Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211826.roa
File: AS211826.roa (raw, json)
Hash identifier: tACiqRxxjYiAfCnHt/KiO1XqB7ROOcpBcLmASb6W3b8=
Subject key identifier: 74:4C:5C:3F:3A:57:B2:31:07:03:64:A5:D8:A1:83:09:19:6B:B5:A3
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 522AF18DDDECAA3390015116D9E64B4DCA275183
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211826.roa
Signing time: Mon 10 Jul 2023 21:20:52 +0000
ROA not before: Mon 10 Jul 2023 21:15:52 +0000
ROA not after: Mon 08 Jul 2024 21:20:52 +0000
asID: 211826
IP address blocks: 141.11.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:2a:f1:8d:dd:ec:aa:33:90:01:51:16:d9:e6:4b:4d:ca:27:51:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 10 21:15:52 2023 GMT
Not After : Jul 8 21:20:52 2024 GMT
Subject: CN=744C5C3F3A57B231070364A5D8A18309196BB5A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:52:50:ca:42:00:ed:cc:f6:50:88:a8:8e:
e6:68:f8:3b:40:bc:e9:4b:90:8f:2a:10:13:92:b9:
09:1d:c8:5d:de:65:43:e9:94:95:d7:f7:ce:21:ba:
d5:7c:3b:18:ff:39:61:44:1f:e9:2a:48:d5:b2:52:
1b:a8:28:d6:19:20:ea:ae:55:ea:37:95:d7:fa:00:
34:d0:12:c1:c0:9f:fe:89:bb:0a:e2:e9:ed:a2:3d:
e6:9a:90:34:1e:13:2b:3f:ee:ba:56:a3:28:65:a0:
4e:4b:97:5d:d4:5b:5f:d1:26:07:c1:25:49:0a:6b:
71:d9:cc:1d:56:91:63:fe:b3:9c:5f:df:97:0f:f3:
41:8b:ee:cd:03:59:c3:04:a6:fd:ac:a7:70:03:2f:
2a:d8:af:e9:88:7a:73:4d:11:e4:ca:80:f2:4a:83:
bd:4f:d2:9c:9a:1c:89:35:54:14:c6:aa:c5:af:e9:
6f:f9:f2:85:1f:ae:d5:64:30:c4:92:0f:e7:a9:82:
cd:5b:b6:79:c8:0d:d6:e4:70:00:d5:52:61:2f:3e:
30:bc:e7:b0:57:e0:f2:c2:5c:2c:b4:c8:d3:0f:8a:
83:08:14:e8:33:dc:69:ab:9d:d0:f6:46:ae:53:3c:
5c:54:dc:5d:51:2e:35:3f:4a:bc:00:b1:34:3d:10:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4C:5C:3F:3A:57:B2:31:07:03:64:A5:D8:A1:83:09:19:6B:B5:A3
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211826.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.27.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:64:7a:61:84:6e:a2:d3:aa:41:2c:4c:d5:d8:75:ef:c5:16:
01:da:96:a9:24:ed:e2:b2:a2:cd:77:9b:f9:3d:1d:5f:7c:0d:
42:5d:6a:0f:88:a6:b9:0d:28:fa:8e:fb:eb:07:ea:0c:2b:b0:
a8:54:f9:5f:15:bd:9d:35:01:f9:60:24:d3:86:69:23:54:a2:
48:78:e3:5d:ee:66:a6:00:4d:03:9f:37:c7:93:13:95:dc:83:
f0:01:29:bc:1f:55:2b:02:46:c5:38:18:97:01:61:a6:20:37:
e8:b5:c3:d2:c4:49:b9:3f:f9:4c:ec:1a:00:6b:be:51:16:42:
53:b3:f8:2e:61:34:8c:03:f6:bd:9c:0a:09:d1:80:ed:ef:18:
31:ec:c1:ae:d4:4c:1e:3c:ab:eb:82:93:7c:56:05:8a:d8:10:
30:70:7a:26:e4:5a:54:cc:11:d7:a5:a0:f9:b2:f4:3c:5e:82:
42:3c:fb:2a:16:3e:a0:a5:bc:07:d7:b6:36:86:a7:6b:bf:be:
e7:04:18:a8:40:03:b3:9c:1e:56:c2:1b:ee:38:c7:7e:81:54:
40:c7:dc:9b:40:6f:51:b5:03:d6:70:8a:8f:78:f8:c3:77:eb:
85:ae:a2:21:6f:56:a3:e2:eb:de:d2:db:cb:39:43:bd:55:05:
a7:b0:b4:44
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 8 10:20:18 2023 by rpki-client on console-ams.rpki-client.org