Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212168.roa
File: AS212168.roa (raw, json)
Hash identifier: iofiIIGS36RiwtaPeYrSj5fLbDSXfEK1qjFhyqABEHo=
Subject key identifier: 3A:C8:C5:AB:42:3A:48:C7:90:FC:84:27:C9:D7:4C:2E:C4:82:BB:72
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6D5F033839B92B64A33BD3164348C3E3C21FCE8B
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212168.roa
Signing time: Tue 20 Jun 2023 00:41:39 +0000
ROA not before: Tue 20 Jun 2023 00:36:39 +0000
ROA not after: Tue 18 Jun 2024 00:41:39 +0000
asID: 212168
IP address blocks: 176.105.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:5f:03:38:39:b9:2b:64:a3:3b:d3:16:43:48:c3:e3:c2:1f:ce:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 20 00:36:39 2023 GMT
Not After : Jun 18 00:41:39 2024 GMT
Subject: CN=3AC8C5AB423A48C790FC8427C9D74C2EC482BB72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:54:ca:fa:fa:07:2c:0b:b5:68:74:a1:ba:
c0:4f:e7:8d:0f:ed:c5:7c:1f:39:53:da:fa:61:49:
21:04:b0:ae:5d:32:6a:23:c7:61:2f:5b:bd:6f:e8:
cc:4c:16:13:5f:1b:db:ef:61:37:88:56:50:69:31:
0a:cd:28:5a:c5:62:c9:ea:b2:99:5d:cd:cf:9e:3a:
3a:6e:b2:67:34:41:c9:a6:83:71:65:51:e5:ce:d4:
4b:8d:2d:4f:f1:4b:6d:28:88:37:1b:34:a7:62:bf:
58:7c:56:68:3a:a0:a6:51:8d:8b:21:ee:e7:c5:4d:
86:82:b8:86:06:a2:3a:d9:46:6f:a6:3b:7a:17:96:
3c:53:74:dc:37:10:ed:c1:4d:7e:e0:a0:d0:b0:d2:
68:04:a4:68:fd:1f:ed:10:69:2a:f6:b5:03:c2:89:
cf:92:06:a3:a0:b4:21:07:14:49:7b:5e:9c:16:e9:
6f:1f:be:49:94:38:61:90:eb:76:d7:34:05:1b:37:
3f:69:f6:14:35:b9:96:24:8e:b6:92:9b:5f:18:9b:
e7:36:91:71:63:d2:39:08:3f:1e:7a:ec:c0:2f:53:
ff:c3:78:98:eb:9f:f6:d9:8d:90:d3:b9:d8:09:b8:
e8:ef:3c:b1:66:62:e4:cc:07:c2:30:78:d0:a8:f2:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C8:C5:AB:42:3A:48:C7:90:FC:84:27:C9:D7:4C:2E:C4:82:BB:72
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212168.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.227.0/24
Signature Algorithm: sha256WithRSAEncryption
41:40:38:0b:69:36:0f:af:40:52:83:15:a8:6f:dc:02:72:6c:
c4:75:69:91:6c:cd:98:32:6b:79:50:70:4d:f1:f6:18:22:38:
dd:9c:cb:e2:0c:72:9c:74:be:77:53:91:9f:4a:bd:1b:d4:12:
51:15:34:9c:8d:16:4a:5f:87:43:94:4e:28:c1:39:d6:b9:57:
1f:69:a2:70:c8:56:78:04:bd:67:91:59:9e:1b:61:29:8d:9e:
3e:7f:d9:e1:a6:33:d5:9f:d9:59:04:ea:51:bc:3c:09:27:ab:
62:c7:9a:83:c0:2b:63:09:b8:37:5d:d4:96:5e:25:8c:60:a9:
8b:8e:a7:be:15:f5:c0:a5:f2:c9:64:47:85:f8:19:1e:0d:8a:
c6:c0:22:e6:c3:f6:63:00:ee:75:6d:47:33:16:72:5d:11:be:
9e:52:fa:5f:cc:59:2b:57:ca:8c:ee:9c:a2:d3:48:52:aa:b7:
29:4a:4b:19:72:db:3f:f6:9d:9d:e7:d9:50:be:11:62:b2:45:
dc:84:a4:ef:eb:5d:df:ee:2e:6b:e0:19:04:95:be:4d:ff:63:
10:37:48:e0:06:be:cf:bf:81:4e:c5:46:da:7c:20:71:8e:54:
49:7f:87:c6:98:58:d9:60:95:d0:d7:d1:fe:96:c6:2f:32:e6:
13:42:41:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 20 00:25:49 2023 by rpki-client on console-ams.rpki-client.org