Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210912.roa
File: AS210912.roa (raw, json)
Hash identifier: ngmgDGs6a3/s1XTXwUuKVV19KcJ87ifiQSsuTppvFlY=
Subject key identifier: 00:08:51:58:A1:57:85:3B:22:CF:5A:23:A1:8D:88:44:9F:1C:DD:1D
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 7793F0170992A90DB459FDF76DDFD6E4510D9558
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210912.roa
Signing time: Tue 28 Feb 2023 13:46:37 +0000
ROA not before: Tue 28 Feb 2023 13:41:37 +0000
ROA not after: Tue 27 Feb 2024 13:46:37 +0000
asID: 210912
IP address blocks: 193.25.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:93:f0:17:09:92:a9:0d:b4:59:fd:f7:6d:df:d6:e4:51:0d:95:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Feb 28 13:41:37 2023 GMT
Not After : Feb 27 13:46:37 2024 GMT
Subject: CN=00085158A157853B22CF5A23A18D88449F1CDD1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:83:6f:de:63:6c:e5:f7:11:0f:76:2f:5c:
bb:5f:d1:a8:44:47:ba:89:b0:91:58:ff:d4:19:51:
ac:e6:37:d7:0d:7b:a9:5a:c7:c7:0e:e3:a1:3e:ac:
b0:fc:dc:c7:d8:6f:54:90:db:fe:a2:03:b7:b2:59:
b9:0d:af:05:82:31:e0:d9:a4:3e:d2:9a:f4:82:ef:
6c:4c:3c:3c:50:19:cc:1c:ce:85:08:b5:bf:49:88:
e3:21:d9:e5:89:c4:18:94:e8:43:b2:b0:c2:6a:6a:
eb:28:b5:f4:e1:86:2f:b8:e8:64:6a:8b:1e:cc:16:
dd:2a:96:72:56:e6:16:24:32:b4:88:05:dc:fa:fa:
18:ed:60:c8:07:7b:e2:b3:59:76:32:1c:a3:bf:ee:
df:be:9d:cd:71:96:dd:19:e5:96:50:0e:58:d2:32:
f2:50:56:5e:06:7f:f3:ee:60:5d:40:19:2a:aa:fc:
a1:71:ce:9e:5e:fe:0b:e9:04:fa:da:71:a5:3e:56:
73:75:77:a8:49:6b:71:66:74:6b:5c:f6:e0:21:79:
17:0c:49:e5:5d:6c:e2:12:57:a8:23:79:af:e2:49:
7e:52:0e:a6:6b:d8:c4:fe:36:e2:6d:c4:99:2d:08:
1a:82:d2:52:88:a1:c7:83:fe:16:4f:fd:88:d4:d0:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:08:51:58:A1:57:85:3B:22:CF:5A:23:A1:8D:88:44:9F:1C:DD:1D
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210912.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.207.0/24
Signature Algorithm: sha256WithRSAEncryption
33:24:f8:2c:a4:dd:3d:2c:bb:81:37:73:15:83:e7:7c:f6:21:
36:bf:21:8b:20:e7:5d:b6:1a:07:51:2f:2f:f7:9b:66:bc:61:
22:e0:93:8c:cc:f4:9f:e9:1d:ce:1e:70:da:fe:2d:54:66:4a:
ff:ff:b7:2e:5d:be:88:ac:e4:d6:57:3a:f6:17:e2:1e:db:2a:
3b:22:c5:a2:8d:32:68:bf:00:c7:c5:ad:b0:a1:31:5a:ae:b0:
16:45:2c:be:35:2c:0b:d3:8e:c4:e9:52:06:29:7d:ee:e9:36:
a5:a9:ef:6d:b3:26:0b:44:cc:6d:53:71:0e:46:36:bc:3b:ff:
be:ff:00:73:40:56:3d:1e:b4:df:a4:dc:2a:26:db:de:f7:5f:
77:ef:54:7b:35:9b:1c:28:41:26:22:b4:d1:ed:78:6b:ff:a9:
ad:f2:ec:ee:fd:06:ba:d3:71:ec:dc:02:08:a0:2f:7f:2f:8b:
74:0b:d0:86:02:0c:bc:3a:f8:2f:28:23:03:0d:5e:72:c6:8e:
30:97:95:d3:b4:ba:f4:69:e0:4c:80:18:39:0c:47:cc:b3:1d:
7a:36:83:76:8c:92:05:eb:50:d3:ef:97:b0:19:1a:31:fd:7a:
fd:10:30:49:66:ea:ae:c4:a0:dc:ec:5f:88:76:5c:95:41:ce:
8c:97:a8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org