Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS207633.roa
File: AS207633.roa (raw, json)
Hash identifier: gPDTpp1AIXA2YIdInqBxQpsgOL4rMiGWskevfSwhKA8=
Subject key identifier: 0B:EC:37:34:4F:08:8B:60:DC:E4:40:92:6D:36:72:C9:23:68:FB:55
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2CC6EAB700EEB7EB8E07AC40EF90085D87782DED
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS207633.roa
Signing time: Thu 13 Apr 2023 11:44:37 +0000
ROA not before: Thu 13 Apr 2023 11:39:37 +0000
ROA not after: Thu 11 Apr 2024 11:44:37 +0000
asID: 207633
IP address blocks: 141.11.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c6:ea:b7:00:ee:b7:eb:8e:07:ac:40:ef:90:08:5d:87:78:2d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 13 11:39:37 2023 GMT
Not After : Apr 11 11:44:37 2024 GMT
Subject: CN=0BEC37344F088B60DCE440926D3672C92368FB55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:11:a7:aa:19:27:d8:ae:1b:4e:0d:89:78:14:
13:cc:52:e2:19:e8:0b:a3:44:c3:c6:83:e7:f1:84:
71:93:68:db:68:54:8e:02:57:8a:1c:0f:c4:c9:ca:
a9:69:57:5a:bf:0c:dd:85:d2:05:01:d9:47:d7:3c:
aa:cc:c1:7f:83:65:68:64:56:9d:9d:16:cf:d1:41:
51:01:51:92:25:22:15:59:71:85:15:d7:c4:c6:66:
9c:3c:d5:5a:95:f7:4b:63:1a:78:e1:a7:9e:21:46:
55:5b:13:db:b5:6a:42:2f:4d:19:ef:20:e9:95:d5:
fc:ef:eb:cf:78:ad:c2:07:a4:a7:46:d8:c5:b8:1d:
5a:77:89:25:52:dd:87:3c:5a:b3:ff:99:20:ae:1d:
a2:2d:d7:5a:28:61:04:7c:bc:40:89:7d:69:9d:c1:
21:71:d6:e5:06:de:b3:fc:cb:29:6f:36:0a:06:97:
1a:a9:40:c7:4a:c3:99:1d:69:05:9f:3f:93:1f:93:
06:75:00:bd:5d:26:f7:f0:e3:15:fe:fd:5d:d0:7b:
28:dc:23:72:22:e0:18:36:6d:37:1c:16:6f:e5:53:
10:13:6b:18:a4:86:02:24:90:08:85:71:89:ef:c6:
36:3f:16:97:97:f2:89:64:b5:1e:a3:2f:ef:7d:2a:
69:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EC:37:34:4F:08:8B:60:DC:E4:40:92:6D:36:72:C9:23:68:FB:55
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS207633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d9:98:58:5b:5f:08:bb:37:3f:2e:4a:04:d1:77:e4:a4:8c:
e0:b1:94:cb:25:3c:ff:74:3c:19:b0:e7:8a:af:9d:70:20:02:
df:f3:b0:ea:5c:cf:90:fa:0f:47:10:45:e4:a2:ec:3a:13:3f:
2e:f9:2d:b6:40:95:8e:c5:fb:4a:36:2e:5e:dd:73:ca:ae:a0:
a0:58:4f:8f:0e:b5:06:6a:fb:dd:99:e1:83:64:3b:fc:b9:43:
b6:2c:70:aa:79:0e:07:f3:c3:0a:34:54:31:cf:d2:50:fc:0f:
1f:97:1c:5a:00:3e:d6:1c:08:3a:ed:a9:d8:e1:2b:4b:98:a5:
24:ec:c6:59:b2:88:30:3c:2e:5b:f4:c1:8c:72:74:3a:2b:48:
7e:15:1e:6a:24:49:ea:31:6c:fe:b4:59:e5:4c:f2:14:c2:a9:
45:28:c3:ca:94:91:4d:7a:2f:cf:f7:36:e6:38:50:ec:d0:26:
bc:19:41:86:0c:9c:08:81:1d:36:52:56:f4:63:36:5a:35:b9:
3d:43:1a:91:a8:dd:02:75:ed:06:1e:b4:c7:90:3b:df:77:af:
e0:ca:2e:e3:34:bd:c6:fe:69:14:4a:a4:c8:15:28:24:c5:04:
35:23:cb:55:2d:64:1f:fd:20:cb:0a:47:56:c4:77:97:0e:7b:
10:9c:78:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org