Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211252.roa
File: AS211252.roa (raw, json)
Hash identifier: FmblJVn2E2R7uXku4Nvbz74uZma3e5W0T3BcChz2XKo=
Subject key identifier: E5:23:E0:97:A6:6C:C7:FC:8C:22:18:B9:63:99:4D:F4:FD:ED:1F:8C
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 45B59C5C290E72A8D4CC3550993CD5333BBBAF1F
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211252.roa
Signing time: Thu 29 Dec 2022 12:26:22 +0000
ROA not before: Thu 29 Dec 2022 12:21:22 +0000
ROA not after: Thu 28 Dec 2023 12:26:22 +0000
asID: 211252
IP address blocks: 91.198.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:b5:9c:5c:29:0e:72:a8:d4:cc:35:50:99:3c:d5:33:3b:bb:af:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 29 12:21:22 2022 GMT
Not After : Dec 28 12:26:22 2023 GMT
Subject: CN=E523E097A66CC7FC8C2218B963994DF4FDED1F8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:6f:2a:cb:ac:6b:c4:37:f7:b1:de:26:1c:
62:9f:2e:9f:b7:fb:6e:45:30:58:7f:65:96:3b:86:
94:5c:25:7f:12:ee:18:45:fa:fc:49:5f:0d:4a:70:
00:21:e3:93:83:76:45:d4:46:bd:74:fe:34:e1:e2:
ed:6c:92:ee:45:eb:40:c4:0b:2c:4d:17:61:25:03:
cf:ca:ae:8b:1d:e5:a1:93:42:84:21:0b:7e:4b:fa:
33:97:c5:23:58:31:0c:c8:6b:9f:f8:11:b1:d1:14:
e6:63:2b:7b:97:5c:a2:6a:56:3a:9c:81:92:99:d0:
f6:24:c9:d4:27:ba:0d:e7:0f:64:07:dc:d9:23:e0:
7d:42:b2:d5:87:7f:a9:a3:20:e6:08:8f:0f:66:e3:
03:a9:d6:6f:53:e8:03:e8:01:44:27:08:da:65:da:
ea:9d:16:04:5f:7b:79:38:17:1a:f1:7f:5c:00:e1:
d9:1e:6f:1b:d1:94:d4:7f:86:02:ae:f8:fc:90:8d:
aa:18:27:67:fa:60:50:a5:70:5f:93:a2:07:62:6e:
71:35:cc:d1:21:1c:a7:a0:de:7a:66:08:42:d6:ba:
c4:8c:92:9f:95:84:37:f8:96:91:e4:87:05:d5:5c:
16:bf:50:c2:a7:bf:60:ca:62:de:07:2b:74:9d:78:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:23:E0:97:A6:6C:C7:FC:8C:22:18:B9:63:99:4D:F4:FD:ED:1F:8C
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.123.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d8:f5:9e:45:e1:ad:71:57:51:fa:05:eb:32:d8:3a:22:61:
70:07:3b:0d:3a:bc:fa:80:36:91:95:03:2b:72:9c:c3:ae:53:
de:e8:7b:84:ef:b7:ff:cd:0a:40:a0:2a:de:40:73:73:3b:71:
21:49:01:7c:e7:4e:4c:c8:be:86:e3:32:12:8d:cc:2f:84:df:
80:e7:de:c3:2f:69:38:90:f8:7e:50:59:d7:07:ee:23:43:7f:
75:9c:27:c8:8b:55:92:12:8a:6a:08:e2:6e:59:71:c0:95:07:
9a:00:c7:28:5b:15:ed:47:6f:8c:e8:fe:49:e0:97:4c:3a:1c:
14:fe:39:fc:5d:0d:5a:31:89:aa:49:7a:7d:1a:8f:67:2d:0a:
15:01:04:8e:de:2e:2d:98:de:25:d4:e0:f0:55:d9:eb:69:db:
a3:02:e5:2d:f5:ee:1b:d4:83:ed:10:aa:4d:96:3d:3e:a8:19:
57:b4:21:f0:c4:2e:6c:b9:e3:d9:c1:5c:63:03:cd:ea:b5:0c:
c8:bb:70:c4:c8:3c:54:ea:f8:30:5c:0d:64:dc:6b:7b:f8:7c:
d5:36:e8:33:0e:f0:77:55:01:de:73:d2:d8:f3:e5:ba:3c:cd:
5e:64:ca:d1:48:38:74:9b:e2:4e:ae:67:89:74:0a:de:6b:fb:
39:77:18:ed
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 2 07:25:58 2023 by rpki-client on console-ams.rpki-client.org