Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212728.roa
File: AS212728.roa (raw, json)
Hash identifier: eLCgOU9Bu6da/bGEpA+/lYN7KoyF2Mfxpov9mArl2jE=
Subject key identifier: 44:4E:47:21:0A:85:6F:F6:E5:91:F3:55:92:1B:A8:13:18:BE:9A:38
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 4D6F10160494847AD9F462ABD27B1278E2A4E72B
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212728.roa
Signing time: Fri 31 Mar 2023 16:21:29 +0000
ROA not before: Fri 31 Mar 2023 16:16:29 +0000
ROA not after: Fri 29 Mar 2024 16:21:29 +0000
asID: 212728
IP address blocks: 141.98.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6f:10:16:04:94:84:7a:d9:f4:62:ab:d2:7b:12:78:e2:a4:e7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 31 16:16:29 2023 GMT
Not After : Mar 29 16:21:29 2024 GMT
Subject: CN=444E47210A856FF6E591F355921BA81318BE9A38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:0f:28:00:ab:40:70:6e:76:e5:2e:44:ac:
77:82:d1:4c:5d:eb:b3:47:2e:70:40:cf:c5:d5:62:
8c:03:1e:c8:fd:e1:ed:ee:68:55:e7:cb:f8:24:80:
40:b3:64:a2:d9:99:d8:a3:88:de:6e:9b:18:dd:6a:
0f:d6:e3:34:8e:3a:26:83:b0:84:14:a9:9a:86:df:
26:07:49:b7:d4:b6:46:77:0d:5c:0a:de:16:b9:4b:
87:e7:75:fe:92:4d:e3:8a:18:f2:e4:40:84:30:51:
17:6a:3a:47:ec:74:50:0e:8e:2e:b7:a5:bf:2e:fa:
af:3c:60:06:14:3d:c9:8c:cd:c1:22:0a:c8:0d:a1:
d6:2b:f1:ee:31:68:a4:3a:19:b8:71:f3:fb:b4:f2:
91:5a:6e:40:10:7d:92:3d:ad:1d:57:e7:45:4d:cd:
c7:f4:47:a6:dd:6a:cb:94:d9:14:f3:94:ec:9c:66:
14:50:47:55:51:03:ff:da:9f:ec:e5:39:85:5c:64:
4f:6a:b1:3f:00:1e:f5:49:e2:6e:6d:ea:43:74:54:
8a:dc:54:43:a8:84:88:04:93:16:ae:d9:a7:c0:22:
9e:21:0d:eb:f7:ef:3c:cb:8e:51:f6:bc:8e:8b:4d:
83:10:7d:54:3c:54:66:70:26:74:ff:5c:e1:6b:3e:
55:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4E:47:21:0A:85:6F:F6:E5:91:F3:55:92:1B:A8:13:18:BE:9A:38
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.157.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ad:4a:dd:ed:eb:51:84:c6:2f:19:22:94:ac:fb:9f:fe:eb:
07:cf:6a:5d:ec:e8:c1:2a:cc:d6:a6:65:95:63:ed:72:56:12:
26:6a:b9:b1:77:60:b8:fd:eb:af:3c:17:1c:78:0d:16:c3:a2:
8f:3e:41:c7:99:b3:98:3f:d4:d0:91:94:0c:dc:4b:b9:4e:f8:
23:d0:e5:00:e8:30:17:53:c8:b9:9c:4a:cb:b6:83:5d:1d:db:
80:aa:0f:54:b8:ac:7e:a7:98:be:bd:31:be:23:d7:7c:0e:f9:
43:9c:c2:04:00:f8:70:d2:73:e1:af:f8:6e:00:dc:8d:29:f8:
c4:8c:8e:fa:d5:d0:16:23:d0:4a:53:09:70:0a:17:96:8a:52:
7e:61:91:7f:4b:69:67:10:45:3f:18:ef:57:99:0e:dc:a8:7b:
59:ee:0f:49:bf:a9:0f:91:e9:88:74:38:b0:72:bb:21:97:e5:
1f:62:04:b1:65:df:7f:af:fb:20:66:61:84:d0:e8:e1:bd:e6:
34:df:9b:aa:b8:87:e1:05:e8:9c:a7:e2:ed:4e:82:2a:31:a7:
73:d3:13:69:44:1a:80:08:cc:72:54:e4:25:8a:61:e9:5b:a5:
28:db:7e:96:93:e8:5a:06:c7:06:24:4d:fd:0b:49:fb:b0:b2:
da:46:a0:51
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 26 14:33:07 2023 by rpki-client on console-ams.rpki-client.org