Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215362.roa
File: AS215362.roa (raw, json)
Hash identifier: CYe9Ka04hLvbogUClAQvdidjxfKPAGB4Ou2jLLXfLGA=
Subject key identifier: 22:AB:86:3E:67:33:C9:D1:BB:0C:83:71:26:AD:31:1C:84:1F:57:FC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0AA6FEE07A9B98211208D9A1D6EA2746DB6EB2E8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215362.roa
Signing time: Mon 22 Apr 2024 08:56:42 +0000
ROA not before: Mon 22 Apr 2024 08:51:42 +0000
ROA not after: Mon 21 Apr 2025 08:56:42 +0000
asID: 215362
IP address blocks: 146.103.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 10:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:a6:fe:e0:7a:9b:98:21:12:08:d9:a1:d6:ea:27:46:db:6e:b2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 22 08:51:42 2024 GMT
Not After : Apr 21 08:56:42 2025 GMT
Subject: CN=22AB863E6733C9D1BB0C837126AD311C841F57FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:95:0c:c2:93:52:d3:88:95:62:0c:9b:1c:
d9:0f:29:1f:4f:3a:3e:7a:2b:fb:ac:41:fb:44:db:
53:9e:e4:73:29:92:53:fd:3a:ba:28:5a:8b:bb:20:
d3:d1:eb:85:16:14:f5:14:55:f3:f4:7c:b6:d6:85:
a8:bc:39:e1:3d:63:1f:17:ed:82:0f:b4:8c:94:11:
06:1d:86:2a:40:c0:45:12:fa:f5:5f:d5:cd:e6:db:
8c:a7:39:04:75:9b:71:6c:83:88:f8:20:b5:c9:74:
12:a5:f6:09:2f:23:9f:23:10:8b:67:78:8c:0d:72:
15:a1:a6:c9:b6:45:1f:e0:50:d5:08:ec:50:2f:bc:
43:2a:d4:74:f8:62:d9:d0:7e:34:1d:60:49:6a:f4:
11:7a:44:83:3f:14:41:d7:1c:c0:87:4d:e0:87:6b:
f4:33:d0:4a:97:70:e4:aa:1b:43:bc:06:06:f8:74:
a3:13:bc:bf:64:b0:ad:f7:5f:74:80:16:91:15:e8:
7d:90:6d:bc:c9:34:cd:24:35:9e:ab:7e:fb:e2:92:
82:72:13:25:06:ff:db:7b:f3:8c:4e:b3:33:ee:cb:
04:0c:50:c4:b9:b9:59:9d:93:db:7d:91:b0:c9:52:
14:09:e0:b6:de:44:fa:20:b6:e2:cb:3e:05:59:88:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AB:86:3E:67:33:C9:D1:BB:0C:83:71:26:AD:31:1C:84:1F:57:FC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2f:5b:0d:55:45:69:56:80:d1:cc:de:5a:ad:38:6f:a0:55:
a7:57:63:17:f7:58:cb:f7:e6:68:6f:df:12:ef:9c:e7:85:3d:
56:d2:e0:7e:fe:04:5d:cf:de:10:44:c2:10:c4:14:a6:96:ee:
96:9e:13:9e:4e:00:e4:34:0c:3b:62:ac:3e:dd:4c:d7:f6:74:
18:95:fb:68:b2:d3:30:bc:9f:fe:0b:c0:c1:5d:9c:ff:09:e5:
14:01:06:a2:02:37:9a:e5:46:ea:95:cd:42:64:8d:cc:88:f1:
77:7c:4d:17:97:f7:34:f6:75:8f:06:c9:81:65:c1:db:fd:fb:
9d:69:3e:19:d9:d4:c6:51:4e:2a:2c:98:f5:51:90:5e:11:63:
ce:74:07:5f:03:1c:74:bd:ef:6c:4f:84:75:8c:40:0e:74:2b:
85:c5:cd:35:eb:d0:87:61:55:a7:4e:3d:c2:41:d0:89:4e:64:
0e:8c:17:91:e6:47:dc:33:ea:4f:37:02:fb:13:db:b5:ca:04:
44:25:58:2b:e2:26:67:0f:ec:07:7c:48:2b:cb:20:6a:57:e5:
c3:88:79:d3:fd:d1:03:81:c3:c3:87:b9:a3:d2:13:df:f4:4b:
84:60:cf:66:d5:d2:95:d9:31:d2:5e:89:60:45:96:ed:78:c6:
86:3a:85:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org