Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS207429.roa
File: AS207429.roa (raw, json)
Hash identifier: 7m34FeNPIrvhwGEcPF2V9rRDlJaTsLejxtqltCE7t1s=
Subject key identifier: DA:6E:F2:E8:BF:16:E8:90:21:73:07:D3:92:24:D4:68:90:9C:3A:C2
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 475CEB07CD2F735C30A31DB759D08E45469B9346
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS207429.roa
Signing time: Tue 27 Dec 2022 14:44:42 +0000
ROA not before: Tue 27 Dec 2022 14:39:42 +0000
ROA not after: Tue 26 Dec 2023 14:44:42 +0000
asID: 207429
IP address blocks: 141.11.125.0/24 maxlen: 24
141.11.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5c:eb:07:cd:2f:73:5c:30:a3:1d:b7:59:d0:8e:45:46:9b:93:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Dec 27 14:39:42 2022 GMT
Not After : Dec 26 14:44:42 2023 GMT
Subject: CN=DA6EF2E8BF16E890217307D39224D468909C3AC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:bc:49:d3:b9:69:84:4c:97:7e:03:60:c2:
99:72:cb:2e:4f:18:1d:fd:be:7d:99:4e:e7:18:6a:
40:b3:5b:85:be:81:66:98:d9:07:c2:31:dd:62:ac:
61:af:c1:14:94:c4:72:80:31:b9:75:82:f6:94:1f:
dd:9f:67:38:12:01:c0:1b:f7:cb:9e:2f:30:51:94:
c0:90:b2:f1:ef:7b:8c:23:20:1d:8b:eb:98:72:b9:
59:0a:b1:36:1c:c1:93:29:28:d1:66:a0:a5:aa:db:
f9:38:1e:67:5f:10:b7:75:96:7b:36:b4:23:34:77:
80:3c:71:f6:32:19:0b:7f:52:3a:1b:11:ad:8b:ab:
6b:72:26:27:f3:15:88:d5:d7:eb:6e:f5:5a:fa:65:
d9:a2:09:5b:8c:20:a0:cd:53:93:ea:2f:9c:02:27:
5e:56:37:78:da:91:91:13:1c:43:f6:cb:c8:6a:26:
6f:ec:0c:35:fd:ab:7e:0f:79:20:d7:51:a8:85:83:
6a:9f:d6:ae:b0:ab:00:2c:4f:e4:4c:7e:24:1c:54:
2c:b7:4b:9c:1d:52:c9:ce:ec:37:94:b5:3a:12:8f:
b3:fa:cb:bb:af:c0:18:ea:34:8b:d9:30:fb:a9:8c:
d3:c0:5e:5b:c8:8c:a1:1b:66:5e:cd:20:03:c4:0f:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6E:F2:E8:BF:16:E8:90:21:73:07:D3:92:24:D4:68:90:9C:3A:C2
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS207429.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.125.0/24
141.11.188.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:a9:17:c1:d3:3f:bb:a8:e7:16:fe:16:c2:9f:f1:4c:0a:86:
72:20:fc:92:98:3e:bb:f0:bc:ee:ce:0a:0d:26:65:fa:3f:33:
f1:52:09:66:6e:c8:aa:2a:03:25:11:2d:0b:3a:69:a3:c5:1f:
6f:6e:88:2f:71:4e:fc:e6:13:a9:dd:2d:8e:1a:15:e8:ef:80:
d2:c6:8e:56:ba:24:2a:04:c1:9f:10:0f:0e:8b:b2:ca:bd:00:
26:73:e7:a0:a3:fe:59:a5:cc:62:a2:a9:30:40:76:37:b0:10:
29:be:f2:81:13:6a:c1:e3:76:65:49:af:c4:86:2f:5f:bb:71:
01:24:be:ad:6f:2a:5a:35:64:f3:7d:fc:1b:bc:21:63:a7:fa:
6b:93:8d:d5:b8:b4:6e:88:fe:3b:9d:0a:43:d8:31:db:68:e5:
6b:c7:58:8a:55:a6:22:6b:54:61:66:bb:15:9e:f2:c2:bd:0d:
48:82:d4:9d:ed:2b:56:78:4c:a9:73:e7:12:3e:e3:85:d3:4f:
1e:3d:b3:a9:a4:ab:b4:58:83:38:e0:1b:03:91:60:65:f7:53:
fc:9c:1a:2e:3f:8b:70:24:ad:f5:88:75:90:4d:79:fd:87:c8:
ef:cf:75:b3:68:66:4f:cf:9e:db:a5:97:d6:73:86:76:d6:35:
64:dc:03:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org