Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203511.roa
File: AS203511.roa (raw, json)
Hash identifier: VX9yLLg+9hrcQzESfiZOl9sQon92p4+DJsXVFqXzUec=
Subject key identifier: 21:E3:70:B9:D8:92:13:D6:9A:89:68:A2:EA:08:00:FB:94:43:C1:18
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3E0544E23A8B234C28494AF8E09E461B37ED38B2
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203511.roa
Signing time: Mon 17 Jul 2023 14:29:22 +0000
ROA not before: Mon 17 Jul 2023 14:24:22 +0000
ROA not after: Mon 15 Jul 2024 14:29:22 +0000
asID: 203511
IP address blocks: 185.155.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:05:44:e2:3a:8b:23:4c:28:49:4a:f8:e0:9e:46:1b:37:ed:38:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 17 14:24:22 2023 GMT
Not After : Jul 15 14:29:22 2024 GMT
Subject: CN=21E370B9D89213D69A8968A2EA0800FB9443C118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d2:c6:3d:84:c4:a5:30:4d:89:fc:63:c5:77:
22:49:af:5e:3c:be:72:77:4b:a7:e2:d2:09:9b:0c:
7c:5c:6f:ad:4b:df:d6:92:22:1a:51:b3:ad:50:d8:
00:d1:f0:ff:13:0f:58:94:b8:96:56:d5:75:d5:47:
0e:88:bc:58:c4:e2:c9:4b:df:e1:b0:da:2d:d4:fe:
ec:59:21:4d:be:bd:a5:1a:06:a8:43:7a:2c:04:47:
be:1d:a3:02:52:9b:c5:62:6e:47:b6:bf:99:de:17:
22:a9:73:d2:7e:43:95:ec:61:33:82:8d:bc:97:c3:
38:de:25:ac:70:e2:a3:6f:4b:8e:a9:93:ce:c3:2b:
4f:e5:3a:ae:4b:70:ae:93:fc:95:ad:e5:bf:63:25:
7e:93:41:9c:89:37:16:62:50:bd:8e:ff:b2:30:95:
9e:e7:a5:99:d3:43:81:f9:84:7c:4a:b2:05:b2:97:
49:ea:f8:91:54:4b:c8:6e:10:db:d2:13:4c:01:e6:
5e:76:6f:12:0f:1c:fd:03:3a:60:ee:35:dd:21:32:
51:75:3b:4e:d4:d9:2b:7a:ad:1b:97:76:1d:5e:c0:
c2:ce:35:4b:1c:a6:69:33:19:55:98:a1:89:8d:49:
58:44:95:a2:cd:a8:6f:48:c1:eb:ed:e9:47:af:fa:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E3:70:B9:D8:92:13:D6:9A:89:68:A2:EA:08:00:FB:94:43:C1:18
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.221.0/24
Signature Algorithm: sha256WithRSAEncryption
94:11:f8:73:e0:e7:00:8c:cf:34:5a:73:60:30:6d:e4:fd:f6:
b0:56:26:0a:80:89:25:74:1e:44:8d:80:a3:5c:89:a8:96:32:
cb:1d:2f:d9:4e:75:8c:15:f1:e6:8c:ab:86:0a:75:5d:5c:93:
57:16:61:b0:ec:07:17:21:ff:05:04:99:58:47:65:c7:ce:b5:
f4:35:20:26:13:8d:56:36:16:f3:62:a7:17:2e:b5:8d:f5:c4:
9f:f1:a8:9a:35:9e:07:7c:51:55:71:f3:64:3f:48:07:96:18:
3d:f2:2b:30:1c:70:c0:d9:43:c8:dd:05:b5:a7:5e:26:49:9c:
58:01:bb:de:6e:43:5a:4f:75:58:e4:c8:4e:79:32:15:e5:6f:
0d:28:35:5c:84:57:59:41:e0:2d:b1:8f:88:c6:cc:56:97:df:
94:1e:6d:79:32:f0:a5:43:ab:f4:07:4a:cd:cc:f7:fe:05:ab:
91:fa:e0:ae:41:c0:19:92:44:98:c8:4a:96:a6:35:fc:e4:82:
f0:63:3f:50:1e:1e:05:df:45:5b:62:88:19:a7:4b:eb:79:6d:
10:4b:8b:c4:ac:63:5c:02:8f:a3:60:e3:7f:2d:fa:61:92:e2:
69:f2:28:7c:9c:af:90:6f:4d:35:1a:7a:b6:e4:af:44:81:e1:
cb:7d:2a:51
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 2 15:05:55 2023 by rpki-client on console-fra.rpki-client.org