Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215101.roa
File: AS215101.roa (raw, json)
Hash identifier: xHEAl4qHUknDvagqy0fnsq1ccHIcwyDzuJBhjZ3Qe+Y=
Subject key identifier: 4D:CB:D6:13:84:B9:53:04:F6:B4:F8:67:AD:B0:38:D7:B1:AA:EC:75
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5FB98EEBFA6F9D950AC38A1A23E245F6078A0B03
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215101.roa
Signing time: Fri 21 Jun 2024 14:44:17 +0000
ROA not before: Fri 21 Jun 2024 14:39:17 +0000
ROA not after: Fri 20 Jun 2025 14:44:17 +0000
asID: 215101
IP address blocks: 141.11.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 16:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b9:8e:eb:fa:6f:9d:95:0a:c3:8a:1a:23:e2:45:f6:07:8a:0b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 21 14:39:17 2024 GMT
Not After : Jun 20 14:44:17 2025 GMT
Subject: CN=4DCBD61384B95304F6B4F867ADB038D7B1AAEC75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:c6:94:78:4c:c2:7e:4b:e7:8c:12:7e:f9:
36:5c:bb:2c:3b:08:a5:58:f9:ee:81:26:c4:45:1a:
d2:b9:96:1f:64:27:e7:b7:5c:30:ed:c3:c6:c8:b9:
98:7b:61:3b:a5:76:75:13:4f:07:b0:a5:3c:c7:3b:
ae:8f:af:ba:1a:eb:8b:da:00:7f:f2:50:bf:27:47:
1b:41:5c:0d:67:42:a7:fe:e3:7e:d0:fd:03:a3:30:
e3:fe:b6:6f:09:7b:97:28:b8:1c:fd:7e:5b:c3:f2:
18:0d:99:59:8a:19:11:a1:90:73:4f:45:9b:d7:d8:
15:79:c8:d0:ee:bd:c7:bf:d9:8c:59:42:a1:98:1f:
28:3e:85:a5:b1:43:1d:72:82:e9:46:a6:93:c7:85:
6c:aa:13:85:68:0e:26:d2:01:dd:7e:a5:b3:17:37:
11:f3:34:6a:62:05:63:fe:a4:34:d9:0a:25:10:67:
51:aa:54:a7:c5:29:51:96:5a:e2:5e:eb:af:ad:be:
db:c8:c7:06:5f:f2:3e:3e:31:20:c5:bf:d0:d5:34:
3d:51:84:0a:de:38:8c:42:ea:27:82:e0:e4:b7:b6:
2f:13:09:28:bb:b8:e3:ab:66:2c:3e:8e:6f:bd:a5:
66:33:75:3f:d1:35:19:8e:39:ab:95:e6:50:5d:15:
57:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CB:D6:13:84:B9:53:04:F6:B4:F8:67:AD:B0:38:D7:B1:AA:EC:75
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215101.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.105.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:14:2c:ca:14:d4:e7:e6:56:92:2b:27:46:e1:e9:9b:7c:d1:
4f:d9:26:73:d1:ab:ce:c0:2e:45:14:3b:5f:2d:73:b7:25:2f:
24:74:e3:93:ba:36:fd:b2:3d:d7:0e:9d:ca:f7:7c:b9:83:98:
2f:5d:5e:5b:f2:87:7f:ba:73:90:b5:f5:b7:44:a3:ee:c8:cd:
9c:27:cc:14:95:dd:80:90:40:76:1e:65:8e:0c:68:4f:7f:53:
15:58:08:24:36:91:fb:99:fa:88:f5:99:48:03:d3:74:65:9e:
27:91:bf:e5:54:3f:92:26:9c:aa:6b:b0:17:b6:71:67:72:12:
5e:ac:a1:e8:2f:b8:fc:68:11:27:f8:80:45:1b:59:67:f4:9c:
c3:88:a5:53:aa:8a:45:56:b6:13:20:e5:19:91:f3:2c:17:08:
85:8b:28:ed:b8:67:66:10:23:ba:6d:db:13:db:24:bc:a3:74:
60:8f:3c:49:7b:22:4a:b4:a0:53:89:5d:4b:77:17:0d:42:5d:
0a:70:cc:c0:8d:59:81:99:5f:65:bf:ca:52:e6:7b:0b:4e:d5:
7f:c9:39:89:a4:f8:ed:b0:de:46:77:82:2c:42:bb:3d:26:2c:
86:2f:9e:b8:12:1b:59:72:d7:6e:93:b3:1d:b5:ce:3d:9b:38:
18:f8:4f:b7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUX7mO6/pvnZUKw4oaI+JF9geKCwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNDA2MjExNDM5MTdaFw0yNTA2MjAxNDQ0MTdaMDMxMTAvBgNV
BAMTKDREQ0JENjEzODRCOTUzMDRGNkI0Rjg2N0FEQjAzOEQ3QjFBQUVDNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/caUeEzCfkvnjBJ++TZcuyw7
CKVY+e6BJsRFGtK5lh9kJ+e3XDDtw8bIuZh7YTuldnUTTwewpTzHO66Pr7oa64va
AH/yUL8nRxtBXA1nQqf+437Q/QOjMOP+tm8Je5couBz9flvD8hgNmVmKGRGhkHNP
RZvX2BV5yNDuvce/2YxZQqGYHyg+haWxQx1ygulGppPHhWyqE4VoDibSAd1+pbMX
NxHzNGpiBWP+pDTZCiUQZ1GqVKfFKVGWWuJe66+tvtvIxwZf8j4+MSDFv9DVND1R
hAreOIxC6ieC4OS3ti8TCSi7uOOrZiw+jm+9pWYzdT/RNRmOOauV5lBdFVcTAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUTcvWE4S5UwT2tPhnrbA417Gq7HUwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE1MTAxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQtp
MA0GCSqGSIb3DQEBCwUAA4IBAQDSFCzKFNTn5laSKydG4embfNFP2SZz0avOwC5F
FDtfLXO3JS8kdOOTujb9sj3XDp3K93y5g5gvXV5b8od/unOQtfW3RKPuyM2cJ8wU
ld2AkEB2HmWODGhPf1MVWAgkNpH7mfqI9ZlIA9N0ZZ4nkb/lVD+SJpyqa7AXtnFn
chJerKHoL7j8aBEn+IBFG1ln9JzDiKVTqopFVrYTIOUZkfMsFwiFiyjtuGdmECO6
bdsT2yS8o3RgjzxJeyJKtKBTiV1LdxcNQl0KcMzAjVmBmV9lv8pS5nsLTtV/yTmJ
pPjtsN5Gd4IsQrs9JiyGL564EhtZctduk7Mdtc49mzgY+E+3
Generated at Sat Oct 5 20:04:04 2024 by rpki-client on console-ams.rpki-client.org