Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214451.roa
File: AS214451.roa (raw, json)
Hash identifier: Q8lmwAa3ugDLgyzqVF/JfYaD/LOhCzh0+I4P02Ywz6s=
Subject key identifier: 41:B6:B1:86:A7:75:C2:94:D7:7D:6F:F4:56:87:9E:59:3E:E8:C4:2E
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 7A5FBC83DE30C700729D071B305CBB6DBF89A343
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214451.roa
Signing time: Tue 22 Oct 2024 16:53:43 +0000
ROA not before: Tue 22 Oct 2024 16:48:43 +0000
ROA not after: Tue 21 Oct 2025 16:53:43 +0000
asID: 214451
IP address blocks: 2a09:54c6:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 24 Oct 2024 20:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:5f:bc:83:de:30:c7:00:72:9d:07:1b:30:5c:bb:6d:bf:89:a3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Oct 22 16:48:43 2024 GMT
Not After : Oct 21 16:53:43 2025 GMT
Subject: CN=41B6B186A775C294D77D6FF456879E593EE8C42E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:74:53:fa:4e:f3:b3:2f:98:6d:a4:ae:06:
84:78:d4:fd:e3:57:f6:08:59:41:81:79:51:79:d9:
80:fa:cd:8f:6c:c1:eb:4c:a4:68:f3:cd:91:a3:7f:
80:c8:52:98:15:e6:d4:a5:4a:94:76:42:85:df:51:
4c:df:98:dd:89:ba:cb:5b:ec:d7:98:6e:2b:3e:ba:
0c:cc:20:e1:26:17:dd:6e:28:66:f6:4d:69:5b:14:
e3:3a:b4:3a:8b:50:db:1e:15:e8:a8:47:76:5e:bd:
24:28:96:0b:ef:e8:48:37:04:d0:6b:44:16:24:3f:
db:f1:29:a0:dd:32:99:35:1b:9c:9b:a5:f6:94:39:
0a:19:0a:84:1f:ee:54:47:e7:c5:ed:d4:20:14:c4:
a6:71:22:10:65:7d:b8:c2:3b:09:7b:32:1f:23:11:
2a:c6:22:3a:89:54:e0:f7:21:a6:de:88:bf:5b:36:
70:6a:24:3c:db:30:fb:a1:5b:36:72:7f:c6:92:40:
f2:4b:1b:a0:49:e0:0a:c0:3f:1e:8b:3b:7b:11:7d:
20:d6:ae:2d:f6:53:28:17:6f:a0:0c:18:62:b1:82:
5e:af:bd:6c:62:a5:d1:d3:97:a2:a2:1d:19:78:3b:
b5:45:15:b6:8f:a8:dd:e7:c9:96:eb:25:04:f0:da:
f2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B6:B1:86:A7:75:C2:94:D7:7D:6F:F4:56:87:9E:59:3E:E8:C4:2E
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214451.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:8000::/36
Signature Algorithm: sha256WithRSAEncryption
83:49:30:8d:4b:1f:aa:1e:82:46:81:0a:ca:b9:37:ff:18:5b:
14:1a:c3:f7:dd:6d:bf:ce:6d:31:92:e2:65:b9:d4:d7:37:b4:
1e:fb:71:91:16:2a:e0:f7:5e:bf:03:a6:1d:6d:21:8b:ef:3b:
06:28:cb:55:03:18:11:43:1e:30:6d:01:88:f0:b0:d4:56:6f:
f3:82:dd:9c:3f:59:61:e4:38:1c:af:e8:14:1e:ff:51:71:e9:
3d:3e:da:6e:35:01:b5:e8:07:11:dc:0e:b1:c7:3f:34:52:89:
cc:27:19:a8:b9:3e:fc:d1:1f:58:82:de:fb:46:cc:43:5d:e4:
c9:0c:09:df:f8:f7:cb:64:71:eb:ca:4a:d6:cb:23:61:b2:cf:
f9:74:11:d0:5e:1f:90:e9:04:33:c1:32:81:41:a0:d0:9c:f9:
5e:be:e4:03:d0:17:cb:a6:0d:2d:b5:cb:5f:19:b6:24:91:7e:
64:99:fc:7a:48:9a:5f:64:94:e8:fa:12:4c:5f:6d:3e:ef:60:
d8:ab:2b:2a:fb:2f:1f:24:5a:92:80:69:ad:c8:49:f8:1d:a4:
a9:53:de:d4:3f:d9:55:2f:4f:2c:25:6a:1c:89:92:c1:67:dc:
40:58:a0:b3:18:b5:3f:4d:4f:b4:34:7d:3a:4b:7d:3c:64:34:
c1:4a:1a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 22:39:05 2024 by rpki-client on console-fra.rpki-client.org