Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211585.roa
File: AS211585.roa (raw, json)
Hash identifier: Hv5ozb7qAxM8twdb7DnVXNyAowWwn0LwRiKOVaY71fM=
Subject key identifier: 9C:94:16:6B:42:2C:DC:84:23:61:B5:62:5F:68:B5:12:AB:03:8A:59
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1C43BEAA9BC5F61CEC1D157AE5495EAA72FCF523
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211585.roa
Signing time: Wed 26 Jul 2023 18:22:44 +0000
ROA not before: Wed 26 Jul 2023 18:17:44 +0000
ROA not after: Wed 24 Jul 2024 18:22:44 +0000
asID: 211585
IP address blocks: 141.11.220.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:43:be:aa:9b:c5:f6:1c:ec:1d:15:7a:e5:49:5e:aa:72:fc:f5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 26 18:17:44 2023 GMT
Not After : Jul 24 18:22:44 2024 GMT
Subject: CN=9C94166B422CDC842361B5625F68B512AB038A59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:ec:ea:68:98:14:d7:a6:35:97:cb:f7:6d:
29:15:b1:b2:fd:fc:15:44:35:09:5e:d5:70:76:83:
50:6d:f8:2e:d6:0d:d7:49:fc:3c:d4:ea:08:1f:12:
59:e5:71:1e:41:2a:38:60:2e:0c:e0:26:59:e5:d8:
91:14:90:8a:00:47:b9:e4:c6:64:c5:46:6d:6e:7a:
0c:61:46:37:1b:8f:4f:e0:4d:e1:9a:6e:df:4a:eb:
8f:23:bf:d8:c4:c7:82:77:37:61:c4:5f:8c:46:6a:
7b:e0:82:78:1f:6d:56:18:dd:25:6c:24:f6:98:04:
06:e4:d7:3d:14:8b:5f:8a:33:72:6d:01:5e:07:06:
2a:2a:dd:a3:4a:c1:5c:e1:12:ba:aa:e9:b1:94:95:
f1:97:a3:93:ac:c0:0c:c6:2f:f2:8f:ab:e5:0f:f1:
67:dd:3a:c4:c5:40:31:8c:41:b5:5b:2f:e1:69:73:
2d:f4:75:6e:03:ed:35:ce:0f:30:e6:7a:0b:d4:d7:
42:d5:14:97:8b:0c:00:ec:4a:9f:ae:88:cd:b0:f7:
1a:b3:1b:4f:89:73:14:a8:49:95:b8:34:3b:46:6c:
6b:51:36:a3:da:dc:3a:45:50:78:ce:af:97:44:fe:
16:27:35:7a:26:92:06:73:4d:bc:32:69:78:14:5c:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:94:16:6B:42:2C:DC:84:23:61:B5:62:5F:68:B5:12:AB:03:8A:59
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211585.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.220.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:36:60:5b:f5:0a:c6:81:74:51:a4:56:f9:d9:58:a3:5b:84:
48:fd:84:c1:66:ce:d3:7d:5b:af:d2:54:64:60:be:c0:a3:52:
13:95:6e:ce:a4:27:07:0a:ce:0e:8f:e4:ea:bd:5a:31:a8:f3:
5e:9f:22:42:18:7e:a1:33:fc:1b:4d:f4:03:5b:f3:5d:73:5c:
4b:5e:66:0d:a8:79:3f:c6:32:ab:ce:93:6f:d0:27:a4:77:46:
11:59:5a:20:91:42:25:4f:95:6b:36:38:2d:ea:ae:75:df:bc:
6a:92:04:9b:d5:4e:1e:1e:fb:60:71:fe:39:64:96:c1:49:cb:
ae:09:5d:7e:3d:e0:50:6f:80:7b:17:bc:b0:9e:37:48:48:c4:
5a:de:b0:f5:e1:ce:f0:28:ba:eb:0d:49:26:6f:24:32:9c:15:
e6:b5:d1:56:84:3f:f5:d4:20:3f:09:8d:3a:0a:66:61:8c:75:
60:19:1f:7c:40:af:86:4f:d2:ce:19:e6:d7:e9:a7:6a:ff:dc:
61:39:0a:1b:6a:5d:79:6c:e2:34:a5:36:f1:69:bf:63:ad:23:
94:b6:35:5f:5d:76:9e:15:1d:cf:97:7a:b7:d9:cd:b1:ef:3a:
a2:a3:76:ef:ca:08:25:af:4d:da:fe:5a:aa:ae:d2:c3:09:eb:
b4:cd:27:ee
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 14 12:17:40 2023 by rpki-client on console-ams.rpki-client.org