Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS140155.roa
File: AS140155.roa (raw, json)
Hash identifier: Rda0olezhy5+BrME47lnyqamI389OMvzfJoPYLqKDB8=
Subject key identifier: CD:D5:7F:B8:78:DA:D7:A3:52:F2:38:EF:92:60:8E:4B:A1:CD:8B:96
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4B5809B51000ED1B874D3971FFA7C8B6206E718C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS140155.roa
Signing time: Sat 17 Jun 2023 08:01:44 +0000
ROA not before: Sat 17 Jun 2023 07:56:44 +0000
ROA not after: Sat 15 Jun 2024 08:01:44 +0000
asID: 140155
IP address blocks: 141.11.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:58:09:b5:10:00:ed:1b:87:4d:39:71:ff:a7:c8:b6:20:6e:71:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 17 07:56:44 2023 GMT
Not After : Jun 15 08:01:44 2024 GMT
Subject: CN=CDD57FB878DAD7A352F238EF92608E4BA1CD8B96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:93:1c:e1:08:a8:c3:14:09:ad:c9:fd:42:
1b:2f:17:53:9f:84:ef:4a:89:dd:11:51:71:ab:91:
11:b1:11:03:d5:84:c0:91:6c:5e:9a:bd:0e:85:51:
51:cd:db:0a:3b:59:d2:63:2f:83:4d:83:72:ab:aa:
ad:98:19:ee:f4:77:a0:16:c8:65:75:3d:c5:d7:d5:
17:ee:6e:d9:aa:1f:94:84:60:b0:9c:56:1d:18:a4:
61:a6:06:0e:a1:78:06:c6:76:47:15:fb:8b:39:84:
20:01:ff:c8:0a:9e:95:2c:fb:15:1a:eb:70:c2:e4:
b2:2f:5e:9c:10:ad:44:3b:4e:d6:4f:a9:bf:04:d7:
d7:80:c4:13:50:e0:a6:42:06:c3:99:24:c4:b3:6c:
50:6f:2d:69:8c:cf:1c:d7:dc:45:1a:b2:b6:b0:f2:
fc:0e:cb:de:f6:20:29:03:6a:21:94:b3:71:46:e2:
6f:d0:a7:7f:50:e5:b5:1d:cc:86:26:45:65:06:e6:
f9:15:34:d1:5c:44:88:0d:f7:34:83:d9:a9:d8:c6:
4b:9d:31:59:bb:06:74:bf:8a:f5:33:69:e7:9a:4e:
a8:88:7e:57:ea:f5:f5:c5:8f:a9:6f:ce:4e:3d:a7:
95:b4:3a:69:ab:cf:b2:e1:29:a2:5e:ed:6c:00:dd:
80:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D5:7F:B8:78:DA:D7:A3:52:F2:38:EF:92:60:8E:4B:A1:CD:8B:96
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS140155.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.18.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:83:44:7e:14:21:19:5b:cc:58:99:48:d0:fa:74:62:ed:6b:
47:84:fe:9c:2a:b7:14:13:dc:db:40:73:b6:15:58:15:56:63:
48:a2:f9:6e:4f:72:8c:6b:2b:35:22:35:28:23:de:49:4f:a5:
3f:4b:e9:55:c2:4b:98:8a:f0:ed:ee:40:8c:7f:ff:19:9b:99:
ba:1e:7d:9b:69:c3:c3:38:fc:79:27:78:ba:6e:55:c9:3f:d7:
14:89:66:64:ed:6b:e2:38:eb:cf:9e:a3:86:fc:ca:de:20:f7:
d5:1a:79:78:1a:51:08:b2:f5:ee:0e:3a:3e:bd:63:c2:7b:f4:
96:3f:c1:9d:c5:47:f0:6b:63:50:1f:8c:01:a4:a0:22:db:9d:
b8:7c:90:d3:a5:22:10:64:91:1d:ee:67:db:ca:30:9a:41:84:
ee:0a:97:1d:91:da:01:19:86:80:10:3e:4a:ed:f8:f4:b9:27:
0a:8f:55:9e:1e:f5:66:04:8d:c5:40:1a:39:de:3f:fe:c5:a6:
5d:1a:29:f7:b2:47:66:3e:c9:85:64:63:af:41:6a:95:d4:a0:
f5:4c:28:29:cc:8d:d2:c9:a3:08:2f:3f:eb:0a:fd:0a:8f:5e:
b0:bc:c8:23:5c:b8:f5:67:eb:46:a9:39:a2:06:8b:1f:fa:50:
b9:1a:bc:00
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUS1gJtRAA7RuHTTlx/6fItiBucYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yMzA2MTcwNzU2NDRaFw0yNDA2MTUwODAxNDRaMDMxMTAvBgNV
BAMTKENERDU3RkI4NzhEQUQ3QTM1MkYyMzhFRjkyNjA4RTRCQTFDRDhCOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0s5Mc4QiowxQJrcn9QhsvF1Of
hO9Kid0RUXGrkRGxEQPVhMCRbF6avQ6FUVHN2wo7WdJjL4NNg3Krqq2YGe70d6AW
yGV1PcXX1RfubtmqH5SEYLCcVh0YpGGmBg6heAbGdkcV+4s5hCAB/8gKnpUs+xUa
63DC5LIvXpwQrUQ7TtZPqb8E19eAxBNQ4KZCBsOZJMSzbFBvLWmMzxzX3EUasraw
8vwOy972ICkDaiGUs3FG4m/Qp39Q5bUdzIYmRWUG5vkVNNFcRIgN9zSD2anYxkud
MVm7BnS/ivUzaeeaTqiIflfq9fXFj6lvzk49p5W0Ommrz7LhKaJe7WwA3YDtAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUzdV/uHja16NS8jjvkmCOS6HNi5YwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTQwMTU1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQsS
MA0GCSqGSIb3DQEBCwUAA4IBAQDPg0R+FCEZW8xYmUjQ+nRi7WtHhP6cKrcUE9zb
QHO2FVgVVmNIovluT3KMays1IjUoI95JT6U/S+lVwkuYivDt7kCMf/8Zm5m6Hn2b
acPDOPx5J3i6blXJP9cUiWZk7WviOOvPnqOG/MreIPfVGnl4GlEIsvXuDjo+vWPC
e/SWP8GdxUfwa2NQH4wBpKAi2524fJDTpSIQZJEd7mfbyjCaQYTuCpcdkdoBGYaA
ED5K7fj0uScKj1WeHvVmBI3FQBo53j/+xaZdGin3skdmPsmFZGOvQWqV1KD1TCgp
zI3SyaMILz/rCv0Kj16wvMgjXLj1Z+tGqTmiBosf+lC5GrwA
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org