Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS1239.roa
File: AS1239.roa (raw, json)
Hash identifier: ob4+CF/k8i52NvTefWpDtE4Sq+Yds6WJJvpAMU1WrsI=
Subject key identifier: 8A:F6:12:4D:49:3B:83:49:6C:02:75:E4:91:56:15:14:36:BC:CA:02
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3BA8DDD7D83918848387CA719C00E21F3B6AEB26
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS1239.roa
Signing time: Thu 15 Jun 2023 14:46:17 +0000
ROA not before: Thu 15 Jun 2023 14:41:17 +0000
ROA not after: Thu 13 Jun 2024 14:46:17 +0000
asID: 1239
IP address blocks: 141.11.68.0/24 maxlen: 24
141.11.69.0/24 maxlen: 24
141.11.236.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a8:dd:d7:d8:39:18:84:83:87:ca:71:9c:00:e2:1f:3b:6a:eb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 15 14:41:17 2023 GMT
Not After : Jun 13 14:46:17 2024 GMT
Subject: CN=8AF6124D493B83496C0275E49156151436BCCA02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:73:ae:10:a4:cf:fe:8f:f6:71:71:99:fa:
7e:93:1b:0b:28:bf:99:a5:99:91:1d:94:9c:de:01:
50:cf:00:30:88:e4:e8:c7:85:81:c2:05:c3:7c:03:
87:3e:88:03:02:d3:4e:d1:8d:1f:91:95:d5:cd:74:
44:e9:4f:24:fd:20:b2:76:a6:ba:a9:d3:c2:fa:07:
3a:12:24:c3:d6:b8:a6:92:80:b3:43:f5:18:26:80:
08:34:ef:cf:61:11:82:48:25:6c:af:48:fb:e4:d6:
0b:dd:98:7f:cc:ca:6a:a0:76:d8:b7:03:c0:fa:01:
66:ef:69:ca:99:6f:5a:1d:3b:76:fd:2b:f3:c9:7f:
65:59:63:33:c7:7b:dd:1a:58:bf:db:a6:57:d1:36:
94:87:25:9f:3f:af:c3:7d:39:63:be:55:2b:41:11:
a6:3f:50:9c:65:86:f0:3e:ef:98:75:84:9c:6b:39:
5c:b5:79:c0:1f:4e:7f:5d:f8:7b:6e:7b:5a:47:1a:
d6:a9:9d:22:bd:0b:50:18:60:e1:72:b0:59:c6:47:
01:03:0c:53:0c:f7:7d:b1:4f:b1:3b:a7:44:c1:ed:
86:f1:58:51:63:d5:94:88:ee:5c:5f:3f:3a:30:78:
7a:ab:d1:4c:43:2f:af:a6:06:3f:2e:67:7f:83:1b:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F6:12:4D:49:3B:83:49:6C:02:75:E4:91:56:15:14:36:BC:CA:02
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS1239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.68.0/23
141.11.236.0/23
Signature Algorithm: sha256WithRSAEncryption
85:0e:31:aa:49:a1:17:d9:e4:8a:9f:9e:cb:a8:fb:ea:da:a2:
94:a3:cd:7b:5c:36:a5:c8:93:b4:d3:19:83:72:b9:c1:f6:20:
5e:3e:f1:25:89:4d:42:9f:ae:5f:eb:48:fa:00:6a:b6:b7:b6:
bd:70:ee:95:f3:bb:b1:71:bc:a7:37:90:3f:a3:bb:22:07:39:
f2:38:d6:5c:b3:b6:75:f2:72:ec:8b:f0:2a:40:b2:e6:ea:24:
71:a6:c6:9c:e5:9b:f3:3c:0a:92:73:fa:cb:cc:9c:d3:f3:1b:
d8:85:fa:4b:b8:96:1d:16:30:f0:14:12:de:0b:b3:b6:b0:a7:
38:18:5e:65:76:44:d5:4c:ae:28:36:0a:87:71:22:86:06:a4:
e1:6a:08:84:a4:6b:d2:a6:b6:e0:86:e5:f6:c8:00:17:50:18:
da:16:d6:fd:b8:b0:88:1c:eb:72:8d:09:c3:2b:f5:0a:9c:87:
a0:c0:2a:07:2b:79:60:60:44:84:7b:7c:22:25:cf:7c:60:ec:
29:d0:d6:ef:7e:3c:cc:9d:bf:2c:b3:c9:70:d9:fc:7d:fa:a0:
b4:b4:34:a8:84:2c:32:2b:02:c4:ac:1f:bf:05:be:61:d0:00:
b9:e3:a9:04:ef:3d:f6:57:49:94:75:5c:58:9c:f6:ca:c4:8d:
2d:f4:0e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 00:30:45 2023 by rpki-client on console-fra.rpki-client.org