Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211813.roa
File: AS211813.roa (raw, json)
Hash identifier: ZOoozjRQj2YNcqypigfkKQ/SHuy+5MDKToczgJjZSCQ=
Subject key identifier: 46:FB:BF:B6:30:34:BA:00:D0:85:07:10:21:46:3C:1C:C9:96:F1:AA
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 19628A28DAFBF1AB4BECC5617C61AE7CC6394000
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211813.roa
Signing time: Mon 04 Sep 2023 00:49:30 +0000
ROA not before: Mon 04 Sep 2023 00:44:30 +0000
ROA not after: Mon 02 Sep 2024 00:49:30 +0000
asID: 211813
IP address blocks: 141.11.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:62:8a:28:da:fb:f1:ab:4b:ec:c5:61:7c:61:ae:7c:c6:39:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 4 00:44:30 2023 GMT
Not After : Sep 2 00:49:30 2024 GMT
Subject: CN=46FBBFB63034BA00D085071021463C1CC996F1AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:cc:78:b0:7d:24:bf:60:7b:41:fa:22:42:
b9:5e:94:4f:6e:b2:59:82:e7:32:f5:8e:a9:91:84:
ba:f8:a0:0f:53:76:55:32:d9:7f:cb:28:79:31:35:
8a:ba:b6:0d:b3:6a:16:2b:44:e5:5d:4f:b6:9b:5c:
2e:90:f2:11:d2:c1:70:cc:6d:36:f9:e1:ef:9d:f2:
9b:a1:bc:1a:c9:cf:e1:d0:82:43:d2:20:54:fa:1c:
04:f4:db:ae:75:b3:70:91:16:a1:ee:7b:34:d9:e5:
48:7d:4d:4f:73:4f:a8:11:48:c2:42:56:95:ad:3a:
92:e6:54:97:cb:1a:27:72:15:b0:62:27:6e:ec:bb:
fe:2a:0d:dc:a1:dd:c3:bd:a0:f5:ad:fe:31:b5:89:
74:73:f6:f6:21:2b:bf:f4:99:3f:30:da:2a:16:92:
53:33:39:cb:99:85:f2:68:6d:71:9a:e7:a1:2f:4f:
f1:1a:75:ba:d3:d9:e1:2a:8d:9a:20:8e:38:a9:a8:
31:dc:4d:df:f6:62:80:d1:9b:6f:9e:de:9b:29:58:
94:7b:c3:60:53:b1:02:a3:c4:05:d4:f0:a9:ec:ae:
ea:46:57:13:e7:58:ff:5a:e0:9b:ef:bd:7b:de:34:
00:e0:6f:f0:89:76:83:47:a2:ac:0f:37:77:40:aa:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FB:BF:B6:30:34:BA:00:D0:85:07:10:21:46:3C:1C:C9:96:F1:AA
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211813.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.28.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:fe:da:8e:34:dc:03:b0:53:46:f2:56:a2:e1:62:0c:ee:24:
a6:a3:3a:81:9e:9d:d5:59:7f:0f:57:ec:7d:c4:cc:8b:97:d7:
f9:fb:b6:ab:82:13:24:63:f6:60:dc:c4:41:56:36:f1:75:23:
dd:75:d6:20:86:bd:e9:ef:ec:e6:27:2a:cc:61:1b:b1:d5:b8:
99:1c:d9:c3:55:d4:32:a8:d9:f1:8e:5a:1e:59:d7:4b:30:df:
84:10:91:9d:e1:fd:6b:51:e7:78:0e:9b:c0:9e:da:65:a5:44:
5d:2c:9e:05:9f:9c:c3:69:2b:aa:9d:f7:dc:da:c4:e4:7c:9e:
59:61:fd:49:75:c5:8e:e2:e3:bd:5b:4b:26:c3:3b:34:41:a4:
0e:a2:4d:84:91:cb:6a:ec:1b:aa:65:8f:e4:9f:c3:f0:d2:42:
ec:16:16:9b:e2:63:eb:28:c9:5d:85:1c:96:67:9f:33:6d:7f:
39:3c:49:c3:05:c6:6b:88:3b:8e:96:07:ad:09:07:1b:c1:2f:
c7:f0:12:d7:9e:c6:0b:f7:9f:6a:70:97:69:6f:43:59:a5:5e:
82:35:b2:a9:c5:4c:5e:dd:38:4c:a3:c0:06:11:5f:7a:aa:ce:
2d:17:64:d5:0b:cd:b7:5a:04:97:04:8a:fd:ef:d0:0a:a9:5d:
be:af:8e:28
-----BEGIN CERTIFICATE-----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Generated at Thu Oct 5 08:12:09 2023 by rpki-client on console-fra.rpki-client.org