Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS39798.roa
File: AS39798.roa (raw, json)
Hash identifier: cEaDZxQCPERxSUBKo19LKXipY3aOwptbeRIAka1uahs=
Subject key identifier: BC:75:B4:48:F0:78:A3:81:17:44:58:40:54:F0:1E:7D:EC:1B:40:42
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1DBD93C774C3324B331F9729C246806E76BE51B4
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS39798.roa
Signing time: Thu 16 Nov 2023 15:12:10 +0000
ROA not before: Thu 16 Nov 2023 15:07:10 +0000
ROA not after: Thu 14 Nov 2024 15:12:10 +0000
asID: 39798
IP address blocks: 141.11.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bd:93:c7:74:c3:32:4b:33:1f:97:29:c2:46:80:6e:76:be:51:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 16 15:07:10 2023 GMT
Not After : Nov 14 15:12:10 2024 GMT
Subject: CN=BC75B448F078A3811744584054F01E7DEC1B4042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:a8:4e:38:1c:e8:4e:63:ce:ea:fd:02:ca:
8b:d8:9b:96:75:77:3d:92:f8:8c:f8:65:51:94:85:
ae:e6:c0:62:8b:06:42:4a:3b:88:17:e8:60:fd:7b:
c0:c5:99:b1:38:7e:7c:6f:e7:14:b1:70:29:f2:37:
53:02:7d:8a:38:a4:b5:1f:dc:c1:c5:85:9a:fb:48:
87:d1:33:16:98:04:40:5b:00:14:e8:92:a5:73:21:
86:36:d3:ad:6d:e7:93:3f:19:e2:a2:c7:5e:de:84:
22:6c:ee:cf:61:ae:05:39:53:e7:72:ab:1d:f2:9c:
32:94:03:fd:7b:b9:0f:5d:8d:4f:46:c7:0f:f9:ac:
a7:bc:14:c7:9e:66:1b:fb:5e:43:d3:74:84:b1:5a:
ec:d9:83:d0:b9:7d:5d:e6:33:9e:9e:08:c2:b0:9e:
df:06:b4:80:44:c7:cc:2d:10:a8:d4:c4:cc:91:90:
19:44:f6:57:8c:32:f4:a8:7f:4d:3d:8c:be:ca:3d:
13:c5:e3:64:44:40:d1:7c:cc:15:86:80:52:49:e6:
83:6c:cb:89:2d:ea:79:55:e1:5a:79:ce:64:f8:07:
46:20:85:d1:8a:31:3c:a1:1d:6e:b1:15:83:22:11:
cb:c6:1f:02:f7:69:54:2c:00:65:b4:3b:25:0c:a1:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:75:B4:48:F0:78:A3:81:17:44:58:40:54:F0:1E:7D:EC:1B:40:42
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS39798.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:3e:e8:3a:75:ae:4c:c7:5f:2c:de:7b:fa:56:bd:cb:e7:a9:
60:62:bd:cc:c5:77:d1:f5:cf:ea:7b:59:60:75:2a:1f:9c:54:
bc:db:6f:a0:4f:0d:e7:90:52:71:73:e0:d1:4f:44:7e:e8:41:
7d:11:30:79:a6:c5:98:96:8e:b2:24:77:76:fe:41:b6:3c:aa:
de:fb:e0:99:8a:6b:76:4c:84:32:83:4f:e7:f6:9b:68:4b:65:
7a:79:51:9d:9f:34:17:fd:5a:df:72:81:c3:76:b1:bb:39:ea:
2e:4c:02:e5:ff:63:51:3b:64:e0:93:3e:d6:9e:98:cc:ee:db:
65:9e:9f:4a:e8:be:d9:f5:de:a6:38:c1:4c:40:4e:76:e2:95:
06:21:8f:17:bc:72:15:9f:7e:f7:cd:e7:b1:3a:86:d4:ba:b4:
a7:f0:43:c8:f0:52:b3:ab:05:d9:bb:9d:f7:11:61:6d:91:22:
7e:16:82:b8:0a:7a:7e:76:20:35:5f:c7:4d:af:f0:ad:cd:e2:
65:fb:16:49:20:86:53:06:e6:99:d2:8b:b9:06:ef:bf:77:2e:
ea:97:3e:27:df:b0:60:3e:d4:2c:57:83:a5:00:c5:50:70:a1:
f7:ed:10:38:c0:14:c4:83:d7:85:fa:52:c3:da:33:90:97:de:
40:f5:ea:e7
-----BEGIN CERTIFICATE-----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Generated at Tue Jan 16 04:44:46 2024 by rpki-client on console-fra.rpki-client.org