Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS140947.roa
File: AS140947.roa (raw, json)
Hash identifier: HnMuoiG8pBzsv8d5+RkTeQ5r076047COgQ2EisCTGKM=
Subject key identifier: AD:A4:C9:FC:91:55:8D:08:92:B1:03:C1:9C:7E:F2:B4:04:A4:CB:85
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 343E2E60A0A8112266ECE5F4BFBF716C46BCAB25
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS140947.roa
Signing time: Thu 29 Dec 2022 12:26:20 +0000
ROA not before: Thu 29 Dec 2022 12:21:20 +0000
ROA not after: Thu 28 Dec 2023 12:26:20 +0000
asID: 140947
IP address blocks: 147.78.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:3e:2e:60:a0:a8:11:22:66:ec:e5:f4:bf:bf:71:6c:46:bc:ab:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 29 12:21:20 2022 GMT
Not After : Dec 28 12:26:20 2023 GMT
Subject: CN=ADA4C9FC91558D0892B103C19C7EF2B404A4CB85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:2d:14:cc:ee:07:d3:fe:9c:8b:31:82:2a:
71:87:0f:aa:3c:35:ff:c0:2c:49:51:64:7a:f1:7f:
25:5c:70:41:71:ef:b8:fb:e9:2e:11:f2:7d:da:62:
0f:a7:1a:bb:8f:06:0c:02:57:98:63:2d:bd:b2:b4:
f4:11:7a:cb:56:ce:e4:b4:48:eb:9e:24:ba:56:9d:
0e:0c:9f:87:a2:63:88:4e:0a:2c:e0:29:17:19:71:
73:8e:9c:19:b1:68:7b:4b:fe:6a:0b:0d:87:bb:26:
97:79:16:a6:75:a0:28:59:db:0c:62:27:1a:dd:94:
28:dd:f1:c3:f0:09:43:f5:92:88:66:b4:a4:d6:6c:
3d:11:0a:85:25:2f:8f:80:87:28:ed:4c:58:98:74:
3d:e2:20:3a:3f:00:81:ff:90:8d:5a:be:24:af:30:
27:c2:1a:cd:44:60:6f:16:39:fa:b2:3d:2f:4c:bf:
51:09:43:83:84:ad:75:4f:6c:1d:22:bc:5b:da:8a:
f9:7f:42:a2:1a:75:ac:b8:bf:f7:63:19:ad:f2:dd:
d9:02:f8:ac:1a:63:ea:4f:a3:5f:75:55:f2:92:f1:
04:7e:75:3b:17:2d:4b:83:f1:45:8a:0b:6d:73:73:
68:c3:06:21:d0:15:d9:f9:d0:1c:f7:24:0f:ef:f5:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A4:C9:FC:91:55:8D:08:92:B1:03:C1:9C:7E:F2:B4:04:A4:CB:85
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS140947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:37:98:d6:0f:37:a5:ee:7e:a6:68:05:34:fc:0d:e5:00:6b:
28:4c:7e:59:22:fd:7e:ce:e8:31:37:d7:fa:e2:17:51:43:aa:
97:f8:04:b8:41:82:49:32:b9:d7:12:fc:96:f8:98:87:23:bb:
83:1d:e8:37:3d:b0:b0:75:9a:64:1d:37:13:27:5e:59:57:bb:
2b:cc:0e:f6:d2:13:fc:e3:1f:e4:2e:81:42:83:67:61:19:42:
21:72:df:23:9b:82:60:39:5b:1c:45:28:79:a8:ce:6d:25:39:
a1:0c:8d:9f:b3:38:1f:c7:8b:12:59:80:92:49:dd:2e:fa:b0:
dc:2a:f7:f1:cb:13:b4:bc:cd:b4:48:57:a6:69:e7:7c:43:be:
3c:76:c5:d2:36:b9:cd:12:7d:95:bd:e1:eb:ec:86:51:be:9c:
67:8c:42:54:c5:03:d0:35:c5:fd:c4:b2:23:76:01:ba:96:f0:
b0:19:21:bd:57:d9:66:d6:36:fa:d7:6d:85:35:7e:69:17:2c:
9f:5c:90:90:70:86:e6:d9:bc:b5:08:ee:4e:ac:a8:55:05:ac:
44:be:9b:44:6e:5f:cc:93:fd:58:6e:62:dd:ab:9e:e6:21:5e:
82:79:8e:80:1b:3a:d8:0b:28:93:27:9c:16:8b:4c:64:9f:4b:
68:19:a7:3f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUND4uYKCoESJm7OX0v79xbEa8qyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yMjEyMjkxMjIxMjBaFw0yMzEyMjgxMjI2MjBaMDMxMTAvBgNV
BAMTKEFEQTRDOUZDOTE1NThEMDg5MkIxMDNDMTlDN0VGMkI0MDRBNENCODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJJi0UzO4H0/6cizGCKnGHD6o8
Nf/ALElRZHrxfyVccEFx77j76S4R8n3aYg+nGruPBgwCV5hjLb2ytPQRestWzuS0
SOueJLpWnQ4Mn4eiY4hOCizgKRcZcXOOnBmxaHtL/moLDYe7Jpd5FqZ1oChZ2wxi
JxrdlCjd8cPwCUP1kohmtKTWbD0RCoUlL4+AhyjtTFiYdD3iIDo/AIH/kI1aviSv
MCfCGs1EYG8WOfqyPS9Mv1EJQ4OErXVPbB0ivFvaivl/QqIaday4v/djGa3y3dkC
+KwaY+pPo191VfKS8QR+dTsXLUuD8UWKC21zc2jDBiHQFdn50Bz3JA/v9fZxAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUraTJ/JFVjQiSsQPBnH7ytASky4UwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTQwOTQ3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk055
MA0GCSqGSIb3DQEBCwUAA4IBAQCzN5jWDzel7n6maAU0/A3lAGsoTH5ZIv1+zugx
N9f64hdRQ6qX+AS4QYJJMrnXEvyW+JiHI7uDHeg3PbCwdZpkHTcTJ15ZV7srzA72
0hP84x/kLoFCg2dhGUIhct8jm4JgOVscRSh5qM5tJTmhDI2fszgfx4sSWYCSSd0u
+rDcKvfxyxO0vM20SFemaed8Q748dsXSNrnNEn2VveHr7IZRvpxnjEJUxQPQNcX9
xLIjdgG6lvCwGSG9V9lm1jb6122FNX5pFyyfXJCQcIbm2by1CO5OrKhVBaxEvptE
bl/Mk/1YbmLdq57mIV6CeY6AGzrYCyiTJ5wWi0xkn0toGac/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org