Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS201364.roa
File: AS201364.roa (raw, json)
Hash identifier: IoyUDx/8O5qfCGsNyjdM+oZs6Sox+8sJ09Ez4M9FqME=
Subject key identifier: BE:4F:1A:9E:DF:A1:A9:1A:AC:6B:0A:44:FB:11:76:E3:CE:68:90:AC
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 35F3197BE471A14A05C3B8C570E8CB58179A0B36
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS201364.roa
Signing time: Wed 12 Apr 2023 11:13:06 +0000
ROA not before: Wed 12 Apr 2023 11:08:06 +0000
ROA not after: Wed 10 Apr 2024 11:13:06 +0000
asID: 201364
IP address blocks: 141.11.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f3:19:7b:e4:71:a1:4a:05:c3:b8:c5:70:e8:cb:58:17:9a:0b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 12 11:08:06 2023 GMT
Not After : Apr 10 11:13:06 2024 GMT
Subject: CN=BE4F1A9EDFA1A91AAC6B0A44FB1176E3CE6890AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:57:00:b5:10:f0:7a:67:42:9e:d0:1d:f5:
3d:0d:30:1c:fe:6f:dc:d3:d5:e6:f6:6c:00:9d:7e:
ed:2c:0f:6b:e8:ab:22:a2:ce:1a:76:73:6f:7e:f3:
af:17:d4:ad:32:91:a2:e3:64:f9:a2:e0:3a:39:07:
e2:ec:5c:3c:b5:32:47:5b:0f:06:4c:60:54:38:63:
96:91:6b:00:38:8f:9f:5a:92:30:1a:7d:19:1c:01:
0a:70:13:b3:ec:85:3f:1d:53:c2:0a:60:c1:fa:4c:
94:f4:a6:c7:01:d6:9f:5f:b5:11:47:6c:4c:15:bb:
c6:58:13:4f:65:3e:5d:bb:26:4b:6d:a3:18:a4:b9:
48:70:fe:51:51:d5:fb:13:cf:ab:ef:09:6d:b4:69:
e1:1e:be:02:38:a1:0c:47:8a:d5:18:83:f2:7c:f2:
cd:27:ed:8a:bb:26:80:46:0a:a8:dd:7a:0a:f9:6c:
d7:d0:55:2c:55:0d:eb:6c:e6:81:7f:0e:3a:73:4d:
10:b4:09:1c:0a:94:a5:88:8b:d5:31:b4:86:43:1f:
22:39:04:a8:2d:f7:4e:47:a3:e8:66:da:3a:61:7c:
b4:19:2c:8e:c7:2e:57:29:cc:c6:c5:53:0a:76:75:
c0:cb:34:73:e5:46:15:a6:96:dd:ea:7e:db:2c:94:
ef:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4F:1A:9E:DF:A1:A9:1A:AC:6B:0A:44:FB:11:76:E3:CE:68:90:AC
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS201364.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.124.0/24
Signature Algorithm: sha256WithRSAEncryption
28:32:cd:85:a4:18:37:af:2b:30:74:e2:4e:db:97:72:04:43:
97:e1:d0:1a:23:49:8c:1e:8c:dc:62:94:b1:37:39:3e:06:04:
0a:97:48:ee:22:26:2c:f3:0e:47:03:82:35:78:68:a3:e4:e7:
81:18:5d:a1:fd:64:46:d3:30:e6:15:2b:f5:e8:2b:26:48:34:
a6:64:1d:d5:45:8b:a5:2d:8d:1c:3c:1e:3d:2f:ce:c7:3e:8c:
de:bc:5f:b4:9c:12:06:f8:f7:d0:bc:11:fd:fe:e4:d1:57:8f:
68:58:d1:db:7b:cf:ce:b0:8d:ed:52:04:6f:43:c6:11:d8:4c:
25:4d:29:07:ad:c7:ca:ac:82:0b:6e:d6:1e:ba:e9:96:bc:99:
53:c6:ec:a2:8b:3f:26:7f:95:d1:55:b1:60:49:0b:2b:10:54:
cf:0f:9b:18:06:e2:ef:9c:7e:33:19:21:42:6f:46:c7:70:9f:
ad:9f:b6:0e:ee:7d:09:50:93:48:9e:83:c7:15:de:7d:3d:02:
05:2f:72:ab:ba:a2:ac:62:03:a6:5f:20:86:a2:1a:fc:2f:b1:
47:93:4b:71:eb:eb:3d:04:92:3c:85:be:b9:ea:bf:82:d3:c1:
2b:8e:2d:7c:a2:21:a1:41:f8:fc:2d:87:e4:a4:7e:15:8c:84:
3e:fb:23:bb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUNfMZe+RxoUoFw7jFcOjLWBeaCzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yMzA0MTIxMTA4MDZaFw0yNDA0MTAxMTEzMDZaMDMxMTAvBgNV
BAMTKEJFNEYxQTlFREZBMUE5MUFBQzZCMEE0NEZCMTE3NkUzQ0U2ODkwQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfNVcAtRDwemdCntAd9T0NMBz+
b9zT1eb2bACdfu0sD2voqyKizhp2c29+868X1K0ykaLjZPmi4Do5B+LsXDy1Mkdb
DwZMYFQ4Y5aRawA4j59akjAafRkcAQpwE7PshT8dU8IKYMH6TJT0pscB1p9ftRFH
bEwVu8ZYE09lPl27JkttoxikuUhw/lFR1fsTz6vvCW20aeEevgI4oQxHitUYg/J8
8s0n7Yq7JoBGCqjdegr5bNfQVSxVDets5oF/DjpzTRC0CRwKlKWIi9UxtIZDHyI5
BKgt905Ho+hm2jphfLQZLI7HLlcpzMbFUwp2dcDLNHPlRhWmlt3qftsslO99AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUvk8ant+hqRqsawpE+xF2485okKwwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjAxMzY0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQt8
MA0GCSqGSIb3DQEBCwUAA4IBAQAoMs2FpBg3ryswdOJO25dyBEOX4dAaI0mMHozc
YpSxNzk+BgQKl0juIiYs8w5HA4I1eGij5OeBGF2h/WRG0zDmFSv16CsmSDSmZB3V
RYulLY0cPB49L87HPozevF+0nBIG+PfQvBH9/uTRV49oWNHbe8/OsI3tUgRvQ8YR
2EwlTSkHrcfKrIILbtYeuumWvJlTxuyiiz8mf5XRVbFgSQsrEFTPD5sYBuLvnH4z
GSFCb0bHcJ+tn7YO7n0JUJNInoPHFd59PQIFL3KruqKsYgOmXyCGohr8L7FHk0tx
6+s9BJI8hb656r+C08Erji18oiGhQfj8LYfkpH4VjIQ++yO7
Generated at Wed Sep 13 09:56:05 2023 by rpki-client on console-fra.rpki-client.org