Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209371.roa
File: AS209371.roa (raw, json)
Hash identifier: vbrsynHQwufEN5W4SJ+rngZ1UTkPbEz9lQp1X59l7Vw=
Subject key identifier: 87:A1:79:01:C9:3B:92:CE:39:F0:D9:E9:F6:17:18:9D:B8:D8:03:8C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1CF1685246EA3B99C5125957F0C19A0BFF270DBF
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209371.roa
Signing time: Fri 27 Jan 2023 12:16:28 +0000
ROA not before: Fri 27 Jan 2023 12:11:28 +0000
ROA not after: Fri 26 Jan 2024 12:16:28 +0000
asID: 209371
IP address blocks: 141.11.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:f1:68:52:46:ea:3b:99:c5:12:59:57:f0:c1:9a:0b:ff:27:0d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 27 12:11:28 2023 GMT
Not After : Jan 26 12:16:28 2024 GMT
Subject: CN=87A17901C93B92CE39F0D9E9F617189DB8D8038C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:e3:a7:9e:fa:53:8c:80:39:2f:28:51:ff:
e1:4b:96:2e:4d:68:de:16:07:de:15:4d:73:3b:09:
2e:13:ff:7c:69:fb:4e:ac:f3:f9:cc:36:11:39:f9:
e8:8c:75:75:f9:25:77:8b:bb:10:94:1c:4b:ce:59:
9c:32:55:06:27:fb:01:9a:93:ac:ba:5d:3a:f0:77:
db:42:6b:00:fe:ec:34:34:6a:21:41:70:98:f2:d7:
1b:25:3c:64:91:31:f0:f5:8d:05:cf:57:df:7a:35:
19:9a:99:9a:26:2c:c1:bf:94:98:29:eb:f1:b5:d5:
e4:39:0f:df:51:d4:7a:b3:a3:5a:88:f1:92:73:46:
48:5f:33:00:d6:c0:57:9e:41:95:6b:79:a0:15:cc:
64:0b:a2:12:a6:38:b2:67:4e:03:37:f4:aa:b5:e2:
32:24:86:51:4c:84:5e:73:81:4a:5e:68:8f:55:a6:
c1:8c:c6:c4:6b:2b:1e:f8:19:f5:ec:3b:c0:25:34:
26:23:e6:c2:29:4c:0b:07:63:d6:66:cb:df:c1:0c:
28:ac:dc:66:ae:af:b5:81:81:a0:49:f7:d3:84:83:
62:08:6e:fd:22:14:92:1c:00:63:23:52:c5:52:c1:
f7:26:05:40:06:37:96:d0:da:d2:1d:be:1a:11:1b:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A1:79:01:C9:3B:92:CE:39:F0:D9:E9:F6:17:18:9D:B8:D8:03:8C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209371.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:30:4f:d1:cc:7a:c3:44:c5:c7:ca:0e:fb:eb:76:a4:2a:c1:
79:c0:d9:79:e9:8d:c8:01:21:c2:2c:46:f6:18:a7:35:f5:fc:
58:e3:25:64:56:b6:7c:93:ec:ce:08:73:ba:9b:00:6f:ea:e3:
6f:d2:c8:bf:d6:bd:6c:77:e1:a3:22:26:8b:fa:12:c2:fc:94:
e6:3c:65:85:00:31:0e:53:32:cd:5d:9c:0d:3b:d5:ba:0b:e5:
90:ea:18:52:16:3a:a8:ca:7b:36:c0:f1:71:f3:6f:e7:21:81:
ee:9f:12:d3:f4:c5:a6:c0:eb:e1:88:24:7b:4e:7c:c2:0c:3a:
e3:3c:67:19:b2:c8:51:f0:e9:df:27:9a:6d:0d:7c:f6:6a:c4:
d3:58:37:f9:a5:2f:a3:83:fe:8d:ba:69:ed:7e:9b:45:cd:ba:
50:7c:d7:f8:ee:ca:b6:00:f1:4e:71:4c:a4:ab:14:d9:45:33:
89:fb:ff:ca:e8:47:17:6d:06:ce:75:1c:aa:24:8a:41:02:f6:
8b:6d:12:e0:da:f9:93:96:ba:9b:d8:ae:fa:6e:06:07:38:47:
ab:12:48:5e:48:2f:b6:3d:ea:99:39:e1:ea:4b:b1:97:1f:2f:
80:ec:bd:71:03:a3:2e:d7:ad:9b:76:ca:8a:d9:9a:9a:57:08:
cb:be:29:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org