Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214128.roa
File: AS214128.roa (raw, json)
Hash identifier: 7olcV9SYcTHUHvPG0EiWX0Or6KBNI34VnqwME2pIl3g=
Subject key identifier: 28:35:7A:B8:B6:97:B2:CD:C9:6A:25:C3:4A:CC:69:12:9E:DC:6A:8D
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 57F9091D8F3F1FC77564420F475F997341A124E7
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214128.roa
Signing time: Fri 04 Oct 2024 15:28:58 +0000
ROA not before: Fri 04 Oct 2024 15:23:58 +0000
ROA not after: Fri 03 Oct 2025 15:28:58 +0000
asID: 214128
IP address blocks: 2a0a:6044:6300::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 04 Oct 2024 20:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f9:09:1d:8f:3f:1f:c7:75:64:42:0f:47:5f:99:73:41:a1:24:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Oct 4 15:23:58 2024 GMT
Not After : Oct 3 15:28:58 2025 GMT
Subject: CN=28357AB8B697B2CDC96A25C34ACC69129EDC6A8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:cc:af:7d:ba:51:79:db:c0:3a:ca:0e:d8:
e7:b8:4b:fb:0e:59:7c:8a:31:0d:89:7e:ae:2c:f0:
0d:35:97:43:10:9e:f7:cf:ed:8c:0f:9b:be:73:71:
67:ee:ed:9b:ba:34:16:13:51:34:c4:79:83:9a:1a:
d3:a7:43:e1:4d:c8:dd:32:26:52:bf:cd:bf:f5:01:
ce:13:57:8a:51:80:7c:b1:37:a3:ec:eb:29:4f:a4:
d5:2b:e5:2f:57:38:43:f3:2d:28:9b:61:5a:e6:e7:
1b:39:62:44:dd:42:6d:06:9f:3e:93:f7:20:45:15:
da:f8:6a:b2:c9:47:c7:42:ed:e2:9c:e4:89:e4:5b:
e0:f6:65:5d:6c:06:59:89:4e:20:74:e0:7b:14:9a:
19:52:e4:ce:7a:96:1f:4c:55:ff:fe:55:68:b9:e2:
06:fe:22:9c:19:be:cf:a0:be:e8:4b:c8:43:46:48:
2d:10:63:97:63:51:27:1d:c1:ae:4d:4c:af:c1:00:
c8:f9:91:80:1b:de:5b:be:d3:8d:ea:9e:9c:fa:92:
f6:36:ed:e8:84:2a:49:b3:51:a5:78:1d:ce:8c:e3:
c2:0b:66:24:bc:c9:cd:a2:66:e7:2b:21:92:f0:08:
e2:d5:48:1f:82:9b:0e:a1:c8:fc:d5:95:08:f4:62:
3e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:35:7A:B8:B6:97:B2:CD:C9:6A:25:C3:4A:CC:69:12:9E:DC:6A:8D
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214128.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6300::/40
Signature Algorithm: sha256WithRSAEncryption
a8:8c:21:74:3e:6c:1f:48:1b:c0:9e:13:0f:b1:20:01:e0:19:
f7:75:87:78:78:df:27:09:d0:8a:05:b3:ab:db:0c:31:8d:c0:
1d:be:b1:93:60:0b:08:63:96:80:a6:f8:3f:5b:9b:41:b9:dc:
c6:89:51:5b:0b:68:9d:db:db:6b:0b:c8:0e:48:e9:4e:c0:63:
1c:86:5b:0c:b3:1b:38:8c:42:3e:f8:0a:1e:40:e5:da:9a:22:
af:62:b9:7f:0b:0c:97:17:bc:a8:f3:11:a9:e3:17:c9:8c:4f:
ca:f2:f3:00:fa:e2:49:c9:59:d3:79:94:81:f1:2a:73:fd:55:
5f:d8:64:c5:7d:26:67:4b:f8:1c:b8:38:6e:b7:10:96:fa:f8:
a8:1c:14:4a:c2:b8:7e:f7:1b:00:27:e2:66:74:ef:41:c2:8f:
4a:3a:a1:45:7a:e8:11:ff:f9:43:15:08:38:b5:6f:ea:79:4c:
69:6f:ad:28:d2:09:bc:1f:e3:17:12:81:a5:f9:87:af:ea:b4:
72:58:81:b8:31:10:dc:02:95:83:a1:5e:25:cc:38:a3:49:45:
f6:15:22:e1:5a:8e:29:9b:3d:14:07:a9:ec:79:e4:48:2b:97:
c9:59:bd:8c:20:8e:f9:d6:fc:d6:e2:96:d5:9b:66:66:5b:46:
38:0e:dc:14
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV/kJHY8/H8d1ZEIPR1+Zc0GhJOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDEwMDQxNTIzNThaFw0yNTEwMDMxNTI4NThaMDMxMTAvBgNV
BAMTKDI4MzU3QUI4QjY5N0IyQ0RDOTZBMjVDMzRBQ0M2OTEyOUVEQzZBOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8A8yvfbpRedvAOsoO2Oe4S/sO
WXyKMQ2Jfq4s8A01l0MQnvfP7YwPm75zcWfu7Zu6NBYTUTTEeYOaGtOnQ+FNyN0y
JlK/zb/1Ac4TV4pRgHyxN6Ps6ylPpNUr5S9XOEPzLSibYVrm5xs5YkTdQm0Gnz6T
9yBFFdr4arLJR8dC7eKc5InkW+D2ZV1sBlmJTiB04HsUmhlS5M56lh9MVf/+VWi5
4gb+IpwZvs+gvuhLyENGSC0QY5djUScdwa5NTK/BAMj5kYAb3lu+043qnpz6kvY2
7eiEKkmzUaV4Hc6M48ILZiS8yc2iZucrIZLwCOLVSB+Cmw6hyPzVlQj0Yj61AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKDV6uLaXss3JaiXDSsxpEp7cao0wHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt
NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE0MTI4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpg
RGMwDQYJKoZIhvcNAQELBQADggEBAKiMIXQ+bB9IG8CeEw+xIAHgGfd1h3h43ycJ
0IoFs6vbDDGNwB2+sZNgCwhjloCm+D9bm0G53MaJUVsLaJ3b22sLyA5I6U7AYxyG
WwyzGziMQj74Ch5A5dqaIq9iuX8LDJcXvKjzEanjF8mMT8ry8wD64knJWdN5lIHx
KnP9VV/YZMV9JmdL+By4OG63EJb6+KgcFErCuH73GwAn4mZ070HCj0o6oUV66BH/
+UMVCDi1b+p5TGlvrSjSCbwf4xcSgaX5h6/qtHJYgbgxENwClYOhXiXMOKNJRfYV
IuFajimbPRQHqex55Egrl8lZvYwgjvnW/NbiltWbZmZbRjgO3BQ=
-----END CERTIFICATE-----
Generated at Fri Oct 4 22:38:45 2024 by rpki-client on console-ams.rpki-client.org