Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS398465.roa
File: AS398465.roa (raw, json)
Hash identifier: i0PHN17apyqK5RgvVDZtZxpqBPGlt1Pf0UC/OkJRsYI=
Subject key identifier: B2:E7:54:E5:45:53:FD:D6:12:C5:69:58:C2:1A:89:7B:A0:D6:DA:CA
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0E994ABFFF7CAEF2E593E14B505C7991E8443BF2
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS398465.roa
Signing time: Fri 03 Mar 2023 18:19:49 +0000
ROA not before: Fri 03 Mar 2023 18:14:49 +0000
ROA not after: Fri 01 Mar 2024 18:19:49 +0000
asID: 398465
IP address blocks: 141.11.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:99:4a:bf:ff:7c:ae:f2:e5:93:e1:4b:50:5c:79:91:e8:44:3b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 3 18:14:49 2023 GMT
Not After : Mar 1 18:19:49 2024 GMT
Subject: CN=B2E754E54553FDD612C56958C21A897BA0D6DACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:6d:3f:25:6e:94:12:97:bf:5a:df:3a:45:
05:97:48:b1:da:d6:dc:4e:55:0d:cf:d9:89:b2:3d:
7c:51:79:bd:26:51:1a:fa:9d:b7:15:dd:fb:cd:03:
f6:92:f3:cd:58:aa:49:47:8b:ab:3d:fc:5b:3a:7b:
0a:06:44:c2:62:11:2a:03:79:6c:bf:72:e7:0e:95:
df:0d:86:75:96:98:74:98:32:42:98:ab:c7:36:98:
59:90:99:31:8e:92:96:30:ac:02:dd:42:49:d5:87:
ed:76:d1:0d:15:42:0c:a0:ed:af:4d:04:61:45:6a:
2b:b1:bd:e3:e8:92:a3:cb:48:10:aa:c7:5c:39:04:
aa:17:b1:a9:14:6e:57:38:27:4b:f1:c9:fa:70:39:
6a:a5:7b:52:8d:d6:48:ed:3e:b8:f2:ec:26:57:48:
9c:b6:f6:3c:5a:45:81:70:75:1d:c0:62:9d:5c:21:
c6:cb:e6:ab:5f:11:1c:10:9f:4f:a5:d7:a4:c8:5c:
61:5b:c5:e7:f4:bb:e5:9a:cd:4a:eb:e4:5a:59:10:
0d:82:74:a4:ba:d5:a7:c7:56:10:86:15:3d:de:2c:
f0:56:7b:28:a3:be:cf:da:7c:34:a0:fb:89:e9:06:
4f:e1:c3:ea:c7:0f:51:c9:86:0e:eb:84:5c:8c:e9:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E7:54:E5:45:53:FD:D6:12:C5:69:58:C2:1A:89:7B:A0:D6:DA:CA
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS398465.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.104.0/24
Signature Algorithm: sha256WithRSAEncryption
55:71:91:76:2e:f1:30:19:f6:e4:6a:a3:c8:1c:5f:3c:b7:c3:
97:9c:ec:32:25:10:1e:fa:73:c0:5f:35:71:9c:62:ae:53:fd:
5e:2c:93:75:55:ce:49:f7:40:0b:9b:3a:86:84:e1:4d:4b:93:
a6:c4:5a:c7:13:9b:a1:f9:8d:76:76:35:5a:d6:c7:65:f0:42:
8f:3a:dc:7f:2b:af:f9:76:3d:08:23:6d:a2:03:f2:55:4f:94:
38:53:6f:de:38:e0:be:6e:42:88:b1:2c:aa:6c:24:cd:45:5a:
b3:9f:39:0c:4f:6d:eb:d7:6e:ae:82:70:08:8a:50:4b:2a:fe:
68:09:ab:53:00:9c:59:55:6b:cd:1c:e7:73:1b:eb:ff:d2:e6:
b5:11:3c:5e:d7:a5:f6:96:d7:61:41:f0:c3:45:ac:ae:3b:42:
38:41:67:d2:87:4c:15:8d:06:59:ce:ae:c1:0c:48:26:7f:9c:
57:2a:81:6a:a6:26:c7:ac:5f:bb:36:77:c4:98:42:ca:4d:d0:
f6:4f:0e:7b:d2:b2:75:24:dd:dc:b5:1a:1f:e2:65:15:72:9b:
88:bf:41:2b:f0:7a:e8:76:6c:7a:5c:6d:86:31:74:0f:4e:f0:
87:89:82:e7:26:a9:87:78:8d:03:a0:c6:94:67:25:59:7d:f8:
2e:7a:76:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org