Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS197842.roa
File: AS197842.roa (raw, json)
Hash identifier: GgnNPeohPjYXGlHVQY3113dm++buUynHzS3348nCvrc=
Subject key identifier: 62:36:C1:BF:72:49:D9:3B:CF:40:01:E1:12:EF:33:9C:27:8B:24:8A
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 314E47E78F636A83B9DF89F33F4CE7C6B9F1E906
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS197842.roa
Signing time: Mon 28 Aug 2023 07:00:04 +0000
ROA not before: Mon 28 Aug 2023 06:55:04 +0000
ROA not after: Mon 26 Aug 2024 07:00:04 +0000
asID: 197842
IP address blocks: 193.176.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4e:47:e7:8f:63:6a:83:b9:df:89:f3:3f:4c:e7:c6:b9:f1:e9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 28 06:55:04 2023 GMT
Not After : Aug 26 07:00:04 2024 GMT
Subject: CN=6236C1BF7249D93BCF4001E112EF339C278B248A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:cc:ad:c0:54:9b:f3:a5:60:d2:8e:20:bb:
9e:be:78:3c:df:b6:d8:de:6c:52:3f:c4:f9:17:9b:
21:f7:cd:4b:88:c6:11:fb:45:02:99:72:cd:b0:e1:
61:5c:f0:11:dc:22:91:9d:13:bc:62:31:dd:ec:e5:
d5:ef:7b:ff:7e:70:e2:ec:2b:9d:46:9e:d0:98:2e:
75:f9:82:60:ae:a7:14:9d:d5:5d:14:5c:ca:5d:55:
4d:48:51:e7:9c:22:60:19:be:df:3e:cb:fd:6b:6c:
47:32:f0:84:70:ee:09:7f:b8:24:68:b9:b7:d1:a6:
62:2a:77:bf:e4:d1:16:c5:e6:e5:67:85:0d:b6:7f:
d4:43:d6:04:ca:a4:f9:e9:88:48:a3:60:5a:f9:1e:
cb:76:dc:fb:e8:f9:ff:32:0a:78:60:79:b7:69:22:
40:29:8d:ff:0a:00:3c:52:de:ac:81:5e:21:06:f8:
f3:e6:53:52:76:ed:83:0f:a9:90:45:80:97:65:6a:
51:26:e3:01:0d:23:f7:b8:f4:80:0d:21:83:14:17:
c1:ce:d3:5c:24:bc:20:bc:2b:25:3d:71:7b:09:a0:
95:b3:cc:e6:fa:2e:70:d6:75:1d:0c:84:0c:da:89:
bc:75:e6:06:08:5d:be:74:62:51:d2:9a:51:6e:2f:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:36:C1:BF:72:49:D9:3B:CF:40:01:E1:12:EF:33:9C:27:8B:24:8A
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS197842.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.54.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:a2:42:a5:7e:01:6b:13:9a:0e:c0:cf:06:88:d3:cf:85:84:
7c:a2:d8:61:3f:ea:e4:84:77:4d:b4:59:d2:e0:45:d9:51:06:
69:1d:87:9a:d3:12:b3:4b:bf:72:aa:ee:2f:a8:0a:8e:66:ae:
cf:9e:3b:58:a1:04:2a:6f:85:50:06:26:0a:35:86:1d:61:30:
dc:36:60:c4:e7:9a:b3:c7:23:df:2e:8d:23:13:73:eb:3a:44:
08:69:50:0f:64:13:fb:27:92:6f:57:22:98:81:42:8f:d0:44:
69:d4:b3:4f:ed:e7:e4:4e:de:87:0a:78:13:7c:64:68:4f:b3:
1f:48:19:64:8c:ff:90:92:f2:27:30:96:f7:40:01:a5:2a:e4:
87:ef:51:a0:f6:ef:76:5e:db:8e:07:d3:a1:05:25:6d:65:11:
86:b4:d9:cb:92:32:8f:59:83:7d:34:6e:fb:b1:3a:c3:8f:a5:
bc:6d:87:54:85:d4:08:9f:da:9c:2e:31:42:b8:c1:41:ae:d1:
ad:06:f9:25:95:7e:94:c8:7e:53:39:14:f4:26:64:1f:b7:fb:
01:42:02:52:ec:33:82:67:8b:7b:2c:49:06:0d:52:60:5a:f2:
51:38:77:e2:75:f6:17:c3:2a:a7:58:de:64:3a:9e:35:21:7f:
7a:c6:bb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 09:16:13 2023 by rpki-client on console-fra.rpki-client.org