Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS213305.roa
File: AS213305.roa (raw, json)
Hash identifier: qWdEDOouJIMz2vibGZVUanU3Qn4ht0wgX703mnaibMg=
Subject key identifier: C9:2B:3C:35:A4:66:D5:1C:92:3E:65:38:DD:37:7C:67:49:2D:4E:CD
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 209E82C3972FA8917B4B55343CC4457DE4BD447F
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS213305.roa
Signing time: Thu 09 Mar 2023 14:58:28 +0000
ROA not before: Thu 09 Mar 2023 14:53:28 +0000
ROA not after: Thu 07 Mar 2024 14:58:28 +0000
asID: 213305
IP address blocks: 141.11.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:9e:82:c3:97:2f:a8:91:7b:4b:55:34:3c:c4:45:7d:e4:bd:44:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 9 14:53:28 2023 GMT
Not After : Mar 7 14:58:28 2024 GMT
Subject: CN=C92B3C35A466D51C923E6538DD377C67492D4ECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0d:a0:8f:ae:ac:7f:2b:46:d4:5c:28:e5:18:
5e:e7:18:38:32:d9:1a:33:d0:07:11:c8:bf:dc:f5:
a2:a8:bd:07:78:16:f2:f3:97:18:98:c1:5d:5e:fd:
38:7a:6a:96:a4:63:af:1e:51:28:1d:2b:8e:cc:4a:
91:5f:cb:a8:64:0d:d6:37:74:55:96:66:d3:d3:7d:
be:65:ba:59:f5:48:d4:fa:5d:c3:fd:c1:10:d6:1e:
b7:40:35:51:92:69:c4:33:32:52:ea:49:72:b1:9d:
76:e2:5c:b8:3e:8d:28:e1:e9:a1:e0:e0:19:37:9d:
6b:b0:4b:d8:df:98:04:ac:2f:d0:e4:75:75:36:5b:
3d:70:84:1f:e8:06:b4:b6:3e:d6:c0:00:1b:55:8c:
66:d9:b5:43:6b:78:fd:0e:e3:74:ac:39:02:b8:01:
0e:7b:d9:f3:04:d9:cc:64:80:3e:b3:7d:ce:15:e5:
19:f3:a3:0f:8e:cd:c0:7b:99:28:23:c4:f5:c6:7d:
12:b7:d1:b8:50:f9:1d:fb:9c:fb:a6:81:ea:37:f7:
03:9b:bc:4b:2a:17:f7:f6:e3:df:71:af:59:fd:cd:
21:d3:db:f2:d8:f0:8d:8c:14:f4:39:f2:60:ed:ed:
a8:cb:09:4d:cb:ff:c5:f2:55:93:b5:60:a4:18:78:
27:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2B:3C:35:A4:66:D5:1C:92:3E:65:38:DD:37:7C:67:49:2D:4E:CD
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS213305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.179.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d6:f6:54:6a:0e:95:ea:bb:6a:b2:b8:13:78:cf:0c:59:e2:
5b:af:10:28:09:b9:35:9e:9c:3f:4d:88:ee:ea:fd:60:91:0e:
96:7c:99:23:bf:35:ad:b6:fc:b3:22:29:2e:b8:08:dc:ed:d4:
87:3e:dc:d8:c3:3c:05:d8:98:86:82:8e:d1:df:01:4f:81:ff:
70:6f:4d:e6:24:e8:26:df:af:98:33:cf:6e:9d:0d:66:00:90:
47:4e:e8:8e:df:38:5e:c8:fd:f2:51:06:1f:8a:ee:54:93:14:
a4:c7:06:4b:ec:08:d9:b5:c0:f9:e0:8b:37:d8:05:42:c5:54:
0b:73:78:c9:e0:6d:82:b2:3e:af:66:4f:4c:2b:7e:f4:86:73:
ec:ff:4f:b8:1c:60:08:5a:67:f2:55:73:f8:72:a0:40:27:50:
2d:00:eb:8a:e6:25:51:ac:cc:d1:5a:14:5a:3e:81:1d:e8:18:
86:53:7a:36:43:58:34:ad:18:55:42:5a:59:5a:ce:77:53:00:
60:93:a3:ca:64:40:97:34:00:e1:eb:2b:6e:8b:81:8b:9e:f4:
84:4b:88:89:e4:a0:3c:f5:c9:ac:62:79:17:ec:6c:c0:56:9c:
92:6a:cf:db:f2:56:d1:4f:e4:35:89:54:31:e9:ff:47:26:e4:
da:5c:09:bc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUIJ6Cw5cvqJF7S1U0PMRFfeS9RH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yMzAzMDkxNDUzMjhaFw0yNDAzMDcxNDU4MjhaMDMxMTAvBgNV
BAMTKEM5MkIzQzM1QTQ2NkQ1MUM5MjNFNjUzOEREMzc3QzY3NDkyRDRFQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeDaCPrqx/K0bUXCjlGF7nGDgy
2Roz0AcRyL/c9aKovQd4FvLzlxiYwV1e/Th6apakY68eUSgdK47MSpFfy6hkDdY3
dFWWZtPTfb5luln1SNT6XcP9wRDWHrdANVGSacQzMlLqSXKxnXbiXLg+jSjh6aHg
4Bk3nWuwS9jfmASsL9DkdXU2Wz1whB/oBrS2PtbAABtVjGbZtUNreP0O43SsOQK4
AQ572fME2cxkgD6zfc4V5Rnzow+OzcB7mSgjxPXGfRK30bhQ+R37nPumgeo39wOb
vEsqF/f2499xr1n9zSHT2/LY8I2MFPQ58mDt7ajLCU3L/8XyVZO1YKQYeCcbAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUySs8NaRm1RySPmU43Td8Z0ktTs0wHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjEzMzA1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQuz
MA0GCSqGSIb3DQEBCwUAA4IBAQCn1vZUag6V6rtqsrgTeM8MWeJbrxAoCbk1npw/
TYju6v1gkQ6WfJkjvzWttvyzIikuuAjc7dSHPtzYwzwF2JiGgo7R3wFPgf9wb03m
JOgm36+YM89unQ1mAJBHTuiO3zheyP3yUQYfiu5UkxSkxwZL7AjZtcD54Is32AVC
xVQLc3jJ4G2Csj6vZk9MK370hnPs/0+4HGAIWmfyVXP4cqBAJ1AtAOuK5iVRrMzR
WhRaPoEd6BiGU3o2Q1g0rRhVQlpZWs53UwBgk6PKZECXNADh6ytui4GLnvSES4iJ
5KA89cmsYnkX7GzAVpySas/b8lbRT+Q1iVQx6f9HJuTaXAm8
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org