:7a:4f:50:fe:c1:c8:7d:4b:b9:70:d4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 30 23:55:39 2024 GMT
Not After : Apr 30 00:00:39 2025 GMT
Subject: CN=2AA16C7B8ECA39759864C70311540DB6283CA12F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:48:7c:80:50:87:f2:96:3d:91:03:c4:9d:
92:cd:12:e3:49:ad:38:6e:74:4a:5d:ed:c5:9c:3d:
8c:ec:9d:99:4d:8b:8d:0e:0a:b6:bd:4a:d0:ff:89:
10:f1:67:3e:02:0f:58:03:e8:f2:4f:3e:59:31:0f:
45:f3:b0:19:a2:a0:84:19:76:25:8d:e5:a9:24:62:
60:7c:91:34:8c:08:89:91:07:56:00:76:28:f9:7d:
ea:9c:0a:d6:8f:5e:e5:26:cb:59:e9:41:22:02:6f:
25:ee:15:34:3d:95:0f:12:00:3f:64:38:b6:d7:9a:
8b:6f:2a:c6:0b:95:a5:1b:0e:1e:11:88:20:e7:70:
05:6f:5b:0b:14:b2:66:b1:c6:6a:24:13:7e:03:7f:
3e:b3:8d:c7:a8:73:c4:d5:78:1a:9c:e6:f9:4c:a0:
d5:cc:c5:8f:a4:98:a1:43:d0:07:6f:36:91:4b:76:
d5:76:14:40:a8:3d:60:c3:78:1b:e5:4e:68:50:22:
4f:59:f3:7b:df:f9:5a:f4:b8:3a:0e:86:32:46:0f:
2c:3f:fa:a1:78:e8:87:77:88:72:db:07:f2:9f:b2:
32:69:a0:ef:aa:39:85:55:be:ae:da:60:b2:58:d7:
e8:78:7f:04:85:e6:27:3c:5a:3c:1b:64:22:2c:bd:
3b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A1:6C:7B:8E:CA:39:75:98:64:C7:03:11:54:0D:B6:28:3C:A1:2F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210164.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.190.0/24
Signature Algorithm: sha256WithRSAEncryption
29:44:bf:e4:95:b4:ac:96:f1:9a:81:05:8a:19:96:f0:90:57:
d1:69:49:20:e0:00:ca:33:13:cb:22:de:22:0f:95:f4:29:3d:
42:e6:b8:bc:98:4e:ee:30:4c:fc:b3:9e:4e:8b:2a:a7:c2:a7:
5a:ab:00:a1:2d:07:67:6a:ac:b5:d8:c0:ee:b4:06:1f:ce:10:
71:49:e3:f7:b0:4f:00:ba:0e:5b:eb:66:e8:23:83:03:b1:1b:
d3:fc:fb:76:0c:22:e6:b1:7c:d7:df:fa:db:53:4b:70:6c:a3:
85:ab:74:ca:d0:89:88:62:a1:94:c8:45:1b:16:49:cc:93:cb:
91:2f:1a:fd:4f:19:2c:b1:d5:6f:f8:0a:70:10:34:4c:e0:46:
38:76:62:05:ff:aa:0c:d3:8d:43:79:51:10:f4:2c:d1:71:6e:
e7:b2:99:a1:a9:40:f5:69:4d:2a:0c:d7:d5:2c:9c:b8:75:19:
2e:32:d8:ae:cf:93:53:1b:ac:f4:c3:e2:ea:ce:6d:e8:d2:cd:
c5:b3:00:1a:b4:70:83:33:a7:29:ee:4f:77:0c:7d:fd:ed:7c:
55:a5:7d:08:e7:5b:7c:16:ce:9d:19:d9:3f:93:48:f0:ae:5f:
00:5d:06:2b:a9:5b:c9:fe:3a:ed:bf:63:dd:63:c1:29:b7:d7:
d6:79:ca:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:52:10 2024 by rpki-client on console-ams.rpki-client.org