Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS400377.roa
File: AS400377.roa (raw, json)
Hash identifier: 7t/pnCCIU7AQBsgkWfZnFTNULAwnm6M1A8Oz3Ky+6C4=
Subject key identifier: 21:62:20:7B:C7:50:EC:E3:81:A8:58:B7:8E:B7:E4:33:08:68:09:53
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 33E5146C5EE7291E1DF53A136833AAA04B26C9FC
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS400377.roa
Signing time: Tue 27 Dec 2022 14:44:36 +0000
ROA not before: Tue 27 Dec 2022 14:39:36 +0000
ROA not after: Tue 26 Dec 2023 14:44:36 +0000
asID: 400377
IP address blocks: 141.11.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e5:14:6c:5e:e7:29:1e:1d:f5:3a:13:68:33:aa:a0:4b:26:c9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Dec 27 14:39:36 2022 GMT
Not After : Dec 26 14:44:36 2023 GMT
Subject: CN=2162207BC750ECE381A858B78EB7E43308680953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:53:44:d2:f9:68:53:38:f6:88:46:06:04:
75:b2:da:44:44:a6:32:ae:77:82:11:58:d6:36:19:
5b:92:a1:f6:1c:d6:38:98:47:ce:e3:8f:ed:09:52:
f7:c6:7e:60:47:b1:8a:67:e1:8c:d4:a7:22:b5:a6:
74:8d:83:0d:83:9e:cf:58:cd:e3:ab:c2:0a:53:be:
11:db:8a:86:e3:62:bf:f4:6f:be:1b:c9:03:e4:6b:
8e:70:a2:68:f6:28:6f:99:8a:22:e0:6e:fa:74:ed:
6c:4f:40:dd:8e:7d:1f:4b:1d:d7:d6:dd:2c:e3:11:
a9:88:22:de:d1:9a:c5:42:34:ba:35:b0:84:3a:07:
ef:14:e0:b9:77:d8:d4:51:8e:89:40:d0:a0:09:3c:
f0:e5:fd:54:9c:f0:2c:5e:68:09:d1:24:c8:91:2a:
c9:4f:ca:e3:69:1b:53:da:dd:f1:73:26:24:b3:d9:
94:07:8e:dc:56:5f:1a:82:1a:9b:bd:f5:42:5d:b1:
e7:2b:a7:a1:47:48:20:72:65:a4:65:4b:16:1a:0b:
11:d9:dd:70:6f:c8:cf:15:43:5d:c3:9e:bd:f9:04:
38:2e:87:1e:99:9e:c1:21:e7:26:0e:e2:c2:06:82:
a3:30:69:42:38:0c:9f:c9:96:a7:56:5f:7e:d4:82:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:62:20:7B:C7:50:EC:E3:81:A8:58:B7:8E:B7:E4:33:08:68:09:53
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS400377.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.39.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c6:61:83:ae:7b:b5:76:7e:18:83:0b:c2:c5:a3:0c:33:81:
ab:24:d4:1d:eb:bc:57:18:1a:92:42:e4:23:cb:87:c9:97:eb:
de:a4:59:ae:9e:7a:f2:2c:f8:86:ab:a9:8d:6f:fb:ea:44:77:
d0:3e:ed:7c:b4:69:2e:58:fa:b3:a0:f4:8e:8d:95:87:ce:6d:
55:f5:5b:67:ab:17:f3:67:bc:5b:ac:ae:40:d5:00:9f:89:f5:
39:fb:41:9d:d5:38:dd:8b:2d:80:d1:51:c6:34:fb:9a:38:f2:
75:f3:67:31:a1:2a:01:b5:16:53:a7:33:96:3d:6b:03:d9:a9:
fd:0c:b3:a2:80:5a:00:81:19:b6:18:d1:2e:ad:64:41:8d:58:
83:a2:0a:b3:50:c2:b0:3d:63:66:ed:ee:6e:2a:e9:2a:36:e1:
11:2c:4b:76:98:6c:1c:fe:42:0d:63:40:21:df:42:de:43:9a:
2d:17:51:3f:83:c3:1b:a2:42:ad:e4:33:d7:6b:88:15:09:2d:
c7:ba:5f:97:d6:3d:4b:6f:74:bd:ad:5c:9d:ee:43:77:a8:c4:
e9:de:6c:76:f8:d6:7d:d2:66:14:49:d5:1c:ef:42:85:5c:b5:
27:41:58:69:d6:f1:d1:94:a0:ff:e6:bd:05:5f:6d:8d:f1:40:
a9:7f:12:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org