Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS29119.roa
File: AS29119.roa (raw, json)
Hash identifier: kHRcUd6WYMKKxHWQrvvo1EiQvkgCBkuLnS2Sqo+PV4c=
Subject key identifier: B0:72:A8:CF:0F:EC:8A:32:AC:B7:50:ED:91:4E:5F:93:69:73:38:0B
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3B3D188B5BFC8036CB8DD74A5A255EC06F3E9399
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS29119.roa
Signing time: Fri 20 Jan 2023 14:01:10 +0000
ROA not before: Fri 20 Jan 2023 13:56:10 +0000
ROA not after: Fri 19 Jan 2024 14:01:10 +0000
asID: 29119
IP address blocks: 193.151.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:3d:18:8b:5b:fc:80:36:cb:8d:d7:4a:5a:25:5e:c0:6f:3e:93:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 20 13:56:10 2023 GMT
Not After : Jan 19 14:01:10 2024 GMT
Subject: CN=B072A8CF0FEC8A32ACB750ED914E5F936973380B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:eb:75:48:2c:36:f3:99:4d:22:31:0f:db:
e0:44:11:5e:49:30:3f:46:fa:88:f6:38:64:90:01:
ce:9f:a6:24:ac:f6:ed:88:f2:3b:58:81:e1:af:f5:
9f:1a:ac:6c:8c:b5:b7:8a:18:71:52:c9:1c:d0:ba:
38:7d:22:5f:0f:da:4f:21:f1:fe:47:4e:e1:f4:50:
e3:50:34:88:20:dd:99:9b:e7:be:f7:98:7f:1c:26:
d9:21:66:e7:b8:1d:20:63:4a:9f:98:ed:87:ed:f1:
df:ef:12:93:ad:b8:e0:20:37:ed:da:5d:19:ef:18:
b3:2c:c5:a9:8f:01:d5:b5:1f:fe:f2:43:37:64:d8:
c3:50:c2:20:74:4e:40:ac:c8:08:8b:80:03:66:7e:
68:c3:9f:92:41:40:ab:c4:f2:d3:db:2f:61:4b:da:
e7:e2:24:a4:2e:76:83:af:95:d5:36:0e:4a:c8:2a:
4e:13:f0:84:29:7c:a8:d5:09:19:d9:2d:3c:2d:24:
c5:d2:79:31:4e:d1:70:13:f6:96:2e:5a:c5:62:40:
60:da:55:a2:54:d1:13:8c:bd:fb:d8:ad:3a:81:de:
f3:19:82:bf:85:37:82:cb:45:a1:72:03:49:c1:f4:
bf:8c:91:b8:da:40:70:49:60:cc:e4:87:30:a5:6d:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:72:A8:CF:0F:EC:8A:32:AC:B7:50:ED:91:4E:5F:93:69:73:38:0B
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS29119.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.181.0/24
Signature Algorithm: sha256WithRSAEncryption
00:40:8b:ba:21:45:b6:e2:41:e0:29:d1:e1:ef:d4:7f:b3:42:
86:28:b0:8a:59:b0:ad:13:6f:50:53:ff:ba:aa:d4:11:5d:02:
71:83:08:e0:c1:48:13:1e:2f:6e:fd:d9:66:e9:1d:4a:e1:a4:
cf:0d:d7:39:69:03:e0:d9:31:08:68:2c:ab:71:f6:6a:9b:d4:
0a:09:89:f3:0c:b9:53:ec:56:6c:e4:cc:78:cb:39:49:54:05:
74:04:5a:de:78:62:be:bb:fb:99:92:df:b0:3f:57:3d:60:96:
8e:d0:1d:f3:85:5e:5e:2e:24:c8:da:42:45:67:89:ab:df:c2:
85:1f:03:53:e7:ce:c2:4a:4d:1a:1e:5e:2b:a9:9c:e9:22:6f:
bb:32:97:52:9d:ff:ba:b0:5b:c0:08:30:9a:b0:11:30:72:0d:
9d:93:5c:d5:91:b8:07:29:49:ef:c4:13:b1:96:0f:27:66:55:
89:10:98:15:86:52:bc:b4:f7:b4:04:92:33:f1:6f:5e:27:74:
a6:51:59:ee:ee:b5:1e:b2:32:3c:cf:0f:41:54:54:e5:ec:fd:
43:c7:d7:43:4c:28:69:ad:02:32:8f:3f:99:25:9f:4f:6a:0f:
4f:c8:75:94:43:72:c1:e2:b7:5e:22:8c:05:2f:f2:a0:54:75:
53:df:7d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org