Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS200154.roa
File: AS200154.roa (raw, json)
Hash identifier: DQBFpZOUCuOpUx2kuBypPMBf28uR+IPiuiLPalE5018=
Subject key identifier: ED:B9:11:D9:3D:F0:40:06:44:8E:95:F9:97:51:F5:0C:73:10:CA:AB
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3F5354151BA79A06DE899C86F7FDD2D45B229377
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS200154.roa
Signing time: Wed 05 Apr 2023 15:18:00 +0000
ROA not before: Wed 05 Apr 2023 15:13:00 +0000
ROA not after: Wed 03 Apr 2024 15:18:00 +0000
asID: 200154
IP address blocks: 193.29.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:53:54:15:1b:a7:9a:06:de:89:9c:86:f7:fd:d2:d4:5b:22:93:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Apr 5 15:13:00 2023 GMT
Not After : Apr 3 15:18:00 2024 GMT
Subject: CN=EDB911D93DF04006448E95F99751F50C7310CAAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:76:35:2f:6d:04:e0:f5:b5:14:6e:5a:7c:
42:cc:1b:b7:08:af:83:dc:5b:12:eb:b9:77:b9:27:
20:72:16:d6:60:bd:13:e2:97:43:69:98:71:02:32:
a4:51:a4:d9:63:7d:f7:17:ff:9e:15:aa:54:32:c8:
d7:6a:ca:cc:5c:ad:8d:28:fc:f6:ff:5c:42:b9:b3:
a1:53:b8:be:df:96:c8:a0:f8:4d:f1:e6:f3:82:d6:
cf:b9:6a:2b:4b:3b:27:27:66:58:fe:27:74:08:99:
a9:7f:b9:a1:49:42:19:4e:8c:29:72:99:9f:5b:9b:
2a:27:ce:7a:e6:1b:e9:b0:8a:22:c4:c5:60:85:be:
23:93:23:cf:78:99:e3:94:18:66:61:f2:d6:7b:a5:
5b:97:71:b5:64:82:f3:d7:ce:ad:08:cb:86:12:5e:
10:6e:0c:b8:f4:eb:3a:1d:c0:e5:9e:55:a7:29:df:
d7:5e:54:10:28:c1:b3:d1:37:f4:61:8d:2a:96:49:
1f:1b:8d:3f:fe:9f:80:25:0c:77:48:98:ad:91:5c:
34:df:50:c3:86:39:ee:15:70:f7:72:6d:cc:7d:a1:
55:c7:92:5c:35:81:e5:3e:f2:f8:86:05:17:be:3b:
14:d8:79:8c:77:2b:81:78:45:44:ff:d7:f4:18:4f:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B9:11:D9:3D:F0:40:06:44:8E:95:F9:97:51:F5:0C:73:10:CA:AB
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS200154.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.99.0/24
Signature Algorithm: sha256WithRSAEncryption
08:0e:d0:ff:4d:b8:f7:5d:8c:64:ad:0e:45:62:80:91:59:c8:
d7:f8:65:d3:bc:6d:dc:1a:e8:a4:c2:e2:7c:27:da:d8:3e:cf:
6b:f4:52:04:30:69:5e:87:0e:cd:df:54:4d:43:9d:80:0d:df:
e1:e2:94:63:07:b0:10:6b:c8:e3:60:e1:8f:0e:93:4a:18:70:
53:2a:59:c2:f1:37:16:a3:9a:f7:7c:cb:fd:e5:65:bc:81:69:
ca:aa:bc:bc:16:b6:72:4a:18:21:12:bd:8d:a8:e5:70:34:59:
d3:27:32:fc:63:17:0c:af:f8:16:60:6a:f2:d8:ec:3d:14:22:
33:14:a6:46:8e:63:ca:09:2d:d9:fd:f2:25:87:69:91:85:86:
cd:32:ef:8a:19:ce:68:21:2b:eb:e9:87:c4:2e:6a:e8:02:7e:
0a:4f:fb:eb:a7:bc:ff:5e:08:d5:d8:d1:96:5c:7b:8a:7a:7a:
8d:96:b2:af:f9:38:a0:2f:20:c0:13:ec:a1:ce:70:3c:4c:ec:
95:6a:91:f8:41:7a:1e:de:14:0f:fd:dd:06:3a:5e:7f:95:38:
14:66:f3:2c:c0:2f:43:e6:2b:17:b8:7e:08:0b:03:e7:cc:51:
fd:ce:e4:bc:d1:45:e2:6b:d9:8f:dd:4b:38:29:f1:64:f7:53:
c9:57:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org