Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS147291.roa
File: AS147291.roa (raw, json)
Hash identifier: 4OzvrMcXjMoUmHz6iOpQnDBESUfkYeP4ngG9kahKPyk=
Subject key identifier: 12:63:1E:05:BD:01:2B:AC:CF:ED:AC:8A:9A:DF:B1:E8:C6:FF:32:BF
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 086CB545C2EFA47C05EE36DFD9BD15E82F13DF5F
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS147291.roa
Signing time: Thu 24 Aug 2023 14:51:24 +0000
ROA not before: Thu 24 Aug 2023 14:46:24 +0000
ROA not after: Thu 22 Aug 2024 14:51:24 +0000
asID: 147291
IP address blocks: 141.11.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:6c:b5:45:c2:ef:a4:7c:05:ee:36:df:d9:bd:15:e8:2f:13:df:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 24 14:46:24 2023 GMT
Not After : Aug 22 14:51:24 2024 GMT
Subject: CN=12631E05BD012BACCFEDAC8A9ADFB1E8C6FF32BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:08:17:90:19:60:ea:b0:d3:9f:16:5b:25:
37:09:83:d6:27:81:c9:01:38:6d:4f:70:ca:ef:8c:
fb:be:eb:1e:5a:13:bd:25:45:3c:bf:77:eb:10:74:
b7:c6:d6:c6:7e:fd:3b:0c:37:f2:b6:9b:77:fe:e8:
1a:59:59:6a:62:11:3d:06:dd:f7:09:27:41:b5:82:
77:87:4f:32:45:b4:38:73:87:12:d0:87:2d:74:83:
2d:19:f6:15:06:1c:6c:38:af:2d:28:2b:9c:3c:e2:
6f:5e:3f:02:47:f3:e9:db:1a:2d:99:af:71:6e:35:
20:43:03:d7:ae:d6:bd:ab:ed:a5:47:ff:32:0e:5c:
39:30:f5:4f:a4:a1:a1:6e:1f:a6:3b:8f:1a:35:da:
89:a0:ff:52:e5:50:2b:f4:29:90:c1:6e:7b:47:6b:
3d:ea:fd:80:4c:d4:70:a4:8c:e2:e7:24:41:50:68:
8a:b2:ab:d5:79:7a:45:58:3a:9d:28:7e:f8:e6:b4:
cd:d5:e6:89:d0:6c:6d:ab:16:b1:33:71:79:7c:f0:
5b:3a:bb:ca:a4:b5:1a:91:08:d0:67:c8:3c:38:0c:
bc:6a:b6:a3:25:87:1c:ee:e2:07:a8:4d:28:19:3d:
63:80:9f:47:4b:b2:02:69:17:22:b5:57:15:70:a8:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:63:1E:05:BD:01:2B:AC:CF:ED:AC:8A:9A:DF:B1:E8:C6:FF:32:BF
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS147291.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.247.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c4:8b:1b:4f:3b:a8:f8:50:2b:27:a7:b2:9c:94:af:56:f5:
2e:06:c7:7c:21:52:e1:db:a0:01:40:04:b9:40:b8:0c:f0:f0:
72:dd:21:3a:74:e7:f1:9a:87:60:f2:44:10:68:37:e3:99:21:
15:3d:50:79:38:0e:d9:34:c7:26:82:3a:28:dd:0b:a3:f0:47:
21:bf:a6:31:af:5d:1f:16:36:63:b2:71:27:d4:67:fd:d6:c2:
08:cb:68:d9:88:a3:c9:01:5a:f0:d4:bd:d7:74:1d:b9:f1:0f:
10:02:cb:b8:4f:f6:1c:af:b1:99:7a:62:6a:7b:2f:ba:34:33:
b7:2f:8f:d9:3b:d6:c1:c8:17:6a:fe:a6:36:c8:31:cb:05:a5:
56:fd:9c:87:d2:5b:bd:d6:dd:87:08:dd:9b:98:28:4d:b3:9f:
f6:5a:47:47:31:1d:11:49:a1:fd:33:d6:1f:f5:95:fc:e3:a9:
74:a7:40:c5:01:7c:bc:a6:de:eb:cb:05:75:83:d4:97:34:3b:
f4:ef:0c:99:f5:1c:57:22:7b:07:81:7c:45:8a:fc:0f:ca:31:
47:d1:19:67:f4:4e:5f:cb:9c:06:f8:2d:4c:3a:02:dc:66:9b:
44:3f:dc:d7:dd:ad:4a:e5:27:96:cc:f3:fa:9a:94:98:3f:66:
73:df:28:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 13:41:50 2023 by rpki-client on console-ams.rpki-client.org