Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214344.roa
File: AS214344.roa (raw, json)
Hash identifier: vzJVhlGd2/YyzykqG6JI+pPamPQugNI8qg8h3xAP2A8=
Subject key identifier: 07:91:AC:F6:B8:61:C4:BF:F2:C0:19:45:73:01:67:20:CD:B1:D2:52
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 61CB1D2DC2A36775BFAA74CA38CD01FC20598C1A
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214344.roa
Signing time: Thu 29 Aug 2024 03:41:16 +0000
ROA not before: Thu 29 Aug 2024 03:36:16 +0000
ROA not after: Thu 28 Aug 2025 03:41:16 +0000
asID: 214344
IP address blocks: 2a0a:6044:7a00::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 19 Sep 2024 11:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:cb:1d:2d:c2:a3:67:75:bf:aa:74:ca:38:cd:01:fc:20:59:8c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 29 03:36:16 2024 GMT
Not After : Aug 28 03:41:16 2025 GMT
Subject: CN=0791ACF6B861C4BFF2C0194573016720CDB1D252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:12:bd:98:30:46:02:1c:0e:4f:0b:6e:62:
37:ce:d7:33:88:ed:33:be:b1:15:2c:a0:df:2d:c0:
2a:9a:f7:e8:25:c9:23:18:04:ed:b6:13:0b:e8:cd:
33:57:c1:fa:c0:56:5d:9b:57:6f:72:2e:00:3c:d7:
45:de:0f:95:52:70:fd:29:2d:fd:be:0b:f7:52:b5:
6c:95:f7:9e:09:d2:1f:20:63:db:53:28:30:91:62:
19:03:33:86:98:ba:04:45:17:1f:63:d0:f2:26:24:
36:a3:44:97:6f:e5:c4:20:4a:85:cb:e9:d3:07:ca:
9c:5d:f9:06:ef:1c:d0:88:44:64:d3:61:71:24:05:
6a:4a:4a:09:d0:1f:04:83:45:1f:58:a2:97:3a:af:
72:c4:55:35:62:d5:ae:ce:52:b5:ce:9b:5d:3b:53:
b4:ab:1e:e9:93:e0:81:04:c6:cd:82:14:9c:38:2d:
74:e4:79:51:39:84:e3:ae:de:b4:4d:e4:10:20:aa:
9d:9b:2f:7b:07:9c:4d:95:88:05:b2:ce:0d:58:8e:
38:3e:64:d7:62:23:f4:5a:8c:6f:b3:f3:9e:0e:b7:
3a:04:59:67:9c:ae:a6:14:18:21:d1:ff:d6:d3:d9:
e9:e8:95:8a:15:fb:60:ce:cd:97:ca:fe:78:f6:27:
7e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:91:AC:F6:B8:61:C4:BF:F2:C0:19:45:73:01:67:20:CD:B1:D2:52
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214344.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7a00::/40
Signature Algorithm: sha256WithRSAEncryption
b1:36:14:85:40:b8:80:4f:ce:42:bc:2b:76:31:1b:7b:0f:40:
a1:43:a3:53:b8:ff:c0:33:9e:f7:3b:8a:42:d4:a5:e5:2a:e7:
06:57:3b:82:55:be:4e:d3:50:5e:57:c2:01:8c:f7:4a:f2:24:
46:3b:db:55:2e:d3:32:a6:96:34:39:69:c9:34:75:76:4c:d6:
da:fb:a8:5a:d4:64:a7:27:c0:4e:10:61:9f:bb:02:fd:53:bb:
1c:e4:93:bf:20:05:e6:23:ca:a2:a3:40:5f:37:fe:75:68:5a:
3a:81:5c:af:89:ef:fa:0e:a4:2a:d4:46:9d:dd:e8:a7:06:71:
fe:88:bd:ed:3d:27:d3:98:ad:ea:b6:21:74:1f:d8:21:a4:c4:
9d:05:fb:28:0c:60:27:bc:4e:b8:b5:ee:b5:ee:ef:31:58:f7:
c5:fb:78:0c:bd:b0:18:1f:3b:1a:67:4b:d6:e5:ac:0d:e5:ab:
f8:98:9f:b9:34:b9:6d:35:5e:83:b5:68:dd:aa:0c:97:b6:9f:
3f:02:31:6e:30:92:f9:2a:e0:ef:75:09:57:da:9e:e8:b4:5b:
e8:70:47:3d:f6:37:11:be:c3:c7:29:f2:ab:7e:4b:1b:0e:9e:
40:06:39:34:ba:b9:20:12:16:13:f6:62:18:e3:4d:19:ac:eb:
2d:98:3a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 17:01:53 2024 by rpki-client on console-ams.rpki-client.org