Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212886.roa
File: AS212886.roa (raw, json)
Hash identifier: KrVZ3o1h2XJXZY6G3i53U/p0B87nuzRy6OuRMYi116A=
Subject key identifier: 85:46:7A:79:81:7E:9D:8C:94:47:27:A1:97:5F:69:1D:90:A0:C9:ED
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 7084EBC0F509DC83F44930BFE22F1405A17AF813
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212886.roa
Signing time: Thu 29 Dec 2022 12:26:38 +0000
ROA not before: Thu 29 Dec 2022 12:21:38 +0000
ROA not after: Thu 28 Dec 2023 12:26:38 +0000
asID: 212886
IP address blocks: 192.166.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:84:eb:c0:f5:09:dc:83:f4:49:30:bf:e2:2f:14:05:a1:7a:f8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 29 12:21:38 2022 GMT
Not After : Dec 28 12:26:38 2023 GMT
Subject: CN=85467A79817E9D8C944727A1975F691D90A0C9ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:51:02:22:15:ed:9f:28:2c:48:e5:fb:39:
e0:4e:35:ee:0e:86:0b:a5:27:bb:58:09:b0:77:4a:
39:4f:55:bf:a7:3e:1f:63:e8:9b:6d:2a:17:03:76:
56:8e:19:ef:08:52:19:e6:79:32:67:5c:43:d3:7f:
dd:7f:f4:78:d4:74:d9:18:fc:0b:a4:13:f9:90:4a:
3d:12:43:53:86:7e:ae:6c:78:c1:4e:95:52:d8:57:
d9:27:66:75:f1:f1:04:36:0d:dd:11:69:d7:4a:87:
3e:26:21:01:2c:14:55:cb:57:36:6d:4f:54:d7:6d:
ef:97:2b:ec:3e:8d:48:36:a2:e8:d0:c6:a7:e9:a8:
ae:d8:e4:87:24:44:46:4c:27:c8:af:ae:ea:b3:d2:
de:10:2f:55:5d:51:f6:76:b5:f5:2a:8b:07:34:d4:
da:50:21:89:d3:2a:fc:72:4d:19:0e:78:2a:a5:70:
a7:e0:c2:28:71:18:90:0b:a9:97:89:f0:8f:c1:88:
fc:38:16:bc:95:87:3f:0e:e4:e8:5c:25:59:f1:f9:
ee:fb:66:5b:79:ea:58:a6:85:fa:2c:ff:18:4c:86:
6c:7b:6e:8f:42:27:d1:a4:e6:db:f1:7a:7e:2e:f5:
2b:56:af:f6:69:c5:1d:70:e1:81:4b:e4:59:10:fc:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:7A:79:81:7E:9D:8C:94:47:27:A1:97:5F:69:1D:90:A0:C9:ED
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.82.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c8:96:aa:9c:34:eb:c9:9e:1d:30:4b:02:be:02:ee:0d:5e:
d8:2e:2e:ff:43:bf:72:63:29:2f:bd:95:35:26:c5:47:48:ab:
ee:af:76:df:f8:26:0b:78:1a:07:bd:63:06:72:e6:b8:27:e6:
25:ff:8f:bb:98:6b:d3:5e:f5:aa:71:6a:3f:3e:43:48:84:7d:
95:a0:01:f5:9e:ca:9f:f8:48:96:bb:df:ac:25:2d:b8:b4:0e:
f1:2a:7d:40:a4:4d:f6:20:56:d4:50:71:8b:9e:f6:9a:d1:fa:
81:60:08:42:ac:1b:d1:82:2b:d6:1c:29:4f:45:04:15:7a:14:
54:02:27:a9:60:09:58:4a:59:62:e8:97:8a:22:77:85:be:51:
2d:8a:81:38:f5:5b:3e:48:86:64:c2:92:2a:b8:dc:15:70:bf:
35:ab:6f:57:21:e5:e1:bb:29:31:63:84:ba:b3:a7:8e:a3:71:
fe:3d:8a:4e:a4:18:52:f5:43:24:99:9a:50:a7:6e:cf:12:eb:
7b:00:65:f7:04:4f:8c:e3:d7:d9:18:1f:2b:28:5e:33:21:d8:
8e:4e:d0:0f:51:7a:61:04:ff:e5:1c:4f:b8:d7:3b:a3:72:0a:
c8:46:e0:67:13:22:d3:33:9c:0f:3e:9e:55:1b:93:0a:40:80:
8e:b6:0d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org