Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211432.roa
File: AS211432.roa (raw, json)
Hash identifier: z9kh9qI20vRcrRWYauBwzkOxg6UN/96/Bi6OehBIjhs=
Subject key identifier: C2:F3:16:3C:AB:84:69:26:89:0A:BD:0B:30:1F:F7:A8:DF:BB:21:34
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 22D7E0886186F1AC62641DF3D94D0724BBBCB791
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211432.roa
Signing time: Thu 27 Apr 2023 08:33:28 +0000
ROA not before: Thu 27 Apr 2023 08:28:28 +0000
ROA not after: Thu 25 Apr 2024 08:33:28 +0000
asID: 211432
IP address blocks: 141.11.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:d7:e0:88:61:86:f1:ac:62:64:1d:f3:d9:4d:07:24:bb:bc:b7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 27 08:28:28 2023 GMT
Not After : Apr 25 08:33:28 2024 GMT
Subject: CN=C2F3163CAB846926890ABD0B301FF7A8DFBB2134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:22:bd:ce:0e:00:96:af:1b:a6:8a:24:70:51:
0c:1b:7f:dd:ae:63:6f:1f:30:f9:49:17:dd:9a:ed:
f2:7c:d0:ee:03:ef:55:48:c0:b5:21:8e:bf:3c:f3:
d1:ac:ad:28:34:21:e3:37:1e:50:d9:a9:6e:7a:34:
d0:26:5a:dc:a2:4b:e1:19:89:9d:dc:f3:e8:31:c6:
ee:fe:5f:e7:d3:22:75:d9:cd:57:67:2c:57:77:ef:
05:30:ba:20:75:7a:8b:98:99:65:ce:ec:c2:94:bf:
ca:f2:94:36:05:10:f2:2d:fc:38:3a:81:a1:d0:76:
a7:a7:b4:f4:a1:36:79:b9:5e:4f:f8:73:7a:71:46:
5a:48:c4:74:f8:9d:6f:23:bd:95:86:99:b4:2c:87:
ad:72:0e:9e:0c:4d:47:1a:02:1c:3b:a8:83:2c:d2:
90:ec:a8:7b:62:80:f4:59:79:bb:82:45:1e:2e:38:
44:2c:42:a0:8f:ce:e8:1d:17:f0:b0:3b:ef:e1:91:
70:63:c5:c6:cd:ab:d7:50:b4:60:61:de:74:f0:5d:
34:b3:58:ba:4b:da:3c:e4:30:01:da:93:91:c9:12:
cd:45:98:bd:ac:41:cb:8d:24:61:b8:2c:0d:08:e9:
38:e9:90:de:5c:74:0a:9e:af:17:ff:77:1a:ee:12:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F3:16:3C:AB:84:69:26:89:0A:BD:0B:30:1F:F7:A8:DF:BB:21:34
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.26.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:09:5f:a5:9f:d4:1d:03:45:97:56:1a:b7:84:65:cf:30:0a:
59:2f:32:cc:61:21:25:4c:f4:ac:92:55:36:73:29:e4:50:ef:
a8:e8:b8:80:e9:36:3f:df:64:75:01:e5:7d:11:e2:ca:64:78:
5b:c5:53:43:91:1d:10:6e:ec:1e:bd:cd:4e:fa:ef:aa:fc:fc:
fd:f5:ec:19:75:d4:72:35:4b:11:b6:11:d9:26:a7:ef:5c:c0:
41:6c:46:74:24:28:d8:08:d5:ed:e0:41:18:ac:b9:04:3b:75:
78:03:f2:51:af:59:3d:a9:9b:89:74:fe:2e:b1:94:ae:40:95:
46:ba:70:44:49:f4:0a:35:45:4e:a5:22:b2:fb:05:17:5f:9d:
88:1e:42:f5:88:da:a9:01:ce:a2:c5:5f:bb:1c:8a:65:51:0d:
40:14:b2:5f:69:d5:84:90:51:ce:79:f7:6f:d8:2d:da:92:24:
45:63:03:66:44:ad:38:1c:62:b7:fe:11:5c:4b:a3:44:21:67:
81:c0:c4:9d:c9:e7:6b:5d:85:92:e7:29:64:df:ab:b2:b2:5e:
0b:4c:b1:4c:03:f0:06:f4:87:23:2a:76:bf:ce:1d:4e:b2:7c:
61:31:64:8f:af:a2:89:a7:ba:c3:53:10:65:14:56:24:bb:9c:
e1:9d:54:e6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUItfgiGGG8axiZB3z2U0HJLu8t5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yMzA0MjcwODI4MjhaFw0yNDA0MjUwODMzMjhaMDMxMTAvBgNV
BAMTKEMyRjMxNjNDQUI4NDY5MjY4OTBBQkQwQjMwMUZGN0E4REZCQjIxMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmIr3ODgCWrxumiiRwUQwbf92u
Y28fMPlJF92a7fJ80O4D71VIwLUhjr8889GsrSg0IeM3HlDZqW56NNAmWtyiS+EZ
iZ3c8+gxxu7+X+fTInXZzVdnLFd37wUwuiB1eouYmWXO7MKUv8rylDYFEPIt/Dg6
gaHQdqentPShNnm5Xk/4c3pxRlpIxHT4nW8jvZWGmbQsh61yDp4MTUcaAhw7qIMs
0pDsqHtigPRZebuCRR4uOEQsQqCPzugdF/CwO+/hkXBjxcbNq9dQtGBh3nTwXTSz
WLpL2jzkMAHak5HJEs1FmL2sQcuNJGG4LA0I6TjpkN5cdAqerxf/dxruEuDlAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUwvMWPKuEaSaJCr0LMB/3qN+7ITQwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjExNDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQsa
MA0GCSqGSIb3DQEBCwUAA4IBAQCyCV+ln9QdA0WXVhq3hGXPMApZLzLMYSElTPSs
klU2cynkUO+o6LiA6TY/32R1AeV9EeLKZHhbxVNDkR0Qbuwevc1O+u+q/Pz99ewZ
ddRyNUsRthHZJqfvXMBBbEZ0JCjYCNXt4EEYrLkEO3V4A/JRr1k9qZuJdP4usZSu
QJVGunBESfQKNUVOpSKy+wUXX52IHkL1iNqpAc6ixV+7HIplUQ1AFLJfadWEkFHO
efdv2C3akiRFYwNmRK04HGK3/hFcS6NEIWeBwMSdyedrXYWS5ylk36uysl4LTLFM
A/AG9IcjKna/zh1OsnxhMWSPr6KJp7rDUxBlFFYku5zhnVTm
Generated at Tue Sep 26 00:49:13 2023 by rpki-client on console-ams.rpki-client.org