Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210654.roa
File: AS210654.roa (raw, json)
Hash identifier: L2dsOsYvCjzrgaPy5vxI+fdvktIH+q4UK5B/PUq7/SA=
Subject key identifier: DA:20:EB:9B:77:B8:0A:06:24:2A:CE:73:6C:D5:D4:CC:D3:F3:75:45
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 13536C39B72F49DA85A54669F3483761C20ACBE3
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210654.roa
Signing time: Fri 11 Oct 2024 08:43:25 +0000
ROA not before: Fri 11 Oct 2024 08:38:25 +0000
ROA not after: Fri 10 Oct 2025 08:43:25 +0000
asID: 210654
IP address blocks: 91.198.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 09:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:53:6c:39:b7:2f:49:da:85:a5:46:69:f3:48:37:61:c2:0a:cb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 11 08:38:25 2024 GMT
Not After : Oct 10 08:43:25 2025 GMT
Subject: CN=DA20EB9B77B80A06242ACE736CD5D4CCD3F37545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:03:19:e4:27:6a:d3:f9:31:2d:e9:6a:6f:
27:e0:e5:b7:5f:31:7a:2c:c9:cc:6d:38:4a:8f:bd:
50:37:bc:bd:ce:79:14:fa:6c:99:c1:46:e9:0b:f7:
c4:a4:b8:cb:db:5c:c5:56:a7:6a:13:cf:04:0d:ad:
36:4a:27:f6:b7:ff:a8:39:33:87:ca:75:65:5f:41:
b2:49:50:89:f8:0d:29:ec:96:32:3c:1b:6f:bc:18:
08:a0:af:2b:d3:20:f0:dd:71:bd:87:9d:cb:c9:a1:
d2:85:0d:8c:ba:9b:c0:95:33:b4:04:f5:e4:07:86:
6f:cf:73:95:ac:2c:ff:94:e8:03:50:f0:75:cb:49:
4f:cf:91:79:15:96:ed:23:74:0d:9c:cc:be:9f:72:
f2:27:d1:13:75:bb:12:12:af:e0:2c:61:bc:c4:9f:
ef:e7:90:7a:8c:c4:91:51:a3:35:a3:c1:62:35:a9:
ff:5f:f7:48:78:f9:81:3c:2f:40:09:bc:ee:2b:5e:
9a:c4:19:88:cd:69:c2:99:19:45:9d:6e:df:25:b5:
d1:d6:b3:70:9b:34:c8:6b:61:94:c2:84:01:f1:de:
98:8e:60:78:5c:7b:64:86:a1:f3:4e:cd:ae:7e:5a:
22:a5:85:88:90:b0:6c:cb:74:74:21:55:87:3b:07:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:20:EB:9B:77:B8:0A:06:24:2A:CE:73:6C:D5:D4:CC:D3:F3:75:45
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.123.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:3a:92:0f:58:6b:ef:6b:2f:ef:2a:87:91:0e:14:c0:10:b8:
c5:a8:e9:59:5c:02:88:78:e3:9d:89:b0:b6:50:fd:8d:46:69:
d7:bb:6c:03:0d:81:fc:0a:bb:6c:91:2f:3f:5e:12:c4:f3:5e:
a1:a4:00:55:ba:db:2b:56:de:b3:fd:d7:b7:ff:6e:29:b7:61:
d3:21:24:1a:c6:5e:4d:f7:4c:d0:ed:7c:ff:46:60:8a:f2:2e:
7f:a5:2c:6d:0a:f7:4b:32:da:c0:b4:f8:04:71:30:1c:c2:e5:
ee:7a:dd:36:f5:cb:90:41:80:01:3d:55:3b:7a:5a:4a:b7:19:
c7:b8:c9:b5:0d:c8:31:99:f9:a1:f4:31:aa:d3:1a:ad:7a:af:
90:97:89:50:b2:67:31:67:d2:b6:72:c4:c4:21:3f:93:b3:cc:
22:51:a4:d9:77:ef:ef:f2:f8:2a:6d:93:da:30:c7:8a:f9:ec:
77:14:e6:b8:e7:55:24:ed:6a:26:e8:93:81:68:02:41:9f:39:
77:be:52:61:d4:9a:6d:fd:19:71:1e:40:90:5f:a5:fe:d6:37:
ca:14:ea:bf:61:2b:2e:7e:03:66:96:cb:55:fe:80:ae:99:0b:
c6:f0:65:6e:06:36:30:23:04:f6:a0:11:5c:45:4e:75:2c:fc:
d1:5f:0b:06
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUE1NsObcvSdqFpUZp80g3YcIKy+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNDEwMTEwODM4MjVaFw0yNTEwMTAwODQzMjVaMDMxMTAvBgNV
BAMTKERBMjBFQjlCNzdCODBBMDYyNDJBQ0U3MzZDRDVENENDRDNGMzc1NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUAMZ5Cdq0/kxLelqbyfg5bdf
MXosycxtOEqPvVA3vL3OeRT6bJnBRukL98SkuMvbXMVWp2oTzwQNrTZKJ/a3/6g5
M4fKdWVfQbJJUIn4DSnsljI8G2+8GAigryvTIPDdcb2HncvJodKFDYy6m8CVM7QE
9eQHhm/Pc5WsLP+U6ANQ8HXLSU/PkXkVlu0jdA2czL6fcvIn0RN1uxISr+AsYbzE
n+/nkHqMxJFRozWjwWI1qf9f90h4+YE8L0AJvO4rXprEGYjNacKZGUWdbt8ltdHW
s3CbNMhrYZTChAHx3piOYHhce2SGofNOza5+WiKlhYiQsGzLdHQhVYc7BzeFAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU2iDrm3e4CgYkKs5zbNXUzNPzdUUwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjEwNjU0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8Z7
MA0GCSqGSIb3DQEBCwUAA4IBAQDKOpIPWGvvay/vKoeRDhTAELjFqOlZXAKIeOOd
ibC2UP2NRmnXu2wDDYH8CrtskS8/XhLE816hpABVutsrVt6z/de3/24pt2HTISQa
xl5N90zQ7Xz/RmCK8i5/pSxtCvdLMtrAtPgEcTAcwuXuet029cuQQYABPVU7elpK
txnHuMm1Dcgxmfmh9DGq0xqteq+Ql4lQsmcxZ9K2csTEIT+Ts8wiUaTZd+/v8vgq
bZPaMMeK+ex3FOa451Uk7Wom6JOBaAJBnzl3vlJh1Jpt/RlxHkCQX6X+1jfKFOq/
YSsufgNmlstV/oCumQvG8GVuBjYwIwT2oBFcRU51LPzRXwsG
Generated at Thu Nov 7 10:45:02 2024 by rpki-client on console-ams.rpki-client.org