Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200710.roa
File: AS200710.roa (raw, json)
Hash identifier: 31xizM37xv5OGuaQuSeIX9HzCnOxyqnXuqrvC4E1mB0=
Subject key identifier: 97:A4:B9:7A:84:6F:45:37:C0:D7:86:2F:41:D9:B5:D8:0B:5B:4C:E3
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 06F900D356095B5DA25C36B131A9BD8BE3722009
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200710.roa
Signing time: Tue 10 Jan 2023 12:36:30 +0000
ROA not before: Tue 10 Jan 2023 12:31:30 +0000
ROA not after: Tue 09 Jan 2024 12:36:30 +0000
asID: 200710
IP address blocks: 141.11.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f9:00:d3:56:09:5b:5d:a2:5c:36:b1:31:a9:bd:8b:e3:72:20:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 10 12:31:30 2023 GMT
Not After : Jan 9 12:36:30 2024 GMT
Subject: CN=97A4B97A846F4537C0D7862F41D9B5D80B5B4CE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:2a:a8:59:a9:84:1c:3e:0b:df:71:2f:51:
d2:67:bf:6c:4a:63:4e:9b:c5:7f:99:17:b1:30:f5:
97:fb:68:f7:a6:28:d6:4c:0b:a1:d1:f5:2d:b0:d3:
46:89:d3:61:67:e4:62:5d:9f:8f:7f:d5:99:2a:34:
9a:16:25:d7:fc:69:5d:72:14:32:be:a4:4d:78:79:
80:c4:9c:70:89:86:8d:4c:b1:b9:1f:b9:66:9d:f3:
bb:bf:2a:23:0c:75:84:d2:b2:9f:73:31:71:2e:70:
cc:e3:75:59:2b:66:45:53:1b:f5:5b:6c:63:f0:3f:
05:62:f6:fb:59:b1:8d:63:62:e0:22:0b:1c:6b:c0:
5f:35:6d:c6:1d:97:a4:a6:7e:16:2f:13:06:c7:3d:
e7:0a:c3:d5:a6:ce:a5:fd:ba:e0:09:60:a3:c5:f5:
ff:58:76:71:80:9b:93:b5:69:62:04:30:bf:83:dd:
4f:48:10:ef:07:6b:db:78:aa:d5:2a:22:e2:67:68:
48:01:5b:3d:85:bb:39:9d:a2:0b:83:6d:9b:32:57:
f6:30:e4:de:f9:68:02:41:01:11:38:01:8c:74:f3:
76:fb:f2:35:29:d0:53:a8:f9:22:2f:9e:71:4d:cc:
04:7d:78:80:05:43:4e:0d:e3:c5:5e:f6:e1:dc:13:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A4:B9:7A:84:6F:45:37:C0:D7:86:2F:41:D9:B5:D8:0B:5B:4C:E3
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200710.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.38.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:ca:03:1d:fb:4a:9e:09:03:14:51:2a:f5:cd:7f:27:ce:86:
21:5d:4e:67:79:ac:eb:7b:6f:9a:04:b0:5f:f9:03:d8:8f:05:
01:31:58:4b:82:3a:8e:c3:fa:f6:55:97:18:9f:ab:1a:ac:35:
4e:cf:38:b1:5a:5c:90:b3:7c:14:df:a3:44:12:c6:fd:7a:b4:
de:cb:68:8d:c0:f9:ef:98:e9:e5:40:d7:91:09:18:f8:86:fc:
10:91:04:60:f6:62:ba:68:e2:c2:de:10:d5:39:4f:22:55:34:
b8:b6:75:42:6d:bd:3c:02:b6:6a:37:cc:8c:94:5a:d6:07:77:
0f:ba:5d:f1:59:fe:e4:97:62:f5:b3:b9:4a:8c:45:8e:94:c6:
33:68:f6:5b:0e:e9:db:5f:9d:e1:93:05:1a:e7:c5:f8:1f:87:
1f:bb:0b:06:3a:77:f1:77:ee:88:76:7e:19:cc:43:b6:14:ae:
f2:dd:1c:1e:d1:0d:4d:63:ba:5f:34:29:50:db:b2:82:95:71:
df:fb:91:fb:96:ec:12:5a:9f:31:32:10:d9:a3:53:1d:8c:6b:
2b:af:ed:de:46:d1:34:54:db:ba:1e:c4:8a:2c:72:c6:da:df:
0c:63:ae:98:32:2f:1c:23:8c:f3:0e:19:62:d3:ac:2e:33:61:
2a:b5:31:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org