Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215287.roa
File: AS215287.roa (raw, json)
Hash identifier: f3lLmQLpCv5hBwjGC4sWHSHM1Z+gW2TCyFYTv1oqMwc=
Subject key identifier: 1A:91:5B:1C:3B:3A:B2:D0:F4:E5:EA:91:DD:3F:17:18:8E:EA:32:DD
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 458E0F44510CD6CC198A40F61140DB49B16E4825
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215287.roa
Signing time: Sun 30 Jun 2024 14:03:43 +0000
ROA not before: Sun 30 Jun 2024 13:58:43 +0000
ROA not after: Sun 29 Jun 2025 14:03:43 +0000
asID: 215287
IP address blocks: 141.11.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8e:0f:44:51:0c:d6:cc:19:8a:40:f6:11:40:db:49:b1:6e:48:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 30 13:58:43 2024 GMT
Not After : Jun 29 14:03:43 2025 GMT
Subject: CN=1A915B1C3B3AB2D0F4E5EA91DD3F17188EEA32DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:05:b0:ce:8f:af:33:61:09:76:69:f5:f3:
38:00:a4:45:c2:37:d9:8a:42:a8:06:d2:63:04:87:
a6:b4:9f:6b:ea:dd:d0:29:2e:12:dc:13:93:1a:14:
25:7e:1e:ec:45:52:3e:e3:51:20:97:01:bd:0c:c7:
9d:c7:37:5c:48:95:b0:d7:29:73:a3:be:c7:cb:72:
48:1b:f3:58:c5:1d:4f:47:53:f4:cc:4f:d7:4a:bd:
be:a6:68:74:77:4e:a8:1b:5b:e7:36:61:11:2c:fd:
f5:d7:4c:fe:a5:95:0e:60:13:88:e8:e3:6d:11:27:
cf:8a:c6:7b:5a:6c:95:74:30:73:96:e9:a5:61:36:
60:e3:32:3d:d4:42:d7:91:58:3e:98:24:68:6e:7a:
64:7e:1e:d1:bb:90:7b:92:a2:a9:55:71:ef:96:1e:
6a:41:92:54:dd:b2:3d:27:58:1d:2f:db:a0:80:bd:
fb:2d:5f:48:f7:23:d1:a2:d8:fa:eb:e1:68:74:3f:
c9:7a:61:8e:fd:7f:1b:d2:cf:ba:0a:fa:29:a9:e5:
ed:7b:d8:c1:a9:91:2c:e5:98:8b:e5:5f:03:7a:a7:
e7:36:7f:34:84:75:8b:7c:b4:4e:50:a0:a2:ab:db:
1c:09:b0:83:34:f0:84:75:29:80:fe:cb:35:53:ac:
5c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:91:5B:1C:3B:3A:B2:D0:F4:E5:EA:91:DD:3F:17:18:8E:EA:32:DD
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:4b:c7:3c:fb:a2:47:07:7b:03:d3:55:98:69:67:66:5a:02:
e8:88:60:d3:87:e1:46:71:1d:eb:a6:87:dc:9f:c2:40:a4:b5:
fb:ae:cd:4c:98:d3:ff:4b:39:3f:eb:fe:eb:d5:be:0c:2e:a1:
e9:cb:c0:b2:79:97:cd:da:c6:76:0f:48:94:29:90:64:40:74:
19:cd:97:c0:5c:9c:85:39:13:b1:84:fd:d3:9e:18:d9:7d:42:
3b:85:1a:ab:4f:29:f3:96:6b:5e:74:7a:cf:ae:8d:3d:43:9c:
2e:d6:5e:ed:60:4f:a3:f4:6d:d1:f0:29:e4:fd:48:b7:34:5f:
e0:33:5b:dd:22:53:d8:29:a2:3a:01:72:62:12:62:9d:9d:dd:
ce:d8:ca:61:6a:58:f0:8b:37:fd:8a:3a:4d:cd:94:05:e5:d8:
8b:a0:21:8c:21:d2:e0:0b:e7:f4:4f:33:39:76:9f:ab:b4:a2:
e7:87:a4:6e:fd:c1:4e:94:86:8e:ef:1e:c6:5f:3c:73:d6:07:
62:a9:fd:cc:2c:98:d9:be:8e:ad:11:ad:be:20:51:31:6a:08:
ae:43:98:5b:a8:54:09:d8:12:b7:69:75:55:22:c9:cc:79:f7:
f0:3e:94:fe:4a:cb:12:1e:65:26:2d:2e:06:7e:4d:cc:97:90:
61:7f:04:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:50 2024 by rpki-client on console-ams.rpki-client.org