Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS396982.roa
File: AS396982.roa (raw, json)
Hash identifier: zWX5Rk+1Y1ya8hh30P9apv7nnOAW/ApN6aM4CG12VGs=
Subject key identifier: ED:47:A0:0C:09:EE:91:1E:1E:A4:F5:05:17:DE:04:BA:AA:7C:D1:C8
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4E3DF327DDC7C27649D7B92FF93352DC43AFC34E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS396982.roa
Signing time: Fri 24 May 2024 13:33:25 +0000
ROA not before: Fri 24 May 2024 13:28:25 +0000
ROA not after: Fri 23 May 2025 13:33:25 +0000
asID: 396982
IP address blocks: 141.11.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:3d:f3:27:dd:c7:c2:76:49:d7:b9:2f:f9:33:52:dc:43:af:c3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 24 13:28:25 2024 GMT
Not After : May 23 13:33:25 2025 GMT
Subject: CN=ED47A00C09EE911E1EA4F50517DE04BAAA7CD1C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:41:07:03:c5:97:d9:0e:26:57:7f:f1:4e:
38:ef:de:9d:01:16:30:89:14:c7:46:61:c2:37:7d:
1f:d9:3c:3e:07:a3:e5:86:9a:46:f8:6a:a6:9c:3d:
67:6f:c3:0d:2e:db:83:ff:0e:89:de:50:0f:d0:aa:
9f:1d:1a:34:c1:84:c5:a8:d7:54:c8:8c:28:74:fb:
f3:fe:d2:49:57:28:db:22:60:cc:0a:6e:8c:ec:ed:
6a:9c:55:21:eb:c4:b4:4d:62:0e:60:99:2c:1b:0d:
cb:4b:cf:43:b0:bb:4a:f2:85:87:a2:73:0a:a4:ce:
2e:3b:d6:ce:63:4a:ff:60:75:23:81:d8:c9:a4:0b:
d9:98:58:7d:00:9d:f2:0d:2a:68:03:88:be:b1:81:
77:6d:4f:b7:57:13:e3:60:9c:88:af:b0:1c:48:b8:
33:f5:ec:44:25:fd:ba:77:6b:30:00:43:1f:db:d7:
de:cf:05:9a:cf:5a:d0:ed:9f:6b:ee:00:c4:f1:03:
36:dd:66:c9:b6:e2:4a:80:85:a5:e1:bf:8b:04:36:
b1:90:c1:b6:c2:d4:92:41:9b:74:9c:53:ba:61:81:
42:ce:12:6e:78:46:21:29:bb:22:f1:df:60:e7:12:
10:69:48:cf:9b:4e:b6:de:74:50:89:90:6b:17:10:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:47:A0:0C:09:EE:91:1E:1E:A4:F5:05:17:DE:04:BA:AA:7C:D1:C8
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS396982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a0:5a:be:90:0e:c0:16:f9:61:50:f7:cf:90:80:a8:c0:8f:
b8:98:be:e8:7a:90:7b:b2:3a:e8:b2:47:ff:94:a6:0a:35:5c:
db:99:8e:bb:3b:d7:63:ad:b4:71:a7:a4:ef:f4:76:b7:59:92:
97:f4:66:35:2c:88:cd:cc:f5:8a:94:ff:57:fa:5a:bd:6a:91:
b9:22:89:68:0c:38:5d:db:e0:5d:f4:a6:da:00:1f:40:2a:a9:
d8:84:81:3b:5e:2f:9a:78:e9:ad:4b:a2:64:c2:f6:cc:29:ea:
be:84:08:1d:84:11:8c:3f:6d:6d:db:b6:22:09:83:cd:9c:80:
1e:fc:07:ef:42:d0:e5:c3:eb:89:6a:df:72:b8:66:e8:ef:88:
aa:75:43:2e:81:22:19:f4:45:35:27:fe:3e:65:60:0c:df:a4:
8c:16:f1:55:53:3a:ef:30:0e:0d:4c:72:b5:56:c1:15:1e:ce:
b1:52:ba:44:1b:6a:56:a0:e5:ad:8e:0f:b8:39:98:9f:a5:0a:
ce:d4:d1:42:b7:a2:f7:9a:bc:1f:7e:0a:9c:8d:df:17:f3:33:
df:ab:b3:d8:c3:07:85:b0:e2:c2:51:f2:42:fe:6f:04:01:1f:
ae:f5:35:e7:a6:00:ad:02:4e:21:ee:3c:92:8f:04:54:1a:a3:
49:57:be:2d
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 24 01:46:29 2024 by rpki-client on console-fra.rpki-client.org