Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS273642.roa
File: AS273642.roa (raw, json)
Hash identifier: tlceEGwcCwFDCDjPRMxtrRFZy9LitZQX0bb0ZfxGTV4=
Subject key identifier: BA:F8:22:BD:3E:6A:81:EA:7A:CA:BB:88:E3:7F:42:D9:97:1C:AD:CB
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5ACCC2E2E9D75D205750BB2060278ED9D3DB5E37
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS273642.roa
Signing time: Wed 15 Feb 2023 11:26:32 +0000
ROA not before: Wed 15 Feb 2023 11:21:32 +0000
ROA not after: Wed 14 Feb 2024 11:26:32 +0000
asID: 273642
IP address blocks: 141.11.140.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:cc:c2:e2:e9:d7:5d:20:57:50:bb:20:60:27:8e:d9:d3:db:5e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Feb 15 11:21:32 2023 GMT
Not After : Feb 14 11:26:32 2024 GMT
Subject: CN=BAF822BD3E6A81EA7ACABB88E37F42D9971CADCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:da:19:94:50:a0:28:a5:b6:a6:d8:1c:6d:
20:fb:31:02:0c:66:5c:87:69:7c:2f:a8:76:1d:8c:
34:b8:17:6a:97:27:d7:1c:2c:15:98:6e:e4:11:9a:
3d:19:ef:28:a6:04:3e:31:7c:32:89:df:62:44:65:
bd:79:36:20:32:2f:b1:4a:6f:41:70:78:e0:87:6d:
91:84:50:d1:88:4f:d7:54:be:56:01:ef:c3:bc:b9:
d1:82:9a:7b:20:51:65:fb:c4:d6:41:ef:52:35:1d:
0b:0c:b3:6c:9b:76:50:6e:56:1b:ec:30:61:c8:eb:
93:40:d8:da:57:2f:af:13:57:60:31:e1:b9:53:05:
95:42:c8:bc:18:f8:39:f2:76:ea:af:35:0e:01:1b:
00:f0:36:28:57:c4:b0:87:f6:d2:c3:46:2a:ea:07:
a2:10:8c:25:75:45:45:1b:3c:29:c9:2d:7c:2b:de:
f5:d3:3b:b6:ad:ce:9e:87:27:44:f2:10:f2:89:5a:
5d:cb:29:b0:e1:f6:a2:0b:e1:be:01:ca:3a:0c:12:
a1:e6:c7:9c:3a:1e:0e:a9:9f:8c:b6:ed:dc:46:a3:
01:c5:9b:62:28:0b:0e:9e:c2:b1:59:5d:55:d7:1d:
21:a6:1f:d6:b9:34:cb:29:df:26:b2:c3:57:78:e8:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F8:22:BD:3E:6A:81:EA:7A:CA:BB:88:E3:7F:42:D9:97:1C:AD:CB
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS273642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.140.0/22
Signature Algorithm: sha256WithRSAEncryption
19:27:f7:15:0f:a4:86:82:e0:82:99:35:ff:52:6f:b6:8f:b4:
8c:bd:b4:15:1c:73:59:9c:c2:7a:18:28:f7:8e:2b:45:2f:06:
7b:38:3f:97:5c:22:ed:4d:da:59:ed:ff:97:49:e9:c6:70:90:
ed:e2:37:26:47:d6:e7:53:b0:4d:a7:54:d0:70:57:0e:5e:07:
f2:11:d1:c4:ca:c8:af:21:37:60:b9:e2:4d:bc:13:45:57:a3:
45:86:9d:f5:c7:c5:7b:90:1e:a3:1a:b8:c4:a5:ca:55:cc:2b:
4d:3e:22:69:6f:5b:bf:eb:f0:f5:d1:bd:11:33:0e:a9:e8:7d:
0a:08:b2:e6:31:f7:49:a6:a0:ef:fd:3f:de:0e:2c:a6:d5:00:
51:b8:14:53:48:e5:69:d6:5f:58:a2:66:2a:d8:cb:23:d6:57:
04:8e:e7:9b:d2:b2:8a:b3:0a:ff:0b:9f:1d:a2:e4:cf:fd:a2:
c2:24:f8:99:65:be:d9:e3:0c:da:97:8d:3e:8a:ab:1d:c3:3d:
fe:b7:0c:ca:3c:6c:1d:f8:0e:2a:68:b2:4e:e7:ad:2e:10:99:
82:18:84:1c:db:ab:db:59:2f:20:27:00:0a:6d:e1:32:2c:97:
03:40:6f:d5:f0:68:4c:df:e0:91:08:98:1e:71:71:8a:95:5c:
a6:bb:02:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org