Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS140096.roa
File: AS140096.roa (raw, json)
Hash identifier: 4Y/JNZOVF3zVtzIiZpD2/y9LA0bZQo9OsuujuVvZc2c=
Subject key identifier: 34:51:D9:78:8D:7D:71:B0:BE:A5:6E:59:82:B6:EA:AE:CB:70:C4:40
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 73157168B1CEEF9CDC40D193B066888E067151EF
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS140096.roa
Signing time: Tue 27 Dec 2022 14:44:40 +0000
ROA not before: Tue 27 Dec 2022 14:39:40 +0000
ROA not after: Tue 26 Dec 2023 14:44:40 +0000
asID: 140096
IP address blocks: 141.11.170.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:15:71:68:b1:ce:ef:9c:dc:40:d1:93:b0:66:88:8e:06:71:51:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Dec 27 14:39:40 2022 GMT
Not After : Dec 26 14:44:40 2023 GMT
Subject: CN=3451D9788D7D71B0BEA56E5982B6EAAECB70C440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:59:32:3c:73:6b:91:be:74:91:b8:e8:2f:
1a:32:37:7b:de:c7:5e:af:82:e3:ce:d7:02:1b:3e:
76:fe:78:93:17:b0:40:f0:0f:ec:94:65:31:12:45:
49:0b:c2:f9:8b:4f:e5:2b:10:c1:6e:d9:e5:cc:c6:
45:98:a1:80:8f:86:87:50:5a:e9:3a:17:d8:9f:7d:
78:75:cc:fd:0f:6f:18:1c:74:3d:3f:78:dc:8f:48:
1e:c5:c7:d2:a7:e6:f1:2f:7a:24:f9:ca:34:af:0e:
4c:c6:00:6d:ab:c2:1a:36:28:35:1d:e0:ff:ce:98:
ef:49:44:c2:92:67:50:73:91:55:83:af:00:68:ec:
28:dc:6a:e9:48:38:b1:34:ec:fd:7b:55:c2:27:b2:
0a:a4:ea:f5:be:c5:e1:9a:cc:e1:8f:07:fc:a5:6d:
7d:d5:c4:d4:39:f5:b3:e2:31:33:3c:8b:54:92:3f:
26:1a:91:e0:ed:57:24:24:59:d3:25:53:7e:1c:82:
34:98:98:80:99:22:f0:2b:a1:c1:6e:49:24:be:ec:
9d:33:55:38:a6:3d:52:c7:f0:53:d2:53:56:7a:a6:
f7:90:ed:62:bd:b9:bb:49:a0:6f:e0:ae:a1:69:10:
16:92:8f:ad:ef:f3:f5:c9:af:27:7a:dc:5f:57:a0:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:51:D9:78:8D:7D:71:B0:BE:A5:6E:59:82:B6:EA:AE:CB:70:C4:40
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS140096.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.170.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:b1:0f:7f:3b:0e:03:39:14:df:3b:7e:24:08:1b:e0:c8:9c:
cb:5a:32:f2:68:34:0f:40:18:67:01:94:ce:38:d3:c6:6f:5f:
24:92:a9:79:a6:d6:34:e0:b4:bd:19:14:7f:f3:8b:3c:bc:42:
dd:fc:24:f6:eb:7c:82:26:c6:46:62:c4:0d:b8:1d:f2:13:20:
e4:0a:63:90:38:39:ce:5e:96:a0:53:ea:f8:28:70:62:83:3b:
03:b1:c8:7b:60:29:e4:26:01:08:76:fa:84:2a:21:7d:50:33:
21:89:e4:ca:c8:f7:ff:a2:29:ad:47:c4:2e:08:37:23:00:31:
a2:6a:4a:d6:8b:10:e2:5b:83:4c:ba:94:7b:ae:0a:9b:3c:6d:
12:fe:0c:8c:4b:4f:ea:10:8a:f2:b1:a6:68:79:f9:45:2c:6e:
10:3c:3d:79:74:df:b2:5b:76:c5:88:3f:e1:52:df:ae:39:08:
48:11:22:f5:41:a4:83:55:5e:79:e3:b9:dd:5f:40:61:80:b0:
8a:17:c4:9c:7b:63:fa:9f:47:90:15:e0:ef:aa:d8:15:f9:1b:
17:ca:3f:11:26:74:56:42:14:a9:8d:51:1c:c5:cc:fb:29:14:
fd:5b:11:83:fe:01:d2:39:e2:f1:08:84:42:1e:4c:a1:d5:ea:
d0:4f:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org