Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS198552.roa
File: AS198552.roa (raw, json)
Hash identifier: PowNrYZytt1GqslTMso3Vi+FzvgezKbtnrqOucAqRKg=
Subject key identifier: 5A:73:7A:7C:D5:BE:D4:E1:5E:CF:D7:9B:81:C9:1C:98:5A:83:14:FC
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0B18E4F42B79CF75BF18AA0FD783E8E062F75130
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS198552.roa
Signing time: Sun 21 May 2023 19:02:11 +0000
ROA not before: Sun 21 May 2023 18:57:11 +0000
ROA not after: Sun 19 May 2024 19:02:11 +0000
asID: 198552
IP address blocks: 193.29.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:18:e4:f4:2b:79:cf:75:bf:18:aa:0f:d7:83:e8:e0:62:f7:51:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 21 18:57:11 2023 GMT
Not After : May 19 19:02:11 2024 GMT
Subject: CN=5A737A7CD5BED4E15ECFD79B81C91C985A8314FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:96:3e:60:1b:93:9e:c2:57:3e:3d:8d:8c:
59:b5:2c:bf:9c:75:49:d7:05:b2:3f:9e:3a:6c:c5:
17:32:5a:08:98:3b:85:70:18:b2:73:4a:c0:fd:a8:
d0:c8:13:f7:ae:d3:32:24:25:c4:1e:54:1d:ad:50:
56:92:1c:59:db:95:e3:fe:8d:38:f9:a2:03:c8:2d:
92:ef:3d:e6:f0:f6:f3:3b:4c:79:6a:3d:9e:52:52:
27:bb:6b:8e:e5:9c:75:88:2b:b9:8b:49:96:87:f0:
87:b6:7f:01:f9:70:53:09:95:71:fe:c5:5e:0a:39:
23:7f:07:fb:6d:c5:c2:f8:a6:b8:3e:93:79:37:f0:
e5:ea:42:17:c3:9f:3b:24:d1:61:08:ef:8a:1d:27:
3c:47:e1:b6:8e:55:32:89:07:a2:ae:04:01:f6:5c:
91:23:51:ac:58:25:6a:dc:a0:cc:a5:12:91:a6:4c:
1a:88:ae:a1:6c:2a:c4:02:3d:5d:72:95:e6:f6:60:
d6:63:b0:1e:57:8d:65:8f:0a:10:95:6b:97:06:52:
e3:9a:db:1c:75:8e:9f:96:84:fd:50:31:cc:dd:0b:
31:24:92:d9:13:84:9a:5f:0a:9a:4e:fb:2b:1d:c8:
fb:48:c0:c3:7b:fd:eb:07:12:d9:4d:c2:97:64:81:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:73:7A:7C:D5:BE:D4:E1:5E:CF:D7:9B:81:C9:1C:98:5A:83:14:FC
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS198552.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.99.0/24
Signature Algorithm: sha256WithRSAEncryption
80:7f:a2:ad:9e:a2:5c:e0:9f:8f:e3:5f:c4:f7:fb:a9:8f:e8:
a7:cf:f5:5c:4e:24:d8:4f:46:f4:64:b8:a4:ab:d0:7b:dd:39:
d5:83:cb:1d:0b:7c:b2:eb:0c:13:a7:6f:a3:f7:03:62:67:83:
9c:de:53:19:f6:af:01:68:dd:d2:a2:43:1a:28:e1:63:60:f8:
f4:5f:e6:86:17:95:25:14:c3:8b:48:0a:6a:f9:78:7e:62:a7:
c8:6d:63:cf:5b:4d:b0:02:60:05:d5:eb:4b:c8:01:4e:a2:2b:
ad:49:b9:bc:9f:29:ff:ec:6d:4b:a6:c8:45:81:4e:01:ad:ed:
b5:96:ea:90:3e:76:dc:1b:48:21:cc:48:0a:b1:b1:29:87:9a:
f4:6d:b4:56:55:7e:42:a4:1b:5e:a6:ed:6b:1c:62:59:9e:11:
66:06:bf:57:f1:9f:49:6e:a4:95:da:2d:82:90:00:8d:99:07:
72:20:31:0e:39:bd:33:50:14:28:62:48:ba:e3:30:f7:55:50:
38:06:8b:91:d1:f2:54:c0:85:96:78:aa:7a:9c:78:57:34:13:
00:b6:7d:b0:ca:89:0b:a2:7d:c7:6e:48:0d:1a:32:76:00:17:
47:05:ce:56:0d:c5:b4:df:de:21:5b:9c:8b:40:06:e0:c9:bb:
09:18:05:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 08:56:49 2023 by rpki-client on console-ams.rpki-client.org