Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS18796.roa
File: AS18796.roa (raw, json)
Hash identifier: w8g7PAP2Mso+fuTZkKNnPiavfX0lDe3ecmBfHeZbpTY=
Subject key identifier: 47:B1:CE:E4:83:88:54:3A:2B:8F:A3:6F:06:E8:F2:2F:4F:98:DA:50
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4BD467AF27A371E3387A6C7F7D6E903886121404
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS18796.roa
Signing time: Wed 04 Sep 2024 16:40:34 +0000
ROA not before: Wed 04 Sep 2024 16:35:34 +0000
ROA not after: Wed 03 Sep 2025 16:40:34 +0000
asID: 18796
IP address blocks: 141.11.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 10:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:d4:67:af:27:a3:71:e3:38:7a:6c:7f:7d:6e:90:38:86:12:14:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 4 16:35:34 2024 GMT
Not After : Sep 3 16:40:34 2025 GMT
Subject: CN=47B1CEE48388543A2B8FA36F06E8F22F4F98DA50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:ab:4a:fe:08:97:0a:6e:9e:9e:3a:0a:e1:
23:39:f7:29:b6:08:4c:77:ea:ea:13:85:34:d0:43:
dd:be:c1:67:ef:0c:19:94:79:37:c3:6b:42:b4:54:
7a:b4:1e:5f:eb:57:b4:46:b1:db:19:c5:38:61:03:
86:17:9c:ab:4e:37:44:28:92:6f:cc:a8:7c:14:96:
1d:d9:e9:21:de:ab:5e:52:2b:ff:58:27:55:dc:2b:
91:bc:8c:83:46:c6:0c:cc:ef:07:c1:ec:cf:99:84:
51:ed:ad:39:08:f0:24:79:44:6b:e0:fa:02:52:2e:
64:f1:fd:b8:58:10:b5:49:05:d7:fe:48:2e:82:17:
2d:d7:b9:8e:d4:21:0c:36:6a:24:fd:12:87:b0:45:
a3:d4:29:f5:47:6d:ba:85:de:a4:0b:b4:09:b4:bd:
44:44:1e:44:2d:59:e8:f4:bc:0a:3d:a4:e5:bb:a0:
b7:b2:0b:80:d7:bc:24:43:ad:95:2d:e9:b6:6b:06:
39:4d:ff:b7:4b:d4:b8:3b:f4:89:58:45:2e:61:77:
8d:0f:85:7a:35:b0:66:7a:06:2e:bf:93:7b:83:87:
81:99:5d:e3:9f:b8:7e:92:b3:8a:96:f7:82:91:21:
4c:7c:75:bc:03:81:9a:1d:14:66:4f:7e:b2:32:66:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B1:CE:E4:83:88:54:3A:2B:8F:A3:6F:06:E8:F2:2F:4F:98:DA:50
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS18796.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:09:c6:08:2e:60:eb:52:b0:2a:1d:71:af:eb:26:3e:79:c5:
0d:64:32:be:1b:f9:de:ed:97:c6:6e:1b:2b:ae:ba:8e:6f:98:
66:32:01:f0:1c:47:b0:94:db:4e:39:e8:8e:52:01:01:6d:60:
2e:f9:5c:a9:b9:28:77:f5:5e:89:65:67:5f:af:58:84:ef:3b:
29:8d:e2:7b:6c:e9:54:40:3f:9c:ee:99:d6:70:d5:a2:7a:c4:
d8:b2:b2:c2:54:ca:8a:4f:98:cf:d6:ef:6c:0d:be:bc:e6:df:
bb:48:16:8a:d8:55:a7:07:97:72:44:cd:36:4b:e9:6f:cd:a8:
ec:e1:f2:f6:4c:6f:18:61:5b:df:8c:f6:df:3a:50:05:79:67:
11:da:c2:7f:8b:fc:4f:17:7b:f3:c8:30:51:db:ab:86:a9:34:
70:e6:c4:bb:8d:d5:78:07:3a:14:7c:94:41:a2:a3:32:e3:37:
8e:93:e9:f3:99:01:65:65:38:ea:b8:80:56:49:27:5c:a2:35:
bc:86:ed:30:11:34:82:26:36:b7:f6:0b:b1:ab:6c:37:dc:be:
40:8c:bc:40:b4:83:3a:45:cc:02:b3:e7:e5:25:c9:9c:f7:82:
bd:a2:18:36:7b:16:98:4e:1e:e7:0f:c0:53:a4:06:68:5f:cf:
18:53:8d:b6
-----BEGIN CERTIFICATE-----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Generated at Mon Nov 4 13:10:14 2024 by rpki-client on console-fra.rpki-client.org