Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203355.roa
File: AS203355.roa (raw, json)
Hash identifier: nVrKLCXBxpI7XjlLPtb6sz9LasjYbHk2+vxQchzfpWM=
Subject key identifier: 5B:F7:CE:B7:E0:45:0C:29:CA:1F:F1:2C:AF:ED:BD:8B:CC:0E:46:44
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7BC93BD36F9459C48E2122E8A7FC809096EB16C8
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203355.roa
Signing time: Tue 27 Dec 2022 14:44:37 +0000
ROA not before: Tue 27 Dec 2022 14:39:37 +0000
ROA not after: Tue 26 Dec 2023 14:44:37 +0000
asID: 203355
IP address blocks: 141.11.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c9:3b:d3:6f:94:59:c4:8e:21:22:e8:a7:fc:80:90:96:eb:16:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Dec 27 14:39:37 2022 GMT
Not After : Dec 26 14:44:37 2023 GMT
Subject: CN=5BF7CEB7E0450C29CA1FF12CAFEDBD8BCC0E4644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e6:9b:a2:e7:01:a0:57:aa:17:1f:ff:11:94:
03:6e:cb:84:a6:5d:83:66:ed:cf:f9:7a:b1:85:4e:
1b:57:76:17:bd:d3:00:c0:cb:da:5f:49:8c:ea:49:
2b:1e:a5:c0:de:2e:61:d2:fe:cd:d9:ff:7f:37:c4:
91:59:7a:c4:f4:35:73:36:ae:6f:90:de:36:26:ed:
25:be:ad:e9:85:e5:b0:98:3b:79:20:6e:bc:ed:1d:
37:c8:52:32:1f:59:b1:c2:f4:ff:9d:d4:f1:4a:36:
b6:59:d0:0f:55:80:4d:ad:93:25:e6:77:eb:f2:71:
2d:d5:d8:86:19:44:03:77:5d:4f:e5:d7:d9:c2:8b:
36:21:7d:0e:aa:51:76:ec:93:0e:8b:ee:68:2c:39:
60:e8:e2:cb:ab:20:9b:62:42:2e:fa:fb:67:e0:88:
75:54:17:86:6e:c5:7b:3d:0f:a0:f6:4a:f5:4e:0c:
ad:5d:8c:fd:41:89:ec:d0:e7:27:83:44:1e:36:ad:
7f:b3:70:36:7e:bc:ec:4e:ca:21:00:ee:ec:1b:e0:
c0:a4:75:b1:9a:98:4b:69:4d:e5:54:4f:b1:28:96:
a4:9e:32:2e:e7:4b:fa:e1:47:67:20:88:98:ac:e7:
c1:87:ca:3d:15:45:1c:66:73:67:86:e9:70:b4:95:
c1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F7:CE:B7:E0:45:0C:29:CA:1F:F1:2C:AF:ED:BD:8B:CC:0E:46:44
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203355.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.27.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:df:f6:9f:80:46:db:57:73:04:a3:85:ad:40:e8:66:27:ab:
1a:5b:ce:d5:21:4e:c8:ce:ff:dd:55:b2:66:12:d8:c0:40:a6:
83:56:5c:fe:fa:b2:01:e7:65:8a:04:f6:fe:41:0d:d2:ef:d1:
45:0d:36:3d:3d:72:11:73:45:ab:d3:4d:34:e2:b1:7e:96:dd:
04:4b:06:07:dd:b2:c3:ee:4c:25:58:00:09:bc:bd:eb:ff:18:
ec:08:3c:41:48:a9:57:e0:24:01:d6:b0:78:79:fd:de:22:c5:
bb:c7:56:af:05:08:a3:eb:cb:23:2d:21:70:ed:ab:1f:a7:df:
93:d2:6e:ec:73:5e:19:64:86:8e:43:ca:4e:23:84:c1:88:f5:
bd:c5:98:21:24:6a:56:5e:95:10:ac:85:a8:fa:33:15:84:ba:
43:f5:d1:37:68:06:c5:47:5e:c7:53:88:c8:dd:78:3a:37:a4:
bf:d4:a1:ed:67:53:36:92:28:c3:6a:0a:e9:3f:e2:92:5f:d5:
ef:d9:24:07:46:24:e9:3e:76:99:5f:26:c8:32:3f:72:04:2e:
fa:bf:71:a2:8d:6f:f5:db:c4:da:a3:ca:6c:4b:e1:18:bd:d7:
9e:32:bd:f1:72:94:99:8f:cc:26:e5:d9:00:ea:e8:16:73:ce:
b9:90:35:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org