Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216206.roa
File: AS216206.roa (raw, json)
Hash identifier: GotX87gxB08nmiSkXteYILNDVV6Zu+gz2KlNGPbEOSM=
Subject key identifier: BF:CB:C6:50:80:F3:D6:2B:DA:DB:A3:B3:21:43:DE:CA:ED:69:18:78
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3F3EF5D0FF18907C6053172ADBCDFCE8217A4F5E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216206.roa
Signing time: Sat 07 Oct 2023 19:59:26 +0000
ROA not before: Sat 07 Oct 2023 19:54:26 +0000
ROA not after: Sat 05 Oct 2024 19:59:26 +0000
asID: 216206
IP address blocks: 141.11.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3e:f5:d0:ff:18:90:7c:60:53:17:2a:db:cd:fc:e8:21:7a:4f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 7 19:54:26 2023 GMT
Not After : Oct 5 19:59:26 2024 GMT
Subject: CN=BFCBC65080F3D62BDADBA3B32143DECAED691878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:6d:17:57:ee:d5:9b:8b:e4:e9:68:3a:08:
43:20:d1:91:5b:1d:9d:ec:05:b0:e7:9f:e1:65:38:
a6:2e:fe:5c:50:de:ca:71:bf:6f:49:5f:b6:27:9e:
8e:cd:18:dd:77:8e:fa:9d:00:49:13:d7:87:ae:1c:
c2:91:27:e3:e7:12:51:5b:6d:f6:51:57:22:69:e8:
07:8a:34:52:22:c1:c4:42:fa:da:ec:6b:e0:4f:ca:
3f:98:52:03:ae:95:2d:64:ae:bc:ad:b6:f5:4e:a0:
b3:5e:41:7b:9b:dd:0c:b8:ac:ec:a9:90:ab:f7:a3:
c3:83:d1:30:a2:c6:2c:96:14:4d:47:39:bb:65:a8:
88:3f:0e:c3:17:cd:f5:da:79:53:42:6c:8f:d2:93:
a0:e5:a4:81:51:a3:5a:b6:41:d1:03:6c:d5:3c:72:
ad:40:11:30:d0:41:6d:01:b0:e4:88:36:68:b9:42:
73:5d:8d:00:d9:28:dd:dd:a7:72:fe:38:a4:2c:ea:
94:70:00:a1:f5:dd:65:13:9c:6c:9c:c9:43:48:04:
7e:9a:7f:ed:11:06:d9:35:c6:64:24:e9:cd:eb:b9:
78:f7:17:8d:88:a6:58:ca:89:91:08:52:3b:9c:cd:
12:a7:b1:03:17:99:ba:74:4e:e1:e6:70:7b:67:10:
d7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CB:C6:50:80:F3:D6:2B:DA:DB:A3:B3:21:43:DE:CA:ED:69:18:78
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216206.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.69.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:53:a6:4e:2a:41:b4:3d:dd:eb:b9:9e:69:3e:18:c3:ba:38:
03:b2:57:4a:ef:0d:36:bd:70:86:7d:61:ca:a2:57:c1:a6:cc:
28:ad:47:98:7f:5e:c5:e1:50:b9:c8:91:c7:a3:f3:69:c9:97:
f5:37:9c:a9:db:64:4a:84:06:31:5b:54:7d:e7:a3:9b:76:d9:
97:12:76:20:03:62:7d:69:c0:54:c3:fb:fe:30:a3:13:10:a6:
71:4a:b5:47:b2:e8:46:fa:e2:85:3a:9d:3f:ec:7a:2e:86:e5:
a9:8d:54:69:44:00:eb:85:89:07:bc:2d:eb:00:7f:06:e2:9f:
44:9f:a8:0b:80:c4:66:91:0c:66:81:21:55:6f:b6:f8:56:eb:
51:d1:0e:03:2c:69:bb:2c:e1:99:60:f7:39:d5:35:ac:c5:29:
df:fd:d8:79:b9:a8:de:6f:c9:0a:b5:fe:67:19:ef:b0:cc:10:
03:3f:04:ba:df:f2:30:2f:b0:2f:e2:cd:b2:a2:2e:22:9a:bc:
8a:61:fc:7a:fe:94:8c:b1:81:fc:82:70:83:1c:a9:83:4c:f7:
c8:37:70:e7:f4:33:b7:ff:78:85:e4:b3:ac:a6:09:5b:51:bc:
e0:76:3f:5a:73:75:db:b7:d4:bb:16:a0:e3:23:d1:e7:72:fe:
55:3c:9c:f3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUPz710P8YkHxgUxcq28386CF6T14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yMzEwMDcxOTU0MjZaFw0yNDEwMDUxOTU5MjZaMDMxMTAvBgNV
BAMTKEJGQ0JDNjUwODBGM0Q2MkJEQURCQTNCMzIxNDNERUNBRUQ2OTE4NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8LG0XV+7Vm4vk6Wg6CEMg0ZFb
HZ3sBbDnn+FlOKYu/lxQ3spxv29JX7Ynno7NGN13jvqdAEkT14euHMKRJ+PnElFb
bfZRVyJp6AeKNFIiwcRC+trsa+BPyj+YUgOulS1krryttvVOoLNeQXub3Qy4rOyp
kKv3o8OD0TCixiyWFE1HObtlqIg/DsMXzfXaeVNCbI/Sk6DlpIFRo1q2QdEDbNU8
cq1AETDQQW0BsOSINmi5QnNdjQDZKN3dp3L+OKQs6pRwAKH13WUTnGycyUNIBH6a
f+0RBtk1xmQk6c3ruXj3F42IpljKiZEIUjuczRKnsQMXmbp0TuHmcHtnENdHAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUv8vGUIDz1iva26OzIUPeyu1pGHgwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE2MjA2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQtF
MA0GCSqGSIb3DQEBCwUAA4IBAQAcU6ZOKkG0Pd3ruZ5pPhjDujgDsldK7w02vXCG
fWHKolfBpsworUeYf17F4VC5yJHHo/NpyZf1N5yp22RKhAYxW1R956ObdtmXEnYg
A2J9acBUw/v+MKMTEKZxSrVHsuhG+uKFOp0/7HouhuWpjVRpRADrhYkHvC3rAH8G
4p9En6gLgMRmkQxmgSFVb7b4VutR0Q4DLGm7LOGZYPc51TWsxSnf/dh5uajeb8kK
tf5nGe+wzBADPwS63/IwL7Av4s2yoi4imryKYfx6/pSMsYH8gnCDHKmDTPfIN3Dn
9DO3/3iF5LOspglbUbzgdj9ac3Xbt9S7FqDjI9Hncv5VPJzz
Generated at Tue Nov 21 10:33:26 2023 by rpki-client on console-fra.rpki-client.org