Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS399073.roa
File: AS399073.roa (raw, json)
Hash identifier: Qme5mAOtTGXwUGRXjzFqPy1s11Em0vEGOx6gdbtijGI=
Subject key identifier: 12:BB:F4:6E:0C:E2:4F:45:60:4C:04:8F:36:7E:34:F2:80:DB:0F:63
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 28006AAC270CC4B9E1F56E9F9989BA594FAD4D1B
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS399073.roa
Signing time: Sun 20 Aug 2023 13:32:29 +0000
ROA not before: Sun 20 Aug 2023 13:27:29 +0000
ROA not after: Sun 18 Aug 2024 13:32:29 +0000
asID: 399073
IP address blocks: 141.11.132.0/22 maxlen: 24
141.11.168.0/22 maxlen: 24
141.11.200.0/22 maxlen: 24
141.11.216.0/22 maxlen: 24
141.11.220.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:00:6a:ac:27:0c:c4:b9:e1:f5:6e:9f:99:89:ba:59:4f:ad:4d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 20 13:27:29 2023 GMT
Not After : Aug 18 13:32:29 2024 GMT
Subject: CN=12BBF46E0CE24F45604C048F367E34F280DB0F63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:58:6c:cd:d3:bd:f6:d1:03:22:0e:2d:8e:
85:b9:60:e7:ab:b0:cd:f2:39:8c:9b:a5:ea:5f:d8:
ff:be:87:2d:5a:7c:0e:54:d5:e9:ca:22:bd:79:61:
80:f5:1b:47:e3:d0:9f:17:b1:43:2a:d7:fb:0c:33:
3a:3f:8f:77:51:1e:4c:10:fd:89:12:05:c3:de:36:
98:a0:16:af:41:90:01:ae:32:a3:e2:ec:5d:d2:59:
c6:3a:2e:3f:c7:8e:5c:81:ac:67:ff:40:f3:3f:fd:
71:9e:40:18:92:c9:8f:4f:2a:c7:96:a8:36:d2:4a:
d5:49:b4:c5:1e:20:13:f6:a9:da:32:39:13:4f:c6:
04:72:47:46:a0:c4:15:ce:90:58:da:5a:c3:ae:16:
2d:bb:7c:16:47:b6:e3:e5:f7:b9:ea:d0:43:a7:fe:
cd:0b:4e:45:1c:a6:ee:d3:e0:01:66:36:ec:57:35:
7d:14:ce:be:37:a1:ff:c6:de:89:b4:ba:5a:24:08:
9e:42:51:e6:57:b2:55:61:95:9a:a1:cc:3d:f2:98:
48:b4:94:df:51:c4:3e:2f:58:b9:a9:61:d5:18:00:
6f:2f:8d:bf:4e:13:7c:6f:63:12:38:a7:5b:19:cd:
4a:1f:94:93:6e:58:ef:c2:9c:fc:60:09:45:99:97:
55:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BB:F4:6E:0C:E2:4F:45:60:4C:04:8F:36:7E:34:F2:80:DB:0F:63
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS399073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.132.0/22
141.11.168.0/22
141.11.200.0/22
141.11.216.0/21
Signature Algorithm: sha256WithRSAEncryption
69:61:20:db:29:7e:b0:21:39:5d:4d:58:7e:b8:9b:00:b0:30:
9a:8f:f4:db:1b:a0:8c:b2:ff:40:da:c8:38:dd:9b:8a:4d:48:
f3:41:99:2d:a3:93:cb:7e:b3:d5:2a:8f:30:99:4f:55:ff:11:
2d:83:b8:39:e8:d2:79:c5:0c:9c:c2:f0:97:cb:3c:c1:5c:a9:
74:b0:7e:86:41:57:aa:a7:7b:d6:ea:a2:76:b8:9b:12:96:25:
3f:a0:ef:e2:d6:a5:d0:fc:af:8f:5e:bc:f2:ff:99:1d:14:c5:
e2:be:8b:23:61:60:93:51:ca:c4:38:93:80:c6:4c:d4:ae:9c:
de:98:94:a7:38:70:75:cc:1d:08:da:ea:d6:c1:f9:bc:27:0b:
d1:30:8a:19:f4:da:72:82:b9:25:f6:2c:8e:4c:f8:f3:53:17:
99:69:85:cd:ce:8a:ae:67:86:1b:13:93:f2:52:4a:e4:15:82:
4f:78:4b:c1:15:b8:6f:46:95:f2:e8:8f:02:d8:be:e1:b3:7b:
af:cf:32:08:72:51:f9:1b:17:6c:a6:80:74:76:d8:1b:4f:2e:
61:b8:99:d6:e6:dd:cc:ad:1c:eb:b6:3f:19:76:2d:8d:e9:4a:
50:0f:32:7a:29:05:22:7c:f7:b0:cb:3b:26:86:0f:d8:ab:e5:
86:1a:63:42
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUKABqrCcMxLnh9W6fmYm6WU+tTRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yMzA4MjAxMzI3MjlaFw0yNDA4MTgxMzMyMjlaMDMxMTAvBgNV
BAMTKDEyQkJGNDZFMENFMjRGNDU2MDRDMDQ4RjM2N0UzNEYyODBEQjBGNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgv1hszdO99tEDIg4tjoW5YOer
sM3yOYybpepf2P++hy1afA5U1enKIr15YYD1G0fj0J8XsUMq1/sMMzo/j3dRHkwQ
/YkSBcPeNpigFq9BkAGuMqPi7F3SWcY6Lj/HjlyBrGf/QPM//XGeQBiSyY9PKseW
qDbSStVJtMUeIBP2qdoyORNPxgRyR0agxBXOkFjaWsOuFi27fBZHtuPl97nq0EOn
/s0LTkUcpu7T4AFmNuxXNX0Uzr43of/G3om0ulokCJ5CUeZXslVhlZqhzD3ymEi0
lN9RxD4vWLmpYdUYAG8vjb9OE3xvYxI4p1sZzUoflJNuWO/CnPxgCUWZl1VBAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQUErv0bgziT0VgTASPNn408oDbD2MwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMzk5MDczLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCjQuE
AwQCjQuoAwQCjQvIAwQDjQvYMA0GCSqGSIb3DQEBCwUAA4IBAQBpYSDbKX6wITld
TVh+uJsAsDCaj/TbG6CMsv9A2sg43ZuKTUjzQZkto5PLfrPVKo8wmU9V/xEtg7g5
6NJ5xQycwvCXyzzBXKl0sH6GQVeqp3vW6qJ2uJsSliU/oO/i1qXQ/K+PXrzy/5kd
FMXivosjYWCTUcrEOJOAxkzUrpzemJSnOHB1zB0I2urWwfm8JwvRMIoZ9Npygrkl
9iyOTPjzUxeZaYXNzoquZ4YbE5PyUkrkFYJPeEvBFbhvRpXy6I8C2L7hs3uvzzII
clH5GxdspoB0dtgbTy5huJnW5t3MrRzrtj8Zdi2N6UpQDzJ6KQUifPewyzsmhg/Y
q+WGGmNC
Generated at Wed Sep 20 00:35:28 2023 by rpki-client on console-ams.rpki-client.org