Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214549.roa
File: AS214549.roa (raw, json)
Hash identifier: ifEmj3OpAUCmMwswNzNw2ZTh7XfElWoCcZeukmYWlks=
Subject key identifier: 95:B2:EB:24:1C:01:6A:2C:DE:5E:B4:95:4E:EF:75:D7:3A:6C:F8:C9
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 13EA2B08D0CC6A4CD3C738FA8B4BA36EE0BCB7F7
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214549.roa
Signing time: Thu 29 Aug 2024 03:41:18 +0000
ROA not before: Thu 29 Aug 2024 03:36:18 +0000
ROA not after: Thu 28 Aug 2025 03:41:18 +0000
asID: 214549
IP address blocks: 2a06:1281:a000::/36 maxlen: 48
Validation: Failed, certificate revoked on Wed 11 Sep 2024 12:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ea:2b:08:d0:cc:6a:4c:d3:c7:38:fa:8b:4b:a3:6e:e0:bc:b7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 29 03:36:18 2024 GMT
Not After : Aug 28 03:41:18 2025 GMT
Subject: CN=95B2EB241C016A2CDE5EB4954EEF75D73A6CF8C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f9:64:25:f0:3e:e0:65:1d:5d:bd:74:da:62:
46:0b:cb:53:6a:f2:8d:d2:62:e6:11:a2:1a:af:8a:
7d:ab:49:cf:7f:e4:43:4b:19:9d:cd:42:5b:90:c5:
33:1a:c7:74:f8:d0:d6:23:46:79:22:c9:0a:09:2c:
e3:b6:bb:9f:23:32:52:53:cc:7a:2d:a8:48:e7:0b:
24:9e:85:b3:30:d2:08:66:33:2d:ac:9a:bc:8c:02:
3b:90:21:f0:a2:64:7c:0a:f1:80:a4:a3:3f:b1:0d:
b5:92:ff:05:3f:71:5f:fa:7e:62:da:1e:cc:cc:cb:
dc:30:f6:c3:44:cd:4f:4d:c0:19:45:c1:fa:ec:ed:
b0:5d:01:57:7d:18:b5:99:0e:1c:f8:6e:be:4a:03:
25:70:86:f9:83:08:71:89:18:c1:d2:ea:c8:ce:3d:
b2:15:0a:0f:72:de:63:d0:cd:19:87:42:10:82:f1:
6e:da:83:7f:e1:66:05:cf:f9:33:55:2f:09:92:ca:
71:91:1b:00:2c:1c:6e:72:9d:ea:2a:fc:82:b0:d8:
9c:97:56:78:7a:a8:bc:b6:c5:e0:f0:5c:6f:a2:ae:
55:fc:29:a7:92:d0:4d:1d:95:be:c7:d2:6e:6f:8c:
e9:0d:e3:49:87:5c:69:0c:9c:f5:b3:ad:c5:1e:d9:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B2:EB:24:1C:01:6A:2C:DE:5E:B4:95:4E:EF:75:D7:3A:6C:F8:C9
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214549.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:a000::/36
Signature Algorithm: sha256WithRSAEncryption
24:fe:12:28:e2:6c:bc:4a:60:17:92:25:14:85:20:4d:3b:33:
39:35:a9:c8:f8:79:1e:94:d4:a3:53:6a:8b:c7:b9:ba:68:40:
ef:78:b8:76:1a:ae:b3:5e:f1:39:2c:72:26:43:ed:08:eb:26:
34:5d:fb:a0:2b:7a:72:f5:f9:30:f6:d5:3e:6a:1d:d3:7c:55:
a7:fb:a3:a0:8c:c8:f6:05:22:e6:5d:ad:4b:c0:a9:a3:3f:82:
3e:a2:af:d0:d5:a6:2d:00:68:d7:bb:42:b1:f9:fe:46:95:e7:
58:45:b7:4b:d1:82:b6:e6:56:d1:a9:6c:f6:c0:6c:13:8e:9c:
44:40:2a:4d:00:84:2d:0d:8d:da:73:9b:3f:fe:5d:78:68:81:
f4:99:60:35:73:66:9d:ee:cc:69:b1:04:af:52:35:41:c8:60:
c0:44:79:28:ad:46:5b:71:17:8d:76:da:de:aa:53:5c:03:dd:
fd:58:f5:60:c0:ab:16:f7:7c:74:ff:a9:7d:b0:55:b5:7d:cf:
5e:66:d7:7a:99:52:2c:35:5b:cd:4d:ed:71:a7:b4:77:b6:ff:
18:84:64:c5:8d:d6:be:aa:10:63:e7:02:7c:cd:d0:00:ec:39:
90:19:9a:46:92:ce:8b:f0:b7:9f:6d:ae:da:15:2a:1f:76:25:
9a:b2:40:c5
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 11 16:18:57 2024 by rpki-client on console-ams.rpki-client.org