Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS1299.roa
File: AS1299.roa (raw, json)
Hash identifier: eyyfHK2l1CVJuEh50/I0nZfQk+7Kj95yXfGo8gW2ot4=
Subject key identifier: B2:3A:C3:AE:83:58:11:9C:15:05:2F:AA:F0:7E:E0:98:BE:82:3B:7E
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 529787C96486DFE01E2399077EDC8193C0EA273E
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS1299.roa
Signing time: Thu 29 Dec 2022 12:26:19 +0000
ROA not before: Thu 29 Dec 2022 12:21:19 +0000
ROA not after: Thu 28 Dec 2023 12:26:19 +0000
asID: 1299
IP address blocks: 193.111.116.0/24 maxlen: 24
193.142.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:97:87:c9:64:86:df:e0:1e:23:99:07:7e:dc:81:93:c0:ea:27:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 29 12:21:19 2022 GMT
Not After : Dec 28 12:26:19 2023 GMT
Subject: CN=B23AC3AE8358119C15052FAAF07EE098BE823B7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9f:69:a8:8e:5e:2d:d1:b8:7b:d6:51:76:eb:
5c:6e:ef:62:35:0c:a4:20:d8:d0:88:0e:97:f7:83:
af:2f:2d:b5:58:8f:52:f4:2f:0d:92:27:a1:51:00:
db:86:a0:f6:4b:9f:0e:aa:8a:73:83:24:f6:56:80:
cf:69:1d:ea:ea:6b:9d:31:ab:11:41:bc:cf:0b:cb:
4e:a9:44:b5:c0:b1:75:85:0e:0e:37:bc:2b:40:e8:
51:d7:00:50:26:20:f5:94:2b:f7:fb:c6:27:21:05:
67:d2:78:f2:47:13:f1:51:32:0e:44:31:86:c1:ec:
41:6b:2d:f2:8e:92:9d:72:cf:3a:52:d1:2c:5d:0b:
fa:9e:49:c6:b9:20:6e:82:ac:70:62:0e:0b:41:d3:
07:58:ea:45:b9:25:72:b5:77:fc:2e:fe:f8:58:c4:
cb:46:20:25:5e:50:60:65:8f:42:18:af:e4:ac:ee:
65:0e:69:ca:fc:9f:91:1c:aa:2c:4b:90:2b:44:a8:
e1:0f:51:67:48:60:21:3a:a7:0c:47:c2:e1:f1:8a:
9c:4f:4b:5d:6f:6a:30:0e:7a:14:8c:c0:c0:af:63:
48:16:3b:58:61:a1:db:13:88:67:45:6a:5b:ad:51:
20:f6:6b:15:b6:4e:19:83:92:e2:48:74:b7:5c:63:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3A:C3:AE:83:58:11:9C:15:05:2F:AA:F0:7E:E0:98:BE:82:3B:7E
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS1299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.116.0/24
193.142.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:8b:8a:77:73:ff:3a:42:90:75:75:34:54:d5:e1:f4:ca:c7:
34:e5:e5:4e:2f:80:66:09:53:59:08:d0:12:b6:36:19:33:aa:
18:8d:df:87:d1:97:9c:81:fc:ac:38:aa:ce:53:6b:75:8c:df:
70:82:83:cb:fc:f5:03:4d:c3:db:23:1b:24:38:d6:f1:7e:0e:
ce:dd:c8:b6:c6:10:4c:32:21:53:7b:69:4c:8d:32:8a:5b:b3:
6e:d5:60:af:55:c5:de:5a:e6:f5:74:58:fb:4a:95:ec:c7:93:
41:be:95:b0:42:d1:c5:cf:0f:83:e5:99:65:4e:de:a6:70:f9:
3f:a7:88:41:47:36:89:ad:e7:89:42:b0:21:60:e6:7d:66:c7:
a2:49:5e:8c:5b:a3:41:f4:9e:ac:f3:1a:69:31:50:21:3c:a0:
31:5c:14:57:8f:b1:9f:3e:bb:a8:52:8d:83:ac:0e:d2:c2:bf:
b4:b4:e8:a6:25:15:ad:df:3d:ab:7c:f8:b6:1c:e3:5e:a1:7a:
49:ab:45:0a:0c:0b:c3:11:6f:33:0e:d7:a2:b9:ec:76:a0:be:
e9:a9:c9:24:31:a1:1b:be:58:44:67:ce:3d:c7:67:a7:c2:6b:
dd:96:65:af:2f:79:45:e2:fe:35:c1:30:7f:52:f3:d9:e9:84:
d2:cb:c5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org