Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS39655.roa
File: AS39655.roa (raw, json)
Hash identifier: ej3mT6b3nr7ZpsIDj8roiDvmj5qIPWf/s4SvmuzgJ3o=
Subject key identifier: D2:6B:71:4E:A3:A9:E4:EF:EB:77:50:7E:C5:D7:7F:E9:71:5C:A0:E4
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 393BF14880F651A84FA2D923F36EDF1FF099DE93
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS39655.roa
Signing time: Tue 21 Mar 2023 12:48:30 +0000
ROA not before: Tue 21 Mar 2023 12:43:30 +0000
ROA not after: Tue 19 Mar 2024 12:48:30 +0000
asID: 39655
IP address blocks: 141.11.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:3b:f1:48:80:f6:51:a8:4f:a2:d9:23:f3:6e:df:1f:f0:99:de:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 21 12:43:30 2023 GMT
Not After : Mar 19 12:48:30 2024 GMT
Subject: CN=D26B714EA3A9E4EFEB77507EC5D77FE9715CA0E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:50:27:0d:e5:d1:71:18:a0:22:00:ca:e1:
c5:fb:01:2a:8a:94:25:63:1c:01:9a:cc:14:fa:98:
28:ce:25:a2:2b:a6:3e:08:62:9f:88:e5:f1:8d:ff:
13:78:f2:ce:78:ed:5d:ae:db:66:de:e2:e8:ef:a8:
3f:38:f5:c6:b0:5e:2b:c5:46:ad:e4:72:c2:8c:e9:
cb:10:15:92:69:c1:6b:ce:93:c0:68:68:af:34:ee:
b6:eb:47:09:27:c6:d0:33:31:22:ad:a7:48:a2:04:
9b:b9:8b:5d:c1:a5:64:5b:b9:44:7e:82:fa:ee:0f:
a7:ba:35:48:bd:ac:f4:84:a0:15:6c:9e:bc:81:5c:
e0:56:d6:21:60:22:c3:8a:ac:02:f1:80:70:82:d9:
6f:a3:0d:29:94:20:99:0f:98:8f:d8:e0:53:f2:c7:
8f:00:33:26:2b:63:14:c0:96:49:b3:1b:ac:52:90:
b6:3e:76:22:08:87:07:41:a0:29:15:66:25:9b:ab:
59:4a:03:dd:34:71:c9:7b:b7:af:0f:a8:9d:5a:c4:
c2:46:72:00:d4:d5:a4:25:19:3f:ac:e9:d9:fe:39:
c7:44:d0:f8:82:d8:e8:0c:9b:aa:12:7d:77:34:c0:
b3:6d:2f:16:c0:2a:0f:14:a7:0b:c5:d2:db:a5:9b:
c5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6B:71:4E:A3:A9:E4:EF:EB:77:50:7E:C5:D7:7F:E9:71:5C:A0:E4
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS39655.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.100.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a1:9e:64:e6:c2:c9:03:12:1d:a3:45:0c:e6:34:33:37:78:
a3:0b:dc:68:11:50:31:fc:0c:50:a8:d8:0a:b9:6b:27:71:f3:
7e:f8:45:32:53:c9:c1:fd:95:17:b4:97:99:61:09:96:3d:24:
6a:0a:62:9e:5e:ee:d0:97:3d:8a:65:c0:78:59:09:8f:2c:6e:
54:a5:b8:6b:62:93:b0:b3:bd:7e:1d:ab:d3:f7:fa:ca:be:d4:
4f:12:f8:6f:82:b3:51:78:fa:ff:b6:41:e3:72:c3:da:8a:0a:
af:22:36:85:ed:47:6a:9b:33:95:c8:1a:0e:66:54:4a:e9:bc:
72:b9:ca:c9:f1:76:32:cc:15:80:b8:bc:88:ee:8f:7b:0f:b7:
7f:29:b3:37:37:e9:f9:7e:25:04:b6:f0:8e:9a:df:65:e0:9c:
92:19:c3:b0:82:fa:50:67:3d:41:8f:7c:e7:00:99:4a:8d:c8:
03:62:76:80:a9:d7:9c:78:b1:89:f4:57:5d:9c:ce:0b:43:66:
b2:7e:66:81:22:e8:21:15:ce:1d:f9:69:05:f0:d6:89:0d:f6:
f2:f2:c0:7b:f2:b9:c2:9e:77:fc:a5:db:0f:3f:4a:7a:59:49:
7e:65:a1:8c:88:70:c2:6b:5c:f3:8d:fd:67:7b:43:38:dc:02:
b4:36:6f:72
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUOTvxSID2UahPotkj827fH/CZ3pMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yMzAzMjExMjQzMzBaFw0yNDAzMTkxMjQ4MzBaMDMxMTAvBgNV
BAMTKEQyNkI3MTRFQTNBOUU0RUZFQjc3NTA3RUM1RDc3RkU5NzE1Q0EwRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvFAnDeXRcRigIgDK4cX7ASqK
lCVjHAGazBT6mCjOJaIrpj4IYp+I5fGN/xN48s547V2u22be4ujvqD849cawXivF
Rq3kcsKM6csQFZJpwWvOk8BoaK807rbrRwknxtAzMSKtp0iiBJu5i13BpWRbuUR+
gvruD6e6NUi9rPSEoBVsnryBXOBW1iFgIsOKrALxgHCC2W+jDSmUIJkPmI/Y4FPy
x48AMyYrYxTAlkmzG6xSkLY+diIIhwdBoCkVZiWbq1lKA900ccl7t68PqJ1axMJG
cgDU1aQlGT+s6dn+OcdE0PiC2OgMm6oSfXc0wLNtLxbAKg8UpwvF0tulm8XJAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU0mtxTqOp5O/rd1B+xdd/6XFcoOQwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMzk2NTUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC2Qw
DQYJKoZIhvcNAQELBQADggEBAHahnmTmwskDEh2jRQzmNDM3eKML3GgRUDH8DFCo
2Aq5aydx8374RTJTycH9lRe0l5lhCZY9JGoKYp5e7tCXPYplwHhZCY8sblSluGti
k7CzvX4dq9P3+sq+1E8S+G+Cs1F4+v+2QeNyw9qKCq8iNoXtR2qbM5XIGg5mVErp
vHK5ysnxdjLMFYC4vIjuj3sPt38pszc36fl+JQS28I6a32XgnJIZw7CC+lBnPUGP
fOcAmUqNyANidoCp15x4sYn0V12czgtDZrJ+ZoEi6CEVzh35aQXw1okN9vLywHvy
ucKed/yl2w8/SnpZSX5loYyIcMJrXPON/Wd7QzjcArQ2b3I=
Generated at Wed Aug 2 09:25:18 2023 by rpki-client on console-fra.rpki-client.org