Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211459.roa
File: AS211459.roa (raw, json)
Hash identifier: wz251OSzID8mFTaIlugnsgATz6rYaDaZLBC3mb1CkgU=
Subject key identifier: 69:C7:B9:E8:03:6E:E2:13:57:8C:C1:AC:47:25:F4:86:08:8A:DD:D8
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 314DA34E4828E8D860D33DC292D568FF2BA15F29
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211459.roa
Signing time: Thu 29 Dec 2022 12:26:21 +0000
ROA not before: Thu 29 Dec 2022 12:21:21 +0000
ROA not after: Thu 28 Dec 2023 12:26:21 +0000
asID: 211459
IP address blocks: 193.111.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4d:a3:4e:48:28:e8:d8:60:d3:3d:c2:92:d5:68:ff:2b:a1:5f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 29 12:21:21 2022 GMT
Not After : Dec 28 12:26:21 2023 GMT
Subject: CN=69C7B9E8036EE213578CC1AC4725F486088ADDD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:0d:a8:ea:09:0f:e0:7a:43:17:92:64:50:
dc:e7:c0:16:4e:78:38:13:9d:da:fa:b4:7e:4b:5c:
90:cb:28:05:c0:93:f9:76:cc:5e:53:c6:61:b1:60:
e3:89:1c:cf:9d:f8:b7:b1:1e:26:7e:e1:96:88:f0:
53:7f:34:ca:f3:69:a5:7c:69:80:af:dc:d7:d2:dc:
8e:13:b3:63:e9:76:d5:a7:46:22:6a:9a:58:44:a5:
8c:cc:a1:3f:66:64:96:20:9e:e7:63:43:af:c3:ce:
aa:f2:49:18:ec:c5:ae:d1:1e:df:08:10:6e:7f:e0:
53:c2:d8:b5:b5:0a:11:8c:d6:74:a7:9c:61:be:c6:
a3:51:13:04:f9:b8:5b:94:42:ac:d1:5f:76:23:6c:
18:69:85:90:59:07:c3:b0:93:71:28:d5:79:8c:18:
e3:12:c7:a5:f3:8c:a8:88:5b:6c:e3:ac:44:36:1d:
1f:0a:d9:2d:76:65:30:a7:2c:da:43:ba:7f:02:e4:
02:cc:c5:2a:d5:2e:e5:0b:bd:cb:6f:fc:2a:4a:62:
97:ca:39:db:fb:f3:e8:86:ce:4a:aa:96:05:fb:53:
eb:c6:89:e8:af:a0:ec:eb:6d:35:4b:b2:a7:8a:2e:
fe:2a:d2:72:68:34:f8:cc:d1:77:ec:0e:fa:89:82:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C7:B9:E8:03:6E:E2:13:57:8C:C1:AC:47:25:F4:86:08:8A:DD:D8
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:66:88:e9:c8:65:68:0a:4e:d4:e0:06:1c:a6:a1:b2:0c:e6:
39:4c:39:29:89:3b:f0:fd:c5:09:a5:bc:90:99:41:58:a3:0e:
6f:38:ac:81:7a:c9:dd:92:d0:da:66:12:74:9c:c3:83:a0:cd:
e1:33:95:bc:75:88:b9:e0:9e:57:f2:db:6e:56:78:5d:92:db:
36:fa:b6:74:5b:90:aa:6a:e8:de:dc:06:5a:a6:ec:a5:40:1a:
57:e7:4c:ae:eb:7a:a1:8f:5a:a8:3d:0a:5c:33:5f:cd:59:6a:
31:fc:2b:13:c0:01:81:41:a7:25:67:fa:6c:34:90:e0:27:77:
f4:cd:87:ae:7b:bb:df:5d:46:27:dc:cb:fc:74:ab:41:02:2e:
c3:e2:ae:b9:e0:5e:4e:43:67:e9:4c:3e:79:14:19:7f:d3:da:
0a:18:34:cb:6b:7d:a1:2c:af:f2:ee:e1:37:8e:36:02:d1:3d:
61:99:a3:1c:cc:91:1a:61:66:3a:f7:fe:77:2e:d4:ea:a1:e8:
e9:17:38:e1:4b:d9:c5:01:e3:15:c4:57:f6:fa:d0:49:7d:f4:
65:56:98:4e:95:f5:d5:3b:ae:72:3a:0e:c7:19:33:0a:b5:9e:
57:03:4b:69:e9:d5:a4:d8:c8:99:c1:99:73:47:00:f6:9f:03:
50:72:66:f3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUMU2jTkgo6Nhg0z3CktVo/yuhXykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yMjEyMjkxMjIxMjFaFw0yMzEyMjgxMjI2MjFaMDMxMTAvBgNV
BAMTKDY5QzdCOUU4MDM2RUUyMTM1NzhDQzFBQzQ3MjVGNDg2MDg4QURERDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mA2o6gkP4HpDF5JkUNznwBZO
eDgTndr6tH5LXJDLKAXAk/l2zF5TxmGxYOOJHM+d+LexHiZ+4ZaI8FN/NMrzaaV8
aYCv3NfS3I4Ts2PpdtWnRiJqmlhEpYzMoT9mZJYgnudjQ6/DzqrySRjsxa7RHt8I
EG5/4FPC2LW1ChGM1nSnnGG+xqNREwT5uFuUQqzRX3YjbBhphZBZB8Owk3Eo1XmM
GOMSx6XzjKiIW2zjrEQ2HR8K2S12ZTCnLNpDun8C5ALMxSrVLuULvctv/CpKYpfK
Odv78+iGzkqqlgX7U+vGieivoOzrbTVLsqeKLv4q0nJoNPjM0XfsDvqJgo1rAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUace56ANu4hNXjMGsRyX0hgiK3dgwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjExNDU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW98
MA0GCSqGSIb3DQEBCwUAA4IBAQBLZojpyGVoCk7U4AYcpqGyDOY5TDkpiTvw/cUJ
pbyQmUFYow5vOKyBesndktDaZhJ0nMODoM3hM5W8dYi54J5X8ttuVnhdkts2+rZ0
W5Cqauje3AZapuylQBpX50yu63qhj1qoPQpcM1/NWWox/CsTwAGBQaclZ/psNJDg
J3f0zYeue7vfXUYn3Mv8dKtBAi7D4q654F5OQ2fpTD55FBl/09oKGDTLa32hLK/y
7uE3jjYC0T1hmaMczJEaYWY69/53LtTqoejpFzjhS9nFAeMVxFf2+tBJffRlVphO
lfXVO65yOg7HGTMKtZ5XA0tp6dWk2MiZwZlzRwD2nwNQcmbz
Generated at Mon Oct 9 09:16:13 2023 by rpki-client on console-fra.rpki-client.org