Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212669.roa
File: AS212669.roa (raw, json)
Hash identifier: 6kHemdw0hAoYBKC+h1ThIU7hd7Ww4F1tRWQvQnoxxdg=
Subject key identifier: 45:EF:AC:79:76:55:97:5B:EA:69:8C:D7:4A:AB:6E:A5:B0:B5:55:3D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3F822DD086B6DAF169C9BA89D2307800888DB39C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212669.roa
Signing time: Tue 13 Jun 2023 15:30:04 +0000
ROA not before: Tue 13 Jun 2023 15:25:04 +0000
ROA not after: Tue 11 Jun 2024 15:30:04 +0000
asID: 212669
IP address blocks: 141.11.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:82:2d:d0:86:b6:da:f1:69:c9:ba:89:d2:30:78:00:88:8d:b3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 13 15:25:04 2023 GMT
Not After : Jun 11 15:30:04 2024 GMT
Subject: CN=45EFAC797655975BEA698CD74AAB6EA5B0B5553D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:bb:03:7c:71:2b:21:9e:95:4c:7c:aa:1d:
46:fd:8e:db:1c:55:71:e5:82:bd:1a:af:c8:af:d0:
74:50:b1:06:ba:fd:0a:8d:1e:3d:fb:8e:81:b0:d6:
60:64:36:3c:46:1c:34:b4:a7:bd:b8:3d:70:c7:e6:
35:d5:1c:22:9d:5f:b8:27:e3:39:dd:0a:1a:63:d0:
16:14:70:6b:d9:bc:6e:19:7a:9d:65:0f:8f:8b:80:
e7:19:fe:72:02:4d:2e:d9:7d:9b:7e:ea:3f:0f:9a:
31:c7:c7:7a:88:0e:e9:0f:4e:7e:ff:4a:69:58:46:
87:20:28:fa:d9:dd:48:e9:7d:d2:e7:5a:75:86:53:
00:33:9b:e2:15:17:2b:2d:fa:2a:20:19:bb:a9:ae:
04:86:0f:2c:de:24:3f:e9:d0:45:86:53:dd:f0:e5:
b7:bd:b3:ca:d9:be:e2:81:f9:db:f9:71:67:89:9a:
68:0b:29:ca:a0:de:7c:f2:6f:ff:70:db:c0:fe:88:
fa:fa:2a:47:17:6c:e4:e9:24:41:75:11:1e:d2:23:
f6:25:1c:3f:31:27:8b:d2:25:34:bf:b8:aa:5c:68:
33:a3:a5:3e:19:99:d3:f0:50:d5:6b:e4:9a:e6:0f:
a3:ff:d1:75:37:c4:a3:4c:f9:36:a6:76:ba:c1:3d:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EF:AC:79:76:55:97:5B:EA:69:8C:D7:4A:AB:6E:A5:B0:B5:55:3D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212669.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.248.0/24
Signature Algorithm: sha256WithRSAEncryption
95:64:73:e2:25:da:77:9b:0f:2f:e6:a4:dc:77:61:60:c5:66:
6a:bd:03:c3:60:ee:6c:51:e2:a1:d8:aa:f4:c3:a1:56:c9:4e:
aa:21:1f:bd:be:e9:2f:e1:83:8c:69:c8:84:02:4a:5b:a9:19:
71:16:eb:95:35:01:b7:9f:3f:f1:55:84:51:4f:29:08:a1:a2:
98:fd:e9:ee:27:18:e6:a9:6f:9f:fa:11:1f:b8:6d:ec:0e:91:
8d:bf:44:d3:cf:2c:26:0e:d4:b3:57:c3:51:7d:6b:f3:a7:76:
f1:f0:18:0b:b2:db:1a:3e:cc:b8:10:60:c7:26:8e:1a:06:95:
4f:02:58:80:a3:6b:ed:9c:25:4c:34:15:7e:0c:b6:4a:56:7b:
70:92:27:01:cd:d6:15:88:fc:09:16:38:41:7b:4f:57:65:4a:
7e:2e:af:0a:ff:6d:92:c0:cb:d3:41:f0:a0:95:2d:80:40:1b:
d4:4c:2e:47:a0:12:55:94:7d:23:98:9f:7a:ad:2c:1d:0d:9b:
7a:c7:a7:e1:74:bf:96:44:b7:9b:f8:ee:95:f5:4e:38:83:35:
7f:8c:94:e1:d8:41:3d:e2:7d:14:d2:70:e8:5b:fc:dd:de:d9:
04:54:39:a7:50:5b:2c:0b:b8:d2:0c:22:ce:61:ba:57:05:ce:
ef:e1:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org