Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS30456.roa
File: AS30456.roa (raw, json)
Hash identifier: q0BnCLr5gNiCHzlAE4x01dSJ4ZhVrtGKDOQjrfOAywc=
Subject key identifier: D9:A7:03:74:91:C8:24:1A:C6:DA:F6:45:2F:A2:56:98:51:54:85:AC
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 396BC68D8CD03BC46E48857B427BEFE5C23F2F37
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS30456.roa
Signing time: Fri 08 Mar 2024 21:21:40 +0000
ROA not before: Fri 08 Mar 2024 21:16:40 +0000
ROA not after: Fri 07 Mar 2025 21:21:40 +0000
asID: 30456
IP address blocks: 141.11.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Mar 2024 01:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:6b:c6:8d:8c:d0:3b:c4:6e:48:85:7b:42:7b:ef:e5:c2:3f:2f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 8 21:16:40 2024 GMT
Not After : Mar 7 21:21:40 2025 GMT
Subject: CN=D9A7037491C8241AC6DAF6452FA25698515485AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:ac:d4:a0:aa:2d:f4:6e:2d:a0:df:a1:47:
f5:24:62:26:93:df:66:88:95:4a:e9:0d:19:dc:f8:
b9:e3:bd:09:d8:01:e5:02:ac:8b:d8:74:0a:37:25:
47:54:7f:d0:d5:2e:8d:d4:91:9c:0b:8e:68:d7:72:
51:a7:fe:dc:c5:e6:d5:cc:60:84:27:62:0c:7f:0b:
e8:27:7d:93:d5:43:93:50:f5:91:d2:4b:68:51:05:
92:d9:69:c4:8f:4d:70:5f:76:35:c0:18:83:61:1c:
ee:25:25:65:80:cf:0b:36:11:68:53:81:82:e1:33:
4e:a2:57:09:18:b5:65:3a:3e:73:a8:db:93:f0:d7:
d9:6b:14:18:99:8f:3c:43:be:d2:4b:01:c5:80:56:
42:b1:40:df:b2:8a:55:da:52:12:cc:f8:bb:c3:25:
b3:f8:7e:e8:2d:c9:6d:5b:86:5c:0d:c6:32:45:8b:
5e:9b:ec:86:23:53:a5:1b:a7:db:02:67:d8:cf:3f:
df:42:4c:1c:5f:1c:6f:39:7e:66:47:92:62:93:80:
0a:e4:07:63:fc:4d:43:09:67:79:f3:f6:e5:31:4c:
6c:e9:63:06:d9:2c:fc:33:5a:37:ca:54:f5:1f:f3:
5e:61:d4:2b:4f:fe:1a:00:94:62:c2:07:d9:77:f4:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A7:03:74:91:C8:24:1A:C6:DA:F6:45:2F:A2:56:98:51:54:85:AC
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS30456.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.100.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0b:ae:fd:0b:c9:2c:a6:16:ca:c7:70:a5:d4:c8:1a:34:78:
f4:fc:b4:6c:05:b3:23:ac:eb:ff:58:ff:11:b3:fe:76:45:10:
ac:dc:67:d7:4c:fe:2a:80:b6:91:8b:aa:b7:cc:2d:6b:85:90:
8f:cb:92:cc:79:e4:82:c1:f6:b3:49:06:a6:96:75:0a:47:0c:
50:75:95:e7:de:73:0d:47:46:c8:05:1d:d0:ef:f0:f9:9a:af:
6d:03:64:b3:99:78:f1:7a:d4:a3:89:7c:03:ca:5e:c0:56:fc:
79:38:d0:bf:e5:25:09:c2:e2:24:5c:3e:13:bc:97:6f:38:8e:
80:ab:96:31:47:0f:05:58:88:9f:57:52:58:01:50:de:d0:b3:
aa:d4:a0:93:a1:eb:47:13:34:d8:39:ff:39:b5:d0:d0:a1:ce:
ed:61:84:0e:f4:e4:1f:07:41:1b:6d:b3:14:d5:da:50:98:1c:
2c:79:3d:33:f4:3c:32:e3:ee:0b:c9:6e:e8:3d:f8:83:93:65:
9e:45:a0:25:cc:19:fe:1d:41:3d:10:d6:d2:70:7b:fc:8c:61:
43:20:7a:6e:3d:ff:de:1a:64:72:8b:23:8d:1a:d3:d0:96:76:
cc:67:a5:54:ff:d4:40:67:2f:90:a8:d9:62:9b:4c:5d:60:46:
8f:44:7e:c1
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUOWvGjYzQO8RuSIV7Qnvv5cI/LzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNDAzMDgyMTE2NDBaFw0yNTAzMDcyMTIxNDBaMDMxMTAvBgNV
BAMTKEQ5QTcwMzc0OTFDODI0MUFDNkRBRjY0NTJGQTI1Njk4NTE1NDg1QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobazUoKot9G4toN+hR/UkYiaT
32aIlUrpDRnc+LnjvQnYAeUCrIvYdAo3JUdUf9DVLo3UkZwLjmjXclGn/tzF5tXM
YIQnYgx/C+gnfZPVQ5NQ9ZHSS2hRBZLZacSPTXBfdjXAGINhHO4lJWWAzws2EWhT
gYLhM06iVwkYtWU6PnOo25Pw19lrFBiZjzxDvtJLAcWAVkKxQN+yilXaUhLM+LvD
JbP4fugtyW1bhlwNxjJFi16b7IYjU6Ubp9sCZ9jPP99CTBxfHG85fmZHkmKTgArk
B2P8TUMJZ3nz9uUxTGzpYwbZLPwzWjfKVPUf815h1CtP/hoAlGLCB9l39OwdAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU2acDdJHIJBrG2vZFL6JWmFFUhawwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMzA0NTYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC2Qw
DQYJKoZIhvcNAQELBQADggEBAJELrv0LySymFsrHcKXUyBo0ePT8tGwFsyOs6/9Y
/xGz/nZFEKzcZ9dM/iqAtpGLqrfMLWuFkI/Lksx55ILB9rNJBqaWdQpHDFB1lefe
cw1HRsgFHdDv8Pmar20DZLOZePF61KOJfAPKXsBW/Hk40L/lJQnC4iRcPhO8l284
joCrljFHDwVYiJ9XUlgBUN7Qs6rUoJOh60cTNNg5/zm10NChzu1hhA705B8HQRtt
sxTV2lCYHCx5PTP0PDLj7gvJbug9+IOTZZ5FoCXMGf4dQT0Q1tJwe/yMYUMgem49
/94aZHKLI40a09CWdsxnpVT/1EBnL5Co2WKbTF1gRo9EfsE=
Generated at Sat Mar 9 04:53:46 2024 by rpki-client on console-fra.rpki-client.org