Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS212128.roa
File: AS212128.roa (raw, json)
Hash identifier: xQ3raMPS7FTUWFyMz4TAcWBYT7QiOt+sIeeIXaU5Koc=
Subject key identifier: B7:0F:AB:07:6A:76:90:88:6C:6C:04:33:58:25:78:AB:B5:47:C1:47
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 0144E4F474D759A58284C5F07BBF7E6151CCFEB5
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS212128.roa
Signing time: Sun 13 Oct 2024 16:52:23 +0000
ROA not before: Sun 13 Oct 2024 16:47:23 +0000
ROA not after: Sun 12 Oct 2025 16:52:23 +0000
asID: 212128
IP address blocks: 2a09:54c6:a000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 31 Oct 2024 01:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:44:e4:f4:74:d7:59:a5:82:84:c5:f0:7b:bf:7e:61:51:cc:fe:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Oct 13 16:47:23 2024 GMT
Not After : Oct 12 16:52:23 2025 GMT
Subject: CN=B70FAB076A7690886C6C0433582578ABB547C147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:13:51:75:5a:08:c8:7a:15:bd:24:9a:d1:
54:cb:ac:cb:89:de:60:58:17:9d:85:c6:d4:74:ad:
f6:3c:6e:06:5a:6e:e7:51:05:26:6b:70:b5:2e:d1:
99:74:5f:de:78:ba:0c:3a:1d:5f:c7:a0:33:6b:3d:
53:95:4d:74:af:5e:de:4f:6b:c1:b0:3e:27:38:ed:
f0:ed:2c:cb:dc:cb:c6:4d:d2:62:13:1b:fe:64:8f:
30:c4:43:b8:91:4e:34:55:56:21:01:a7:d3:2e:dd:
eb:36:7a:f5:7a:b4:66:d7:ed:24:c6:f7:e3:76:8f:
d5:51:5b:87:af:eb:a2:da:10:e2:55:e8:07:e3:75:
5b:73:cf:e3:fd:60:53:69:99:de:12:88:cb:06:18:
d3:56:86:37:e3:d9:7c:e9:2c:87:4e:a6:f8:45:ac:
3a:c1:b0:74:8b:45:52:dc:0f:3b:38:74:28:a4:f7:
29:0b:0f:70:33:a8:19:7b:05:6a:ac:b1:bf:98:6c:
a1:54:07:37:1b:68:96:5b:b6:25:ef:27:60:9a:81:
a7:a7:91:77:d6:26:93:d7:10:eb:7c:f6:4e:d9:17:
b8:73:d2:a7:fe:5f:bb:d7:52:d2:82:31:49:b4:84:
ab:8c:74:5a:a6:40:b5:64:18:d0:ba:3f:f7:1b:10:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0F:AB:07:6A:76:90:88:6C:6C:04:33:58:25:78:AB:B5:47:C1:47
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS212128.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:a000::/36
Signature Algorithm: sha256WithRSAEncryption
5d:fb:6e:e2:78:73:3f:5c:28:e6:25:87:85:f1:43:d6:40:17:
7a:86:75:11:c5:db:be:09:12:ea:d0:e7:b1:8c:79:07:29:02:
75:39:64:12:99:54:30:93:1b:4f:7e:dd:5c:2f:2a:40:1e:ca:
19:96:88:ea:55:26:7b:d6:55:94:86:de:9d:e6:b8:31:a9:44:
c3:15:76:bb:6e:cb:36:8b:90:84:74:b3:93:10:68:40:60:e6:
7d:df:d2:88:ac:15:60:d3:d6:e5:2d:f7:fb:a4:d0:ae:fc:60:
f2:f2:00:68:82:2b:54:a7:63:8f:10:04:d2:2b:2a:c7:30:a8:
cb:9c:26:d4:86:90:4f:7b:99:c8:a6:9f:ce:d4:2f:48:40:29:
06:2d:e7:12:74:2e:20:04:3d:3d:d3:d4:d1:3c:b3:00:eb:42:
06:31:5b:c2:3f:99:40:84:b5:e3:58:ec:f8:9a:c1:37:1a:28:
3f:e1:5c:18:eb:0e:75:e4:4f:e5:ec:82:11:02:bd:3f:81:82:
db:b1:c3:11:7b:b5:2e:38:33:ab:a7:4d:72:26:02:90:a2:7c:
8a:a8:a5:ef:db:9c:56:3b:29:d6:b6:3c:61:8f:6d:97:07:30:
e3:e7:fc:5c:38:96:5b:53:6e:23:bc:4b:04:65:cf:a5:6f:e5:
1a:c5:f1:de
-----BEGIN CERTIFICATE-----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Generated at Thu Oct 31 05:07:20 2024 by rpki-client on console-ams.rpki-client.org