Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS149948.roa
File: AS149948.roa (raw, json)
Hash identifier: ibgAolhaiFGHCfKEmzRg4CH0A6oJTLrdEidfHIi5mhU=
Subject key identifier: 88:C2:74:8B:16:D6:38:D0:71:E7:80:DE:0C:4D:37:7B:03:E7:16:F6
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1CA986C62DD42AF170A66FF5325415284D3BEDB1
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS149948.roa
Signing time: Sat 27 Jan 2024 14:25:18 +0000
ROA not before: Sat 27 Jan 2024 14:20:18 +0000
ROA not after: Sat 25 Jan 2025 14:25:18 +0000
asID: 149948
IP address blocks: 141.11.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 10:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a9:86:c6:2d:d4:2a:f1:70:a6:6f:f5:32:54:15:28:4d:3b:ed:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 27 14:20:18 2024 GMT
Not After : Jan 25 14:25:18 2025 GMT
Subject: CN=88C2748B16D638D071E780DE0C4D377B03E716F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:d1:f6:5b:87:7f:fe:b7:d3:1f:84:e1:1d:
f8:30:a1:29:be:e4:d2:1b:52:64:94:fd:fd:34:12:
80:78:f4:bd:9c:79:d2:f8:12:ed:a9:ac:40:5f:a4:
ff:4e:ad:1b:6a:cb:c0:22:4f:84:88:ac:49:69:54:
1d:50:7c:2a:e1:30:8a:18:15:18:f2:47:b5:0f:3c:
18:1c:68:67:65:c6:3f:8a:b5:e8:ee:e6:b8:82:f8:
aa:c3:ef:c4:d8:bc:97:fb:e2:f2:6b:c1:25:a7:9d:
3d:ea:10:8c:cc:d7:53:2f:15:71:96:ff:09:5d:3d:
38:d0:6f:50:54:00:96:4c:0f:b8:35:ba:ea:68:b9:
8d:21:bf:49:72:2d:7c:93:2a:28:18:76:bd:f3:f5:
ec:ee:bf:90:5a:06:10:e7:8e:a5:f9:71:c6:7b:a4:
65:ba:b1:4b:09:71:1e:1f:70:ec:00:de:64:80:37:
89:db:72:e1:a0:b8:8e:6f:66:9a:16:1c:a6:4d:9d:
ce:70:74:87:b4:4a:60:86:12:0b:c4:7c:ca:3d:7d:
bc:fc:2f:5a:64:06:fd:cf:77:dd:66:57:5b:86:f8:
1e:ac:ea:ce:32:f9:5a:fc:c8:78:03:2e:52:0d:81:
ef:92:c3:90:26:44:14:d8:22:b2:cd:bd:b0:09:82:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C2:74:8B:16:D6:38:D0:71:E7:80:DE:0C:4D:37:7B:03:E7:16:F6
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS149948.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.105.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ae:56:26:28:01:e2:b6:9c:9e:db:2f:43:60:83:fe:f3:f5:
2e:fe:a7:f3:d7:61:d2:a3:79:66:7e:8b:6d:ba:d1:e6:4a:b9:
f0:83:17:88:1d:65:9a:b4:a5:0d:40:04:a5:ed:9c:cb:e9:13:
01:ef:af:f7:5f:87:13:3e:e5:64:5c:3b:d5:b1:89:18:a8:18:
91:22:69:4f:d7:3c:c5:f2:52:2f:20:cc:7d:59:7c:01:95:0a:
32:b8:55:2d:d5:ed:7a:c7:92:46:8d:30:2e:df:29:b8:00:01:
c5:69:02:a1:e8:0a:e6:29:e4:97:56:77:7e:95:06:da:f3:10:
42:37:67:f0:ea:a7:8a:40:72:b0:22:14:c5:ad:53:09:ba:dd:
2b:75:7e:9a:65:af:c5:15:a2:09:db:a7:b9:96:ba:3e:22:33:
85:a9:9c:93:1d:74:49:1e:92:79:4f:5f:3a:9d:ca:a8:5f:ac:
a5:c8:38:74:3c:0a:fd:2e:92:70:1e:a4:28:0b:3a:c2:fb:ba:
c9:81:7a:8b:b3:80:de:ae:77:c1:bb:d0:e6:ba:f4:9f:13:c5:
24:a6:24:32:84:2c:5a:a0:5f:2b:1f:52:b3:dd:6b:73:39:28:
c2:2e:bf:b4:1c:01:c4:e0:5f:79:66:c9:bc:85:d4:ae:db:8e:
5e:98:69:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 14:19:40 2024 by rpki-client on console-ams.rpki-client.org