Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: pEIoDYK3OzkFadi97bsLXkovDBDUuMnbcu+7sSkq/p4=
Subject key identifier: 1D:B4:EA:37:D6:55:49:AE:0A:51:E1:68:EE:2A:80:86:6E:DE:46:FE
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6227A6B95DE3893111628A3D8B4B2D167231E2A8
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS3257.roa
Signing time: Fri 21 Jul 2023 18:45:36 +0000
ROA not before: Fri 21 Jul 2023 18:40:36 +0000
ROA not after: Fri 19 Jul 2024 18:45:36 +0000
asID: 3257
IP address blocks: 141.11.238.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:27:a6:b9:5d:e3:89:31:11:62:8a:3d:8b:4b:2d:16:72:31:e2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 21 18:40:36 2023 GMT
Not After : Jul 19 18:45:36 2024 GMT
Subject: CN=1DB4EA37D65549AE0A51E168EE2A80866EDE46FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:86:c4:35:cb:89:63:64:26:f7:35:49:e0:
95:5f:e4:54:44:26:f3:aa:1a:38:ed:66:70:d9:3c:
26:d4:c3:13:a9:73:3b:33:43:65:16:96:b4:20:5b:
ca:f7:78:ac:0d:a4:2b:05:cc:9f:c7:2a:e4:62:67:
40:2f:eb:73:77:dc:ba:2b:00:0e:e0:52:8a:ab:af:
9f:4d:c9:37:84:24:ca:4b:f5:9f:94:9d:23:1b:cd:
28:14:ad:4b:f2:93:a3:77:89:f3:2a:3c:43:25:01:
10:17:8d:dd:0a:f0:0b:a6:59:48:53:01:98:c6:0b:
c6:f3:10:9e:b3:1c:0d:94:3e:51:7b:fe:6c:84:ce:
59:57:e8:e4:bd:db:c9:3c:7f:76:86:84:ca:f5:c4:
35:b4:91:ab:a8:c8:36:74:75:90:13:69:ac:f1:b6:
7c:ea:bc:a3:df:83:c7:18:3e:da:5f:91:20:24:6e:
a5:b7:29:f3:7c:c7:80:39:5f:60:b0:4e:fe:61:59:
16:4d:49:e2:86:85:5b:be:3f:11:82:12:da:c9:ec:
76:4a:0b:21:9e:61:56:f7:2e:c5:a9:f8:f6:97:38:
90:b1:f0:dc:f5:1c:ef:60:81:27:53:5a:d0:15:44:
59:1b:aa:b3:94:73:0e:8b:7b:65:b9:36:2b:df:32:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B4:EA:37:D6:55:49:AE:0A:51:E1:68:EE:2A:80:86:6E:DE:46:FE
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.238.0/23
Signature Algorithm: sha256WithRSAEncryption
01:e1:51:f4:50:30:bb:41:d4:ed:b0:4c:35:ae:1b:aa:fe:3d:
39:d7:f8:0b:33:8c:f4:80:cc:ad:98:49:28:ca:00:99:62:30:
5a:9c:7d:6e:76:49:fa:6f:e7:72:8b:52:27:f4:8a:df:b8:b8:
76:79:05:09:90:23:44:8b:ee:ec:2e:77:fe:a1:7c:64:63:7c:
aa:53:1f:ad:dd:a7:1d:f6:f9:84:37:53:c9:b8:44:be:83:ab:
05:89:0e:65:52:2f:e6:ad:ec:3f:f4:d7:5b:21:57:3e:d6:de:
93:7a:78:46:4f:4c:a9:7f:e3:72:19:0f:f7:20:b1:19:45:9a:
b7:23:3e:e3:ef:88:24:de:fb:9f:db:e9:24:8d:96:3a:34:9a:
72:19:be:75:59:e1:ea:75:c1:51:7e:eb:e4:45:8f:5b:e6:c8:
0d:3b:7d:ff:a8:3c:3c:fd:4c:6e:ad:e0:ec:ad:17:b4:cb:63:
4a:1c:eb:fb:eb:e9:78:24:1e:92:f0:21:d5:39:42:49:9a:51:
86:97:0c:d4:29:d8:fb:bd:11:24:c2:83:54:b9:85:a1:ef:ac:
3b:a2:41:42:f6:42:79:47:5d:3b:e7:a4:50:5e:3a:ec:28:d0:
15:53:7a:c0:a1:8f:0e:9f:1e:8d:fc:d4:0b:fe:47:c8:98:f2:
46:80:31:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 19:29:41 2023 by rpki-client on console-fra.rpki-client.org