Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS151420.roa
File: AS151420.roa (raw, json)
Hash identifier: MNmnewPZW/I0eJbxKt0smKx3eoSb/6ZQPTzHIMSu5OE=
Subject key identifier: 10:AF:EA:BC:18:F0:F6:43:94:71:4A:33:7E:1F:D9:DA:DD:A4:E7:8F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 63DDF34B105679E9431DC972047A7843E3EC95E9
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS151420.roa
Signing time: Wed 09 Aug 2023 20:07:45 +0000
ROA not before: Wed 09 Aug 2023 20:02:45 +0000
ROA not after: Wed 07 Aug 2024 20:07:45 +0000
asID: 151420
IP address blocks: 141.11.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:dd:f3:4b:10:56:79:e9:43:1d:c9:72:04:7a:78:43:e3:ec:95:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 9 20:02:45 2023 GMT
Not After : Aug 7 20:07:45 2024 GMT
Subject: CN=10AFEABC18F0F64394714A337E1FD9DADDA4E78F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:00:89:22:10:2a:4f:81:32:9f:f5:26:66:
0f:ae:2e:6b:7d:98:78:df:4c:fd:fd:f8:81:5a:d4:
a8:47:40:be:20:5c:21:be:0d:fd:6f:60:e1:da:c1:
dd:f3:73:fa:fd:d4:18:16:c1:23:65:e4:62:a4:ff:
77:a6:43:5d:2a:98:ca:4b:7a:22:85:d1:0b:27:c2:
26:7f:d2:0f:b5:02:f5:d0:2e:86:49:4d:e8:78:65:
f3:7f:1c:8f:87:f4:f7:58:83:a1:77:11:cb:1f:fe:
4f:32:07:df:c8:4c:3f:9d:66:3d:2a:8e:05:43:7c:
b9:a8:70:d8:47:eb:65:52:42:90:9e:48:d6:4a:f7:
42:96:a7:a5:c0:d8:ca:11:18:12:6a:ae:0b:50:4d:
a4:e4:43:13:57:8d:21:1c:c1:63:7d:73:27:f5:57:
5c:b6:a1:8b:d1:b5:ca:40:1e:80:79:8d:93:db:65:
f2:97:0a:56:3a:3c:3c:68:95:c1:00:92:55:f0:9a:
c9:37:4a:33:c2:85:75:34:bb:64:2f:40:d7:90:3f:
bb:01:82:7f:ee:80:ba:28:d8:f7:b4:a6:17:e9:b4:
fe:6d:f1:7d:c8:8b:8f:16:62:ae:15:2b:1c:28:52:
aa:9b:8c:05:ee:2a:59:de:5f:5e:67:b6:95:ef:04:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AF:EA:BC:18:F0:F6:43:94:71:4A:33:7E:1F:D9:DA:DD:A4:E7:8F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS151420.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.100.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:26:05:4a:22:d5:fc:7f:b2:e4:1c:7a:d7:bc:5a:ca:cb:b0:
9a:50:01:4e:a3:5d:9c:f1:cd:9c:86:a7:52:40:15:02:49:c7:
e0:70:41:b9:12:73:2b:82:69:7b:81:87:48:c0:61:5c:38:f5:
35:b2:1f:22:58:a5:12:33:38:26:ba:b2:e0:f8:6c:b1:72:6c:
62:1f:8a:01:df:a7:20:ea:0c:7e:5a:25:cf:81:46:15:fa:e9:
67:36:8e:c5:6b:db:59:9e:11:95:41:8a:99:2e:02:1c:48:9f:
8e:82:06:93:2d:be:30:07:31:a3:c1:f9:a8:0a:b8:3d:16:d8:
0b:1f:0b:95:22:cb:d3:9c:45:e4:0f:ee:55:16:96:06:3a:07:
14:5d:7b:12:ac:63:d9:d4:21:c3:d4:ad:aa:bf:b6:54:ad:f9:
53:ac:2f:ed:e4:30:7b:36:a8:b9:2f:8c:79:3e:ce:62:99:57:
ec:fe:5f:82:11:1b:3a:20:ef:7e:99:82:b2:75:56:8e:a2:7b:
23:8c:fb:12:4d:10:11:97:16:00:81:b1:8e:cf:6c:09:05:45:
4d:9c:06:f0:3b:1b:13:74:c1:b0:cc:71:06:00:9b:ab:41:10:
68:1d:dc:8b:80:86:7a:bb:bc:69:b0:d3:49:d1:29:80:15:94:
05:b7:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 04:21:15 2024 by rpki-client on console-ams.rpki-client.org