Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS216310.roa
File: AS216310.roa (raw, json)
Hash identifier: ObDNCHpCU2ZHXgxkBU0CecENh4RrWOJGlMfiaMqv2Uk=
Subject key identifier: E5:57:21:04:F8:D2:96:90:9C:3D:0A:F1:CA:35:87:53:45:DF:66:70
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 43AB186766ED1DC6FA4B914AA256F5557820C82E
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS216310.roa
Signing time: Fri 12 Jul 2024 21:35:12 +0000
ROA not before: Fri 12 Jul 2024 21:30:12 +0000
ROA not after: Fri 11 Jul 2025 21:35:12 +0000
asID: 216310
IP address blocks: 91.199.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ab:18:67:66:ed:1d:c6:fa:4b:91:4a:a2:56:f5:55:78:20:c8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 12 21:30:12 2024 GMT
Not After : Jul 11 21:35:12 2025 GMT
Subject: CN=E5572104F8D296909C3D0AF1CA35875345DF6670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:a8:df:96:30:4b:d8:68:aa:8b:a1:dd:2f:
28:37:14:0c:b1:38:68:37:38:52:d8:9d:f9:29:22:
fc:7d:52:84:61:4b:95:60:53:50:f3:4d:27:b8:5e:
a5:b5:42:d8:1f:fc:31:69:61:ad:d7:69:68:e9:89:
cf:a5:03:0b:9a:0b:07:93:67:26:59:b2:e3:86:a1:
f5:29:15:f8:60:62:73:03:ca:7c:82:b7:4f:f2:73:
9f:f2:2f:65:ef:bd:b5:9f:c7:f5:89:9a:b4:1d:83:
7a:18:e0:8f:e2:2c:1f:9f:86:ee:3f:8a:96:88:08:
a5:3a:8d:14:24:5e:76:84:54:69:38:6c:41:20:17:
b8:1f:93:28:c7:48:fc:30:5c:bb:39:20:8a:78:c9:
2a:4a:4a:c1:0e:1a:cb:ce:3b:04:6e:d7:e4:68:5a:
11:c4:9b:4b:36:5d:16:4f:40:96:7d:7a:18:45:4a:
8b:ab:7b:34:13:8c:79:b6:df:96:de:cc:a6:03:40:
e9:98:4d:9f:75:a7:0c:70:f8:69:64:50:cd:06:04:
ea:3b:cf:04:d4:30:c9:5b:84:ca:6e:3f:20:f4:87:
6a:67:e3:e0:f5:28:45:58:f1:c5:5a:54:cd:4a:ce:
d7:cf:77:72:4c:3f:6d:72:13:66:6e:4b:e1:72:b3:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:57:21:04:F8:D2:96:90:9C:3D:0A:F1:CA:35:87:53:45:DF:66:70
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS216310.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.163.0/24
Signature Algorithm: sha256WithRSAEncryption
22:8b:5c:67:77:2a:cc:d2:da:36:2e:eb:25:69:44:0d:df:9c:
1d:ab:7a:e6:8e:ec:9b:78:1e:31:19:92:8f:5b:90:f0:44:56:
55:a3:f6:b6:a6:d7:45:b1:bc:3f:a8:42:82:28:8a:d4:81:27:
5f:1e:75:4a:1a:fc:7b:58:e1:67:3d:e9:bb:77:57:1b:45:47:
08:39:d4:4e:9b:52:2e:29:ad:f4:19:4e:44:62:a9:22:15:75:
58:03:d2:df:3b:0e:c1:84:11:f2:59:76:15:a7:8b:c4:b4:ce:
ca:76:d3:f3:66:34:1e:20:83:12:ba:69:1b:e1:d7:7f:5c:a6:
4a:d9:6f:b1:07:7c:1a:39:92:8c:4a:d3:4f:59:3b:d8:58:d6:
3e:34:98:17:b8:9d:af:9d:8d:79:8a:ab:d4:29:b9:dc:ae:98:
c1:01:b5:41:27:92:67:b6:21:91:2d:fb:46:9d:d4:1b:09:23:
6a:50:1a:12:92:10:e3:2b:cf:f3:8a:a5:b4:54:63:2f:33:ea:
6c:b2:2d:d4:c7:53:74:16:93:53:90:c1:70:fc:0b:29:dd:5a:
3b:52:3b:17:f1:83:87:ec:e6:2c:6c:12:40:a4:19:29:bb:ab:
f2:78:c6:9c:c2:e0:8f:3a:ab:5f:e3:02:5c:37:42:fd:0b:0b:
ae:8a:ec:2c
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 12 01:17:29 2024 by rpki-client on console-ams.rpki-client.org