Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209737.roa
File: AS209737.roa (raw, json)
Hash identifier: 5H6OSFF73aOHRyT/PCc63fk1Ukk2ey1OC6+Zqk8aTWM=
Subject key identifier: 80:8B:02:56:ED:7A:6B:45:B6:FE:B0:B8:26:15:24:61:B2:37:88:4C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6E1515F1EC1F68B5A7B176DC84BB49CDDE65FB81
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209737.roa
Signing time: Tue 27 Dec 2022 14:44:43 +0000
ROA not before: Tue 27 Dec 2022 14:39:43 +0000
ROA not after: Tue 26 Dec 2023 14:44:43 +0000
asID: 209737
IP address blocks: 141.11.220.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:15:15:f1:ec:1f:68:b5:a7:b1:76:dc:84:bb:49:cd:de:65:fb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Dec 27 14:39:43 2022 GMT
Not After : Dec 26 14:44:43 2023 GMT
Subject: CN=808B0256ED7A6B45B6FEB0B826152461B237884C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:bd:5e:e3:ad:1f:8e:f3:c2:49:4e:4d:9b:
ba:64:27:a4:ad:fa:5b:e7:ab:f1:6f:1b:17:b0:40:
0e:1b:58:21:9c:fd:43:db:41:e6:13:d2:15:73:43:
2a:b8:6a:e6:29:46:25:ce:ee:15:6d:0f:52:90:8a:
4c:b1:e9:7e:e8:e6:da:6f:56:c4:c9:6d:5a:3a:c7:
be:e2:b6:0a:0d:c9:ef:84:59:56:fa:83:8f:a9:38:
33:2c:0b:9a:e1:11:6b:d1:d5:d8:db:54:42:cc:c4:
4e:6d:f6:37:6f:79:e5:fb:d5:3d:d3:e3:9d:39:af:
92:75:b2:99:cc:d3:92:24:6b:08:58:f2:01:34:cb:
b3:4c:8f:d3:ab:8b:25:5c:ec:91:40:c0:fd:ad:10:
00:a8:6c:52:8f:be:7d:2f:17:81:c9:18:80:57:e2:
4d:ff:76:82:48:83:99:c4:a3:41:2d:cb:1b:0b:a2:
7f:b5:63:6c:30:50:d9:66:c9:20:f7:6d:53:28:13:
6a:44:64:1b:a6:c1:1e:41:29:25:00:0e:c8:39:b3:
1b:2c:f3:d9:97:60:9a:e2:16:37:2e:ac:b5:a2:94:
f4:7f:c5:76:14:91:01:c7:9d:df:42:6f:37:7a:b2:
8d:37:81:a0:7b:1e:c9:b7:1d:5d:c4:64:14:1a:61:
8c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8B:02:56:ED:7A:6B:45:B6:FE:B0:B8:26:15:24:61:B2:37:88:4C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.220.0/22
Signature Algorithm: sha256WithRSAEncryption
86:69:61:46:b3:96:12:52:f0:c4:2b:40:9c:36:f1:0c:e7:c2:
ac:16:7b:5d:1f:b9:b7:28:f7:a8:42:e5:50:14:b2:9d:10:6e:
94:5b:65:57:b3:a0:31:9f:6c:93:14:0d:f7:7c:c3:77:c2:58:
98:c7:00:40:d4:38:c1:68:dd:5d:34:6e:80:86:6e:de:51:9b:
bd:a6:ee:f6:ca:7b:cb:00:71:06:d2:df:75:95:03:0d:f3:dc:
4a:ad:7f:6d:6c:b8:8f:7e:2d:db:a2:99:83:e5:82:c7:64:4a:
66:b3:d4:64:95:57:c7:77:4b:3e:f0:d1:c6:5e:02:c4:57:9e:
33:c1:c4:42:f1:3d:9f:e0:9a:6b:5a:14:1b:d7:62:02:c5:04:
a3:3e:3d:40:64:79:7c:02:fd:27:14:9b:e8:85:bc:75:d9:99:
fd:43:d1:4a:5f:44:79:13:f2:80:41:5e:ab:a3:f1:80:24:dd:
51:39:c4:2f:63:cc:aa:18:ff:b2:e3:d3:09:b9:ae:98:a2:dd:
3e:85:3f:77:9d:ac:dc:23:70:8f:16:40:f4:42:13:0d:4d:3b:
c5:1e:86:fb:a6:18:4a:34:eb:73:b4:0f:be:ee:a6:2f:30:e4:
68:66:cb:b4:91:0f:e1:71:2d:2a:b4:98:d6:30:f2:1f:53:08:
d9:3d:a4:97
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUbhUV8ewfaLWnsXbchLtJzd5l+4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yMjEyMjcxNDM5NDNaFw0yMzEyMjYxNDQ0NDNaMDMxMTAvBgNV
BAMTKDgwOEIwMjU2RUQ3QTZCNDVCNkZFQjBCODI2MTUyNDYxQjIzNzg4NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd8r1e460fjvPCSU5Nm7pkJ6St
+lvnq/FvGxewQA4bWCGc/UPbQeYT0hVzQyq4auYpRiXO7hVtD1KQikyx6X7o5tpv
VsTJbVo6x77itgoNye+EWVb6g4+pODMsC5rhEWvR1djbVELMxE5t9jdveeX71T3T
4505r5J1spnM05IkawhY8gE0y7NMj9OriyVc7JFAwP2tEACobFKPvn0vF4HJGIBX
4k3/doJIg5nEo0EtyxsLon+1Y2wwUNlmySD3bVMoE2pEZBumwR5BKSUADsg5sxss
89mXYJriFjcurLWilPR/xXYUkQHHnd9Cbzd6so03gaB7Hsm3HV3EZBQaYYz3AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUgIsCVu16a0W2/rC4JhUkYbI3iEwwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjA5NzM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjQvc
MA0GCSqGSIb3DQEBCwUAA4IBAQCGaWFGs5YSUvDEK0CcNvEM58KsFntdH7m3KPeo
QuVQFLKdEG6UW2VXs6Axn2yTFA33fMN3wliYxwBA1DjBaN1dNG6Ahm7eUZu9pu72
ynvLAHEG0t91lQMN89xKrX9tbLiPfi3bopmD5YLHZEpms9RklVfHd0s+8NHGXgLE
V54zwcRC8T2f4JprWhQb12ICxQSjPj1AZHl8Av0nFJvohbx12Zn9Q9FKX0R5E/KA
QV6ro/GAJN1ROcQvY8yqGP+y49MJua6Yot0+hT93nazcI3CPFkD0QhMNTTvFHob7
phhKNOtztA++7qYvMORoZsu0kQ/hcS0qtJjWMPIfUwjZPaSX
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org