Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS201575.roa
File: AS201575.roa (raw, json)
Hash identifier: M8zFbDds9M9NS8FUmrz1wQvVQCupt8f6thj7SM0CIMs=
Subject key identifier: 27:90:BE:F6:94:80:76:0F:9B:CD:EB:FC:26:E7:F6:CD:C6:0A:AB:D6
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 22C71B5F1B9DDC64D6B7AF53FA90AAE9EDEE7260
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS201575.roa
Signing time: Thu 11 Jan 2024 14:15:25 +0000
ROA not before: Thu 11 Jan 2024 14:10:25 +0000
ROA not after: Thu 09 Jan 2025 14:15:25 +0000
asID: 201575
IP address blocks: 141.11.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c7:1b:5f:1b:9d:dc:64:d6:b7:af:53:fa:90:aa:e9:ed:ee:72:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 11 14:10:25 2024 GMT
Not After : Jan 9 14:15:25 2025 GMT
Subject: CN=2790BEF69480760F9BCDEBFC26E7F6CDC60AABD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:4f:b3:fe:92:f3:7e:db:0f:0b:82:db:d8:
58:9f:17:ea:05:d6:20:7d:3d:0b:fa:da:49:82:6a:
7c:12:df:45:a6:5c:50:bb:c7:12:e7:40:36:1f:11:
22:3c:7d:94:c4:ec:fb:dd:72:86:63:17:4d:78:05:
dd:18:15:eb:44:c0:a5:08:a6:fb:48:28:d0:52:00:
c3:78:02:ad:62:b2:15:9d:52:35:66:85:ac:83:d5:
40:85:69:ad:05:b6:94:16:b2:35:17:26:04:44:8d:
8b:f4:33:90:ee:f0:69:95:6d:70:31:98:12:72:be:
c8:58:76:45:ff:a2:70:a3:66:32:59:84:6a:b8:e9:
71:8d:02:d9:e2:69:39:e2:33:7f:4f:37:95:26:a6:
57:ff:14:f2:78:80:8b:3f:0e:9c:2b:df:63:d6:1b:
5c:1f:89:b4:3a:12:1d:be:38:ae:3b:8d:bd:00:bc:
3a:90:b2:6b:b5:6e:96:34:61:e6:3f:7f:4a:df:f2:
a0:fa:1b:9a:87:b5:d3:37:0e:25:e8:c8:50:46:0e:
57:9e:1b:c5:0a:8d:a6:c3:89:02:76:d2:56:77:ae:
8f:b7:43:89:a5:94:b9:b0:9e:e8:d7:24:78:53:15:
4b:7b:90:57:14:90:6e:34:aa:cf:eb:e0:ca:55:96:
d3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:90:BE:F6:94:80:76:0F:9B:CD:EB:FC:26:E7:F6:CD:C6:0A:AB:D6
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS201575.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.241.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:56:10:62:90:ce:8a:d9:d3:2c:15:b1:4b:c1:49:0b:3d:0b:
15:9e:0b:7f:63:4e:40:21:bf:4b:86:0e:67:8e:dc:85:60:1d:
df:35:27:15:96:bb:02:81:47:62:92:66:42:1d:d6:ea:31:f3:
83:07:10:84:a9:85:88:35:dd:aa:83:64:22:44:ae:76:ac:14:
4f:18:c8:82:05:57:d2:70:78:71:a5:22:67:94:07:50:fc:f4:
67:33:25:2a:81:b5:21:5f:75:67:e5:95:6d:90:9a:c8:fa:f7:
34:d5:41:36:65:a4:10:59:c4:68:63:e8:88:33:1c:06:e3:e7:
ca:e9:25:16:37:e8:d7:3b:63:c1:a7:b3:14:11:cf:31:c9:a1:
1c:14:37:3d:a9:6a:36:d0:41:96:5e:5f:27:a2:f2:4a:b8:ff:
fb:87:fb:4e:6a:63:a3:08:20:6a:12:7c:44:1f:ec:f5:6e:99:
75:ca:e3:00:87:45:e8:d7:bf:9a:8f:99:a1:ac:01:1c:ff:a4:
ea:9e:f0:5f:d7:71:19:12:09:b2:8c:21:61:9c:77:2f:9a:8d:
90:9b:80:91:23:7e:24:ca:87:1e:e1:b4:75:4e:93:f1:11:d6:
c2:2b:e3:42:af:ac:8e:c6:5b:ea:b2:97:de:a5:1f:15:03:66:
83:26:88:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 01:59:36 2024 by rpki-client on console-ams.rpki-client.org