Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: b5trxb0XElELaS0Vkf+M7vpSt4/QV9Wc1C4FNZ/6w/I=
Subject key identifier: 79:A4:CD:ED:AA:03:AC:D7:6C:9B:53:BE:D7:40:4B:32:07:A1:19:0A
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 41F17C5A9D55E093F7775CAB2138424B87B5EEF8
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS57043.roa
Signing time: Tue 20 Jun 2023 08:28:33 +0000
ROA not before: Tue 20 Jun 2023 08:23:33 +0000
ROA not after: Tue 18 Jun 2024 08:28:33 +0000
asID: 57043
IP address blocks: 193.142.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f1:7c:5a:9d:55:e0:93:f7:77:5c:ab:21:38:42:4b:87:b5:ee:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 20 08:23:33 2023 GMT
Not After : Jun 18 08:28:33 2024 GMT
Subject: CN=79A4CDEDAA03ACD76C9B53BED7404B3207A1190A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:3c:6c:9f:d1:0e:49:05:e2:04:2c:76:2e:
70:16:fc:f8:89:58:8c:13:de:f6:e4:79:2e:ba:79:
65:07:ec:4f:f6:a3:57:60:7e:17:cf:7e:03:01:86:
0a:28:86:0e:59:7b:ef:a3:51:bc:0f:10:3a:96:90:
26:eb:a1:b1:16:f1:c7:d2:56:20:1c:9a:8e:0f:f8:
ec:b0:25:a2:a1:67:1d:47:65:41:65:dc:43:b3:69:
bf:00:d2:23:20:35:f4:c3:30:b9:1a:b5:7b:98:93:
99:f5:3e:6c:40:0c:e1:32:cf:23:53:06:ab:1a:b2:
f2:d5:a1:e5:78:e6:ad:a2:cf:76:8d:11:a8:e9:73:
40:d5:be:9b:ec:d3:2f:40:46:07:71:7a:e1:11:f9:
e3:de:d6:26:3a:91:db:05:4f:1c:de:0f:82:6b:22:
a6:44:b5:af:91:e3:54:27:7f:b4:ce:a7:7b:f7:13:
8f:e9:a3:66:32:c7:18:88:b2:d8:d9:64:c4:fc:c9:
99:75:8b:cb:02:39:37:ba:b7:0b:b6:f5:3f:22:e5:
55:58:6f:4c:54:f6:af:c0:94:37:7d:e5:1e:ef:e7:
81:22:2f:b9:98:ec:d2:d4:b8:f2:3b:84:78:45:89:
40:e3:bc:fc:dd:3b:75:8d:cd:42:15:cd:ce:b6:bf:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A4:CD:ED:AA:03:AC:D7:6C:9B:53:BE:D7:40:4B:32:07:A1:19:0A
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.18.0/24
Signature Algorithm: sha256WithRSAEncryption
32:41:29:29:a1:8b:4c:f9:d3:66:57:28:59:32:80:72:1c:ee:
84:16:18:5e:2a:cf:99:64:24:b1:a8:3d:c8:45:73:43:3b:13:
18:7b:41:96:cf:f5:5d:25:ad:e1:ac:c3:dc:f0:8b:f9:41:bb:
15:81:b8:e3:86:fc:a4:93:4a:24:40:29:07:c9:c1:5a:c8:5f:
1a:16:c0:21:d4:23:f6:9c:29:fe:7c:9c:46:5e:33:6d:35:97:
61:c7:47:e1:d4:c6:db:02:68:c2:1e:e8:7d:3e:28:ac:0d:ad:
2e:4e:c1:1b:7c:2b:82:a4:5a:8b:9b:3f:a2:33:d2:63:08:0e:
22:1e:3e:0c:01:d3:8f:c8:70:a5:47:53:85:2a:54:35:a6:d0:
c7:3e:9d:2b:b2:d7:17:b5:d0:68:ed:9c:46:59:14:eb:92:7f:
94:2e:0d:93:66:89:f2:db:7e:ea:9d:be:70:e2:65:35:5b:2e:
04:3c:26:b3:65:e3:1d:46:f6:fc:7c:49:dd:5e:24:8c:2a:a8:
30:fd:33:28:22:dd:f2:a8:8b:db:80:63:ff:97:e2:76:bf:42:
53:7d:c5:06:55:90:b8:33:3b:22:38:de:bb:e3:3a:5b:52:9c:
c1:c1:81:1a:de:25:2b:ac:9f:0d:81:b1:96:7f:eb:24:6b:ca:
bf:34:53:ea
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUQfF8Wp1V4JP3d1yrIThCS4e17vgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yMzA2MjAwODIzMzNaFw0yNDA2MTgwODI4MzNaMDMxMTAvBgNV
BAMTKDc5QTRDREVEQUEwM0FDRDc2QzlCNTNCRUQ3NDA0QjMyMDdBMTE5MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Xjxsn9EOSQXiBCx2LnAW/PiJ
WIwT3vbkeS66eWUH7E/2o1dgfhfPfgMBhgoohg5Ze++jUbwPEDqWkCbrobEW8cfS
ViAcmo4P+OywJaKhZx1HZUFl3EOzab8A0iMgNfTDMLkatXuYk5n1PmxADOEyzyNT
BqsasvLVoeV45q2iz3aNEajpc0DVvpvs0y9ARgdxeuER+ePe1iY6kdsFTxzeD4Jr
IqZEta+R41Qnf7TOp3v3E4/po2YyxxiIstjZZMT8yZl1i8sCOTe6twu29T8i5VVY
b0xU9q/AlDd95R7v54EiL7mY7NLUuPI7hHhFiUDjvPzdO3WNzUIVzc62v4UTAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUeaTN7aoDrNdsm1O+10BLMgehGQowHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNTcwNDMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBjhIw
DQYJKoZIhvcNAQELBQADggEBADJBKSmhi0z502ZXKFkygHIc7oQWGF4qz5lkJLGo
PchFc0M7Exh7QZbP9V0lreGsw9zwi/lBuxWBuOOG/KSTSiRAKQfJwVrIXxoWwCHU
I/acKf58nEZeM201l2HHR+HUxtsCaMIe6H0+KKwNrS5OwRt8K4KkWoubP6Iz0mMI
DiIePgwB04/IcKVHU4UqVDWm0Mc+nSuy1xe10GjtnEZZFOuSf5QuDZNmifLbfuqd
vnDiZTVbLgQ8JrNl4x1G9vx8Sd1eJIwqqDD9Mygi3fKoi9uAY/+X4na/QlN9xQZV
kLgzOyI43rvjOltSnMHBgRreJSusnw2BsZZ/6yRryr80U+o=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org