Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS204843.roa
File: AS204843.roa (raw, json)
Hash identifier: apB3ZLys2KZV6L/34GtJtt151W0Cm7xhhBKaUYUJFGw=
Subject key identifier: 27:BB:68:7F:F2:1D:E1:94:CE:E7:B3:12:17:E8:A1:4E:22:9C:7A:D5
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 30D9A58E32B6585E6D5BABFA4C51604DF69F0017
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS204843.roa
Signing time: Tue 27 Dec 2022 14:44:44 +0000
ROA not before: Tue 27 Dec 2022 14:39:44 +0000
ROA not after: Tue 26 Dec 2023 14:44:44 +0000
asID: 204843
IP address blocks: 141.11.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:d9:a5:8e:32:b6:58:5e:6d:5b:ab:fa:4c:51:60:4d:f6:9f:00:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Dec 27 14:39:44 2022 GMT
Not After : Dec 26 14:44:44 2023 GMT
Subject: CN=27BB687FF21DE194CEE7B31217E8A14E229C7AD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:38:98:12:ad:8d:9f:bd:5f:51:f6:dd:8b:
61:87:82:89:e9:13:53:b5:d3:e6:6d:a3:66:a0:dd:
9a:16:05:5b:e7:5f:fb:b7:37:1d:96:1a:2e:58:95:
d9:ab:66:03:f3:fe:09:1d:0a:24:47:b0:c2:bc:18:
8d:a5:3d:ad:23:37:dc:50:0d:d4:ce:24:51:aa:20:
f2:a0:98:94:e2:52:72:f5:1d:d2:35:3e:fd:c1:4b:
d3:35:1e:44:ce:b9:be:eb:0c:e1:c3:4b:82:61:cb:
12:bd:37:10:c9:4c:3f:50:be:41:94:eb:03:e3:03:
57:1e:2a:fc:8b:dd:9b:9d:68:a2:00:cb:c1:61:99:
71:c3:cf:d3:2a:0f:5a:f9:b9:fa:17:ed:6e:12:1e:
ec:4f:4d:6f:2d:83:8f:f8:57:23:bc:d9:0b:31:13:
0c:41:27:af:e2:d1:34:6d:d0:a9:50:5e:33:5a:de:
a5:0e:ab:e1:9f:93:18:a3:6f:b3:c6:4a:83:44:b9:
fc:75:90:8e:99:ff:af:81:68:b7:f3:a5:32:50:b1:
52:36:57:e3:56:4d:25:81:31:d1:29:32:67:22:82:
1c:79:c0:88:0b:ca:d8:e6:6c:c5:74:09:4d:7f:25:
80:55:d8:99:75:e6:1c:41:f8:0b:5b:d4:9d:df:30:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BB:68:7F:F2:1D:E1:94:CE:E7:B3:12:17:E8:A1:4E:22:9C:7A:D5
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS204843.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:8f:f5:a6:a5:22:4f:42:b1:ad:b1:67:a4:a1:45:c0:2d:57:
ca:e3:01:a3:86:fc:5a:dc:bf:1c:06:4c:2f:1b:a8:d0:e9:96:
58:95:89:54:f1:9d:60:2a:a1:b1:71:3a:d1:d5:4e:13:5f:fe:
b3:ef:3f:5f:3c:e5:31:75:15:ec:82:d3:fb:96:5d:03:7c:fb:
45:74:e4:5f:3f:16:a1:b1:9c:47:36:4e:5c:4e:73:a5:2c:85:
5f:76:dc:1c:1f:42:c7:99:cb:57:6d:5e:2c:fd:fb:33:15:ff:
ef:0c:e3:72:7d:64:f0:bb:a9:31:37:99:78:11:06:17:3a:0d:
1d:22:0d:8c:67:0d:ca:da:88:4a:c2:04:be:72:ce:99:66:67:
9d:05:61:8f:27:c9:fa:c6:aa:9c:d0:4b:bf:c3:b6:55:9d:40:
a8:db:8f:b6:4f:60:37:81:fe:01:3d:15:12:2a:e7:f1:16:52:
f3:88:14:ec:ed:db:d2:bb:65:bc:f8:55:92:c7:5a:f0:73:5c:
49:8f:12:62:51:ed:e2:32:c0:c0:9c:c0:bd:41:4b:40:da:b0:
d9:99:0e:8a:2b:03:3c:bc:08:2f:a8:cc:a8:22:4a:db:aa:38:
71:e4:f4:42:ea:1f:99:5d:62:0a:b1:7f:e3:c8:c9:da:47:3e:
03:ed:40:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org