Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212815.roa
File: AS212815.roa (raw, json)
Hash identifier: Mg6AHBmooPbEBDd3JBL3dBeXZTiahK2RDx90Hfdg6Tk=
Subject key identifier: 97:FE:F3:28:EB:AB:D6:FD:2F:ED:D8:C2:75:B0:46:A2:5C:18:0B:A8
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 751ABA7F091D01CB0FEC6AB77740EF6358AFB62F
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212815.roa
Signing time: Sun 08 Oct 2023 00:00:08 +0000
ROA not before: Sat 07 Oct 2023 23:55:08 +0000
ROA not after: Sun 06 Oct 2024 00:00:08 +0000
asID: 212815
IP address blocks: 194.147.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 May 2024 00:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:1a:ba:7f:09:1d:01:cb:0f:ec:6a:b7:77:40:ef:63:58:af:b6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 7 23:55:08 2023 GMT
Not After : Oct 6 00:00:08 2024 GMT
Subject: CN=97FEF328EBABD6FD2FEDD8C275B046A25C180BA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:23:af:ef:32:e6:ec:72:19:75:dd:52:46:28:
a2:a2:3e:8c:f5:ed:84:f9:5b:a1:44:53:b1:89:fe:
dc:59:37:ce:b3:10:64:a1:8c:c5:78:18:c5:18:70:
7a:4a:4a:ee:4a:66:46:a1:1d:7a:fd:0c:d6:8f:96:
df:c0:56:49:89:92:bc:eb:83:bc:86:8b:87:db:ec:
3a:d7:da:d3:ce:fb:78:47:b4:a0:81:5b:95:c5:43:
9d:22:8b:c2:dc:b0:a9:0c:7b:7b:bf:b6:28:40:fb:
3c:1b:83:0f:a2:9e:49:5c:eb:6a:5f:43:6d:cf:af:
e3:c6:a0:4e:ec:9c:e2:0b:3b:31:2c:33:da:e8:f3:
c0:94:c2:22:20:a1:e8:64:cc:d4:03:80:39:83:71:
df:f2:76:e9:8f:32:aa:fa:3f:bd:cb:ac:09:3e:3b:
64:93:16:81:cc:6d:53:01:19:ab:12:6d:19:c3:25:
5e:90:ab:30:39:dd:28:52:bd:88:9b:dd:bd:8f:c3:
3d:92:09:af:9f:a5:87:a2:a1:45:b7:b4:17:43:b1:
8f:89:92:af:01:ae:a3:aa:9f:a4:ee:7b:44:81:a2:
e1:c2:c7:dc:2f:ee:3d:1c:bb:74:87:49:b9:5a:8b:
6f:f7:c7:e5:b7:c3:c9:66:a3:9c:e1:da:32:1a:59:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FE:F3:28:EB:AB:D6:FD:2F:ED:D8:C2:75:B0:46:A2:5C:18:0B:A8
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212815.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:d2:d0:ea:b2:1a:8b:8a:6e:41:c1:03:51:35:7c:b0:32:c4:
0b:06:f6:d7:e8:69:d8:8a:83:21:94:48:76:64:aa:8b:65:f5:
28:bb:46:d8:71:45:3a:ec:be:20:0f:62:84:d7:05:78:7e:1b:
50:38:82:49:a7:af:26:65:9f:cc:d8:0e:f5:b9:e6:ad:18:15:
dc:63:bb:cf:69:0b:a0:1c:64:30:14:10:2f:d2:8f:6a:5b:5b:
fd:1a:cd:f8:03:88:7b:93:9c:6b:01:88:3a:5b:ef:b1:40:a9:
a4:da:9e:9c:ea:92:43:f8:7c:f2:3e:a1:35:2a:e6:05:f5:f6:
65:87:f0:ad:30:21:3a:47:bc:07:b1:6f:f1:5f:ec:7a:b3:c3:
cb:59:03:c7:66:2b:f6:96:b7:7c:4e:96:26:48:43:e0:04:1d:
85:79:b1:c3:d2:56:74:b8:70:f1:19:86:a0:b5:de:c1:c8:26:
e7:55:40:0b:ef:c9:02:fb:08:d4:68:67:c5:6a:92:4a:2f:fc:
ba:33:48:5a:e0:c7:ab:71:e6:4e:57:77:40:83:61:4c:b8:68:
e2:4c:97:47:59:aa:5c:3e:b5:51:af:ad:ff:03:53:94:d6:7a:
d7:81:e1:28:a8:2d:88:fa:53:62:8e:e3:e4:cd:79:ee:11:67:
4e:a9:b3:fe
-----BEGIN CERTIFICATE-----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Generated at Sun May 12 00:45:04 2024 by rpki-client on console-fra.rpki-client.org