Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205733.roa
File: AS205733.roa (raw, json)
Hash identifier: HMeSlbvZkf6C4BNvYrmn0FuDEYA3wC/q63dD619jt7w=
Subject key identifier: 7E:D1:47:8F:52:F8:EE:FF:59:6C:87:A2:57:D2:49:47:13:F4:D1:25
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 675F40F5D3BD8F68B3D4B89BC7AF377B23303ABC
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205733.roa
Signing time: Fri 20 Oct 2023 13:13:39 +0000
ROA not before: Fri 20 Oct 2023 13:08:39 +0000
ROA not after: Fri 18 Oct 2024 13:13:39 +0000
asID: 205733
IP address blocks: 141.11.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:5f:40:f5:d3:bd:8f:68:b3:d4:b8:9b:c7:af:37:7b:23:30:3a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 20 13:08:39 2023 GMT
Not After : Oct 18 13:13:39 2024 GMT
Subject: CN=7ED1478F52F8EEFF596C87A257D2494713F4D125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:fe:b2:f1:d5:0b:be:b2:32:5b:f1:42:5d:
7e:37:ff:3d:4f:b0:44:d4:ed:c0:44:2e:e9:d8:7e:
de:45:1e:fb:a1:05:8f:39:f8:70:82:ff:71:9e:5d:
ba:4c:bd:37:e6:8a:cc:4d:d8:ef:60:9e:58:c6:99:
94:26:7e:bc:6e:3a:35:50:24:e9:69:40:f4:e5:2e:
0e:26:1f:56:dd:31:53:30:8b:32:c5:e8:8a:f4:b7:
20:e0:4f:2f:d1:d6:4a:79:38:59:96:0d:8c:30:3c:
a8:ea:bb:76:f3:e1:9e:e1:62:12:86:9d:25:db:06:
2b:c0:10:b3:54:9c:8d:e8:70:de:7c:b0:6d:8c:9a:
aa:43:9f:6e:b5:97:22:8e:91:0f:a7:c5:4f:0b:2e:
2b:4b:be:f8:a2:1f:be:e6:6b:ed:ae:6b:57:4e:13:
3a:61:99:da:80:41:05:54:51:24:7e:4d:b6:44:84:
31:2e:bd:e3:f3:d5:58:0a:49:26:4c:5d:e8:8f:34:
b1:e3:07:0c:37:09:9f:e6:ba:5a:82:01:a6:24:5a:
42:f8:b7:4b:34:07:b0:6b:73:cb:0a:47:ac:a2:e4:
ef:d6:cc:61:b1:25:6b:ba:59:99:d3:3e:f2:63:fb:
0d:27:52:6d:fe:7d:f8:b1:e7:3a:84:0f:d4:6b:aa:
01:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D1:47:8F:52:F8:EE:FF:59:6C:87:A2:57:D2:49:47:13:F4:D1:25
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS205733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e7:3c:b6:95:a7:ef:bb:5c:19:64:6a:83:ea:52:80:9c:83:
93:90:c7:1e:06:8d:93:29:aa:3f:77:d1:d9:62:51:c7:23:71:
b9:5b:5d:c5:76:b0:c1:35:f4:1c:d6:aa:b3:d8:00:63:7b:a0:
31:c3:2b:61:fe:51:7a:23:c1:ea:9a:e6:bd:cc:29:fb:9d:8f:
6e:ec:c3:b2:18:9a:c0:93:c2:77:e5:eb:f2:3c:ce:ad:9e:54:
57:bb:92:0b:ca:7b:5e:f6:c8:33:03:9e:4a:4b:3c:f3:d6:d5:
22:88:0d:5c:dc:5d:48:79:70:ea:37:41:14:c9:91:68:b6:61:
31:44:b4:5d:60:14:79:69:e1:37:4c:56:af:6c:cd:af:01:2c:
14:f5:67:8c:1b:78:6d:a6:f5:ba:ab:f7:dd:84:d5:75:1e:b9:
df:4e:54:b1:70:6c:d0:d1:87:35:2a:97:ce:ea:59:a2:2a:16:
62:65:b9:1c:f8:b2:b0:f7:da:84:ed:92:48:85:ce:8c:a3:74:
27:86:1e:a3:cc:7d:04:30:6b:aa:73:f4:b2:d4:70:d6:b8:a9:
8f:4b:2f:5b:63:2d:97:0f:ba:d6:c3:f8:53:9c:eb:da:24:b0:
c1:2e:94:83:f2:df:7a:ac:f1:b0:89:70:8f:38:53:48:a8:6c:
c3:77:99:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 10:31:30 2023 by rpki-client on console-fra.rpki-client.org