Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS397563.roa
File: AS397563.roa (raw, json)
Hash identifier: qKSU5v3dkHbJVJWBbk83zmvM1132GW/mePdmeShnuqY=
Subject key identifier: 86:DD:8F:84:D8:77:18:D3:CB:6F:52:DF:BC:E7:AB:A9:98:DC:9E:6D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 73E82D83B7E29364143299C2DEBE2455AC44B352
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS397563.roa
Signing time: Mon 19 Jun 2023 20:50:53 +0000
ROA not before: Mon 19 Jun 2023 20:45:53 +0000
ROA not after: Mon 17 Jun 2024 20:50:53 +0000
asID: 397563
IP address blocks: 141.11.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e8:2d:83:b7:e2:93:64:14:32:99:c2:de:be:24:55:ac:44:b3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 19 20:45:53 2023 GMT
Not After : Jun 17 20:50:53 2024 GMT
Subject: CN=86DD8F84D87718D3CB6F52DFBCE7ABA998DC9E6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:8f:d1:68:b7:74:57:a9:e2:32:ca:31:f7:
6f:5f:49:db:b5:8f:69:fb:c1:c3:bc:42:46:8f:7f:
a7:7a:44:ee:1f:69:24:29:07:fe:88:e1:61:0e:d9:
f1:3f:88:5d:13:ce:db:ae:55:fb:4c:da:b0:1f:d7:
12:ea:2d:e1:d6:52:f5:75:f2:e4:bc:8b:d2:77:34:
3d:26:df:81:a2:83:9d:e7:05:ef:5e:6f:f8:d6:5d:
77:58:29:40:16:24:9a:63:3d:88:02:7f:2e:56:ea:
a0:3c:cf:38:6a:fa:b0:07:ec:74:13:dc:fe:2d:fb:
df:99:86:71:42:67:2f:36:c7:23:1d:7f:3a:ab:a0:
be:58:e7:58:25:ca:26:25:9b:21:6e:1d:a9:7c:74:
72:ec:c6:47:be:e7:b0:75:da:39:8c:77:35:b5:a3:
d1:1d:3d:a0:8c:e2:32:02:a4:25:2c:d3:13:84:d5:
a0:e5:0f:99:3d:2c:bd:8b:17:83:e2:88:f7:83:69:
c8:23:8a:35:4c:a0:50:07:c6:f0:67:21:4c:0f:70:
f7:91:53:77:0f:f5:71:8b:2b:1a:77:6f:8a:03:03:
67:08:c2:09:dc:b5:97:53:4d:36:4b:c4:2d:e6:e4:
52:bf:ff:64:cc:58:cb:14:21:fe:fb:8b:4a:fc:4f:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DD:8F:84:D8:77:18:D3:CB:6F:52:DF:BC:E7:AB:A9:98:DC:9E:6D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS397563.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.17.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c0:e1:60:8c:42:c6:8e:86:d2:0f:8c:8f:ee:58:40:bf:7f:
ba:2b:38:06:8d:74:7a:18:1e:c1:ec:3d:a5:bb:e9:9c:c1:f2:
42:da:6c:40:7d:0d:0b:94:b2:eb:37:81:dd:68:cf:f6:e3:6b:
db:29:3b:be:26:5b:9f:08:2d:2c:ef:2b:49:75:ae:27:74:96:
cf:aa:13:9d:0b:d1:46:22:56:b6:20:99:31:fb:bf:e2:55:38:
0b:04:f4:5c:8b:5d:d7:61:2c:88:18:d7:8e:b8:44:58:bc:b6:
10:94:64:0c:31:07:94:88:70:22:d3:a0:73:ac:30:51:d4:a2:
e8:97:f6:32:44:86:9b:ce:a8:ab:5c:28:40:32:7d:73:9b:41:
cb:a2:d6:66:c5:ee:0a:5d:df:81:14:e3:60:6a:d8:8e:26:c8:
fb:db:bd:ae:39:ee:2a:82:83:8f:4f:3d:03:05:6a:41:7e:d3:
19:27:5b:db:1a:92:f7:65:7f:2c:36:e3:4d:6f:fc:42:bf:01:
df:64:b3:a5:c2:48:f5:09:c4:9f:b8:a5:f1:54:fa:f3:33:9a:
8d:f1:b0:ef:85:ce:c6:06:e9:cf:d1:3b:21:84:20:ac:f8:00:
bf:5d:61:9d:87:d7:f5:72:94:b7:80:a4:df:c4:00:4f:48:cc:
1b:2d:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org