Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS19437.roa
File: AS19437.roa (raw, json)
Hash identifier: VP3e9CnKAVx3+2TwmhmVtcqRfaQ9x4BYYJ1JnZ2FJa0=
Subject key identifier: 4F:52:FC:05:31:4E:DC:B3:1C:2E:0D:19:BB:E2:55:49:0E:F7:67:D4
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3F6FDEBBAE6F05C77D450D3B7E41F2EC07D33D26
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS19437.roa
Signing time: Tue 28 Nov 2023 15:05:06 +0000
ROA not before: Tue 28 Nov 2023 15:00:06 +0000
ROA not after: Tue 26 Nov 2024 15:05:06 +0000
asID: 19437
IP address blocks: 141.11.112.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 07:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6f:de:bb:ae:6f:05:c7:7d:45:0d:3b:7e:41:f2:ec:07:d3:3d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 28 15:00:06 2023 GMT
Not After : Nov 26 15:05:06 2024 GMT
Subject: CN=4F52FC05314EDCB31C2E0D19BBE255490EF767D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:43:ce:40:2d:d0:f5:c8:04:92:2b:e4:d0:
66:a4:a4:25:20:59:61:f7:a7:63:ba:fd:e1:38:f4:
04:22:51:86:08:e4:ca:21:53:a5:3a:cd:d5:3a:33:
22:ae:80:9d:06:4e:46:36:59:32:19:d5:04:5c:81:
6f:51:f8:15:89:b8:14:f8:f4:60:4e:5a:e4:ae:28:
ed:dc:bc:63:08:30:4b:ce:d1:b0:20:73:8f:69:8a:
01:5d:00:17:5a:37:7f:8f:97:66:92:5b:5a:81:18:
db:e0:61:61:14:ce:d7:62:ed:1d:ad:59:8e:f0:52:
12:ec:35:f4:56:c1:be:3d:87:c9:2c:a1:40:ea:4b:
77:6b:6a:f2:bc:37:f6:9c:a1:96:cf:b5:e1:b6:a7:
74:4a:91:46:d5:85:0f:6c:df:61:4d:7e:21:43:4f:
b6:64:9c:91:6d:73:0a:5a:90:13:2d:7a:fb:d6:1f:
24:2c:05:a8:ab:4a:9f:35:b6:3f:72:3c:d2:1e:96:
f1:cb:2e:a3:86:38:fa:45:28:e0:27:4e:fb:2c:d4:
5a:7f:9d:ec:da:d3:5f:0f:3f:e0:53:2e:da:47:cc:
de:15:be:d2:bd:65:5e:b3:11:bf:04:01:b9:7f:3b:
d8:70:fc:a5:a7:11:fa:b1:a7:d7:99:05:e2:dd:41:
64:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:52:FC:05:31:4E:DC:B3:1C:2E:0D:19:BB:E2:55:49:0E:F7:67:D4
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS19437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.112.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:96:5b:5e:dd:d4:7c:91:65:ca:b7:17:3d:57:e3:b0:51:04:
bc:8f:30:36:b7:64:50:3b:ba:22:e8:16:8b:e1:41:eb:2d:28:
87:92:58:8b:67:d5:e0:85:d0:d9:5c:ca:3e:f3:8d:6c:23:68:
e5:cb:f9:f8:08:27:34:33:08:b2:4d:8f:ab:3a:d6:07:f1:02:
41:23:53:98:74:c6:d5:0c:4e:1b:65:51:0f:95:11:78:8e:39:
36:76:a8:bd:a0:f4:fa:b5:f3:8d:e7:57:71:71:5a:11:b4:0a:
b9:fb:79:a2:24:73:8f:e5:42:6c:bf:25:0c:b3:e3:68:cb:db:
a0:0b:4b:01:d6:31:bf:45:19:88:52:31:40:47:06:3f:1f:31:
13:c3:a2:8b:38:e4:c7:59:84:76:95:73:ab:48:27:09:9b:ec:
0f:31:c4:64:ea:30:e9:e6:f8:af:19:c8:81:5c:bb:7a:2c:aa:
6b:13:83:c1:5e:d1:f5:3f:9c:bc:8d:53:a0:ab:d3:82:b1:4c:
54:01:d4:aa:2c:fc:6a:29:21:13:b2:b3:22:fe:7a:54:a6:32:
98:87:b8:fe:f5:ee:d6:92:61:9d:a4:fe:f3:00:0d:0c:bd:fc:
aa:a9:90:01:1b:de:b0:16:d7:79:db:47:56:0d:bb:03:52:b6:
36:93:27:d0
-----BEGIN CERTIFICATE-----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Generated at Sat Feb 3 07:23:47 2024 by rpki-client on console-fra.rpki-client.org