Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210439.roa
File: AS210439.roa (raw, json)
Hash identifier: HF/o2FOLjnK0uKI/fROfuiWtCWfb+HeO95+V9G4P4eQ=
Subject key identifier: 94:C9:78:A4:BC:50:16:57:0F:F0:12:ED:E8:BF:C4:69:8F:66:31:7B
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 379C71F566C63D4EA99B4D2BE994242001ED3D11
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210439.roa
Signing time: Mon 30 Jan 2023 11:24:21 +0000
ROA not before: Mon 30 Jan 2023 11:19:21 +0000
ROA not after: Mon 29 Jan 2024 11:24:21 +0000
asID: 210439
IP address blocks: 141.11.107.0/24 maxlen: 24
141.11.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:9c:71:f5:66:c6:3d:4e:a9:9b:4d:2b:e9:94:24:20:01:ed:3d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 30 11:19:21 2023 GMT
Not After : Jan 29 11:24:21 2024 GMT
Subject: CN=94C978A4BC5016570FF012EDE8BFC4698F66317B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:04:f8:d3:88:7b:9c:c4:33:02:85:46:5d:c6:
ad:c1:61:13:ce:ba:74:7d:dd:41:79:b2:46:ab:77:
05:34:d5:8a:dc:19:44:49:46:f4:4c:d5:69:43:9f:
c5:fc:59:7e:c9:6d:61:c3:12:84:4b:9e:6a:f3:6d:
45:9f:cd:b3:1b:88:8c:a5:3d:d8:55:84:29:c0:fd:
e9:bc:17:07:5d:0d:6b:0b:56:f3:c9:8a:d4:5d:61:
6d:54:c7:1f:4d:8b:61:31:f1:d0:b5:17:ff:20:8e:
c5:e0:30:7b:cc:68:34:bf:09:38:99:6b:0c:d5:dc:
f0:bf:f6:69:2b:64:d6:2a:11:e4:0f:40:e9:6a:5b:
b2:cc:4f:81:b7:10:d5:59:eb:87:e7:57:9f:c4:40:
56:55:84:b4:eb:5d:44:4d:d5:a8:9e:40:a4:6f:27:
e7:9c:8b:43:59:4b:6e:55:44:74:67:9f:77:c5:28:
e8:5e:a4:1b:7a:c0:ba:24:24:31:26:03:7e:d8:52:
58:56:04:2c:dd:63:b8:54:6a:f4:3a:eb:11:6f:cd:
49:95:dc:5f:f6:35:fd:ad:da:bc:47:80:5f:56:c7:
58:d7:bb:db:3f:a5:6a:b1:eb:5c:1e:81:17:41:e6:
4f:4d:c8:15:49:e1:ca:6f:87:19:e3:da:1c:b8:5b:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C9:78:A4:BC:50:16:57:0F:F0:12:ED:E8:BF:C4:69:8F:66:31:7B
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.107.0/24
141.11.109.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:01:12:89:3c:5d:c7:e7:47:3f:6f:b5:d2:ce:76:9b:65:d5:
3d:bd:95:10:a6:85:1f:96:b0:00:79:ce:af:6e:5f:92:76:12:
cb:c3:74:1d:ab:43:3b:54:86:37:74:bb:9b:d8:57:c5:f8:7f:
b3:75:88:67:20:96:ff:01:0e:74:77:98:b8:9a:f2:85:51:82:
14:b3:9e:2a:ee:01:58:87:a0:aa:e0:72:4d:e8:de:b0:ad:71:
1d:59:5e:ea:7f:14:0e:dd:ef:a5:b4:0f:d5:ed:2d:90:1b:34:
5f:6d:c2:51:d4:47:e5:05:76:e7:50:94:16:aa:b3:39:3f:e1:
2b:bc:8d:4d:7f:ee:00:ff:31:d7:3a:b9:7a:26:01:9b:99:a8:
35:e1:36:62:89:68:29:a3:97:7e:21:fc:15:78:5a:1c:09:25:
00:ed:c7:18:74:17:36:50:8b:7a:7c:32:a3:d0:97:74:5c:f8:
bd:84:79:66:d9:9a:ef:b4:5a:dd:cf:8f:69:6a:a3:d6:48:30:
72:8b:c3:36:2f:3e:61:27:64:eb:b7:2f:ed:73:a6:e0:57:2f:
b7:1b:67:77:e3:89:3f:bb:17:69:36:b2:05:b8:f7:96:2e:81:
70:e6:2a:49:cf:4d:fd:5f:02:f5:78:84:8a:fd:49:e3:b7:f4:
4e:5d:45:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org