Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: iDof1UlY1JaV5t/7hVimYvcFndBRlUQQpmjCXBYJx/0=
Subject key identifier: E7:86:8F:D4:4E:8C:AE:EC:31:A8:E7:28:A6:EB:CC:69:81:56:30:E5
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5F95CC0E49FAB7FE57E9902B5F4442E733784700
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS25198.roa
Signing time: Wed 17 May 2023 08:10:19 +0000
ROA not before: Wed 17 May 2023 08:05:19 +0000
ROA not after: Wed 15 May 2024 08:10:19 +0000
asID: 25198
IP address blocks: 194.113.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:95:cc:0e:49:fa:b7:fe:57:e9:90:2b:5f:44:42:e7:33:78:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 17 08:05:19 2023 GMT
Not After : May 15 08:10:19 2024 GMT
Subject: CN=E7868FD44E8CAEEC31A8E728A6EBCC69815630E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:28:b9:3a:10:52:aa:70:fe:9c:e0:e9:ad:
f3:73:34:72:be:1e:24:7c:22:5f:7f:49:e3:8e:df:
ec:f5:08:b9:b7:74:09:76:a9:e9:21:10:c7:86:66:
bb:2e:1d:8d:95:ea:70:04:27:4b:59:34:04:dc:7c:
f2:18:b6:22:a2:d9:a6:e8:2e:ef:a5:9a:77:ff:36:
88:f1:22:a8:34:67:fa:00:f0:6e:57:2e:92:0d:05:
25:8d:c8:d9:6c:03:f4:b3:e0:5e:7c:81:6e:a4:ee:
80:94:36:5f:fb:5a:a4:23:c7:ac:c7:90:e1:02:ba:
be:7c:f0:38:90:23:1c:84:0b:30:e4:97:60:d4:98:
b9:9f:7e:2a:11:7c:60:db:a8:bc:98:6a:1d:28:13:
0f:45:32:ef:19:92:06:4a:c9:dc:94:da:b2:ff:c3:
00:e3:d1:41:df:c0:63:da:7e:14:5d:29:76:10:6f:
4b:8a:bb:2b:32:49:11:75:74:f0:b4:3b:be:34:80:
53:9c:c0:99:75:07:a3:81:f7:8e:81:a7:8d:27:35:
70:73:b9:86:02:2c:27:61:70:13:f2:05:86:38:b9:
28:ba:b1:a0:9e:4c:fd:b5:f1:96:94:8c:67:5f:c4:
31:27:6e:12:d3:6e:02:de:db:9d:3b:c0:63:5e:3e:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:86:8F:D4:4E:8C:AE:EC:31:A8:E7:28:A6:EB:CC:69:81:56:30:E5
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.226.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b8:42:54:21:81:b9:bf:9c:f0:33:6e:3b:05:49:36:39:3b:
e7:45:ac:c6:e2:4d:ca:93:aa:a0:ff:56:04:da:8e:93:4d:0e:
0d:6f:29:69:53:dc:54:1e:94:c9:93:6d:f1:e9:6c:c3:93:d8:
f3:4c:0c:07:fa:38:31:12:aa:1b:df:dc:cc:bb:37:fa:47:9f:
d9:6e:d1:2a:e4:74:d0:7c:aa:36:64:7e:36:d2:87:e3:5e:89:
a3:20:df:9e:bd:a8:c3:51:07:a9:e7:60:d0:c8:a1:84:a2:f4:
b9:a1:ec:a7:41:8d:b5:72:0a:6b:0c:8a:f5:b7:1e:9d:6f:88:
68:4c:f9:e8:dc:c4:97:da:51:ba:63:96:79:63:9c:58:41:a5:
fe:1d:33:4e:0a:f8:e9:ce:e9:6f:90:5f:82:d8:fc:43:60:6f:
e9:e2:7b:cd:ce:60:d6:44:c8:95:84:36:dd:7b:60:a1:5d:35:
87:c8:4a:4d:d1:9f:fd:0c:3c:1c:16:e2:18:3a:67:ec:59:9b:
e4:49:64:d2:e2:f4:71:f9:51:6f:8b:8d:01:2a:b2:f3:ff:2d:
31:59:8d:d9:cb:50:63:00:98:8f:99:8d:57:34:2d:a2:f6:6b:
cc:01:25:e1:4a:59:a7:5f:bd:99:a0:75:d6:e9:b2:5f:dc:48:
12:86:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org