Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213305.roa
File: AS213305.roa (raw, json)
Hash identifier: qWrSqc12it2VEdDyNYZjlrQizcMKxCPiSfHI7heL7nI=
Subject key identifier: 89:1B:50:CF:DA:AE:86:05:3D:F5:30:A7:3E:C9:53:CB:F7:51:32:A0
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1FE36362BD6EF897FAC12FD578174C50B4A9414A
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213305.roa
Signing time: Thu 09 Mar 2023 14:58:28 +0000
ROA not before: Thu 09 Mar 2023 14:53:28 +0000
ROA not after: Thu 07 Mar 2024 14:58:28 +0000
asID: 213305
IP address blocks: 193.29.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e3:63:62:bd:6e:f8:97:fa:c1:2f:d5:78:17:4c:50:b4:a9:41:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 9 14:53:28 2023 GMT
Not After : Mar 7 14:58:28 2024 GMT
Subject: CN=891B50CFDAAE86053DF530A73EC953CBF75132A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:fd:2b:1d:be:b5:37:cb:65:24:73:b1:29:
a8:f1:e5:75:d2:47:de:38:d6:dd:7d:4a:d4:af:c7:
35:36:78:23:62:31:36:40:7b:17:ca:33:e7:52:78:
21:f8:8a:d3:9b:84:b9:40:70:85:a1:9d:8c:03:b1:
81:d0:de:a8:64:05:9f:aa:8d:5b:4c:50:0c:f2:58:
cc:93:46:92:96:01:fb:6a:66:f9:b8:06:de:70:e7:
0d:b9:32:f9:81:4a:52:0f:95:db:30:5d:af:39:9d:
d9:1f:b3:99:fa:db:5c:8b:45:52:f8:8e:48:8c:4e:
1e:d5:26:2b:5d:4e:d2:29:29:42:e0:0a:eb:65:2a:
1b:eb:4d:44:15:15:bd:72:ae:97:d8:fc:00:a2:53:
4d:33:f5:4d:4e:9e:b5:c0:31:2d:d4:23:42:59:01:
21:4a:20:d1:e2:88:43:a3:66:2c:ce:a3:2b:c6:00:
ab:3b:86:22:ae:46:fe:a3:fa:67:e5:14:f3:d5:42:
28:a6:73:f9:56:de:b3:b5:3f:0e:08:5d:11:21:9d:
53:fc:b7:58:5a:e8:13:87:f0:62:a9:e5:19:08:f1:
35:e1:bf:92:01:39:35:70:c5:79:fd:e7:43:72:80:
e0:5a:40:03:a1:6f:82:62:a6:42:4b:26:8e:d3:c0:
53:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1B:50:CF:DA:AE:86:05:3D:F5:30:A7:3E:C9:53:CB:F7:51:32:A0
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.98.0/24
Signature Algorithm: sha256WithRSAEncryption
69:5c:f4:cc:01:8e:3c:41:9c:bc:6d:41:1a:2b:e3:0d:e6:95:
a9:43:19:2e:e1:de:29:e8:fd:f2:9c:90:f5:f6:f9:db:9d:2d:
c1:77:b7:20:63:73:e7:be:83:19:08:a1:4e:41:64:98:04:30:
c6:d5:24:40:8d:36:f5:e8:5c:76:c9:bc:39:5d:f7:c6:14:31:
9d:3d:01:2f:31:63:38:bf:56:26:a6:cf:63:b5:65:13:de:73:
d1:5d:2a:cb:42:4d:68:9d:ac:1f:c3:13:01:34:07:3d:e6:0e:
13:94:42:59:dc:f2:90:33:ea:bc:16:14:62:a8:d0:ea:88:f8:
bb:3c:26:c3:c3:ba:ab:d8:bd:d4:e5:45:e8:73:0e:2f:7b:e2:
d3:ef:c2:53:85:4f:dc:f2:35:56:6b:84:26:52:d3:72:d0:79:
ac:0a:3c:53:19:16:b9:ec:61:6d:3e:60:01:e5:89:af:38:17:
39:3b:43:f2:8d:56:c5:83:b5:1d:35:1d:7c:29:11:42:80:cb:
54:06:a6:cd:0e:09:e4:e7:5e:9d:c5:98:ba:38:38:00:3b:9a:
50:b1:01:af:68:26:8f:54:40:bc:f0:0e:91:66:06:28:f1:67:
00:c3:99:28:5d:32:d9:c0:21:b0:fc:a0:e1:bd:27:4c:7e:53:
7c:a3:eb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org