Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS401039.roa
File: AS401039.roa (raw, json)
Hash identifier: ibiaBwRsNMkB1iCJwaDT7utJYfi8DPiXoFjd+4wbIUo=
Subject key identifier: 0D:A4:AD:64:2A:A5:EF:20:C5:13:63:10:51:1F:76:A0:60:95:D9:17
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 514E13014B145716BC26B94ECD765DE5346BF3C7
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS401039.roa
Signing time: Thu 30 May 2024 04:32:20 +0000
ROA not before: Thu 30 May 2024 04:27:20 +0000
ROA not after: Thu 29 May 2025 04:32:20 +0000
asID: 401039
IP address blocks: 141.11.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jun 2024 10:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4e:13:01:4b:14:57:16:bc:26:b9:4e:cd:76:5d:e5:34:6b:f3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 30 04:27:20 2024 GMT
Not After : May 29 04:32:20 2025 GMT
Subject: CN=0DA4AD642AA5EF20C5136310511F76A06095D917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5a:dd:43:3c:ad:57:aa:ae:07:8b:a0:5c:5c:
5f:4e:ec:d7:52:10:74:02:60:22:05:92:de:41:63:
53:4f:f3:26:70:98:e8:bd:d4:4a:f1:c0:57:ab:5d:
a9:ef:44:ea:6d:a8:35:61:51:c7:57:72:d1:e8:40:
1f:20:9f:47:ef:b0:7f:4b:dc:2f:d1:c8:f4:f5:50:
7a:d8:57:95:56:1d:44:e6:49:69:fb:0c:de:a4:ac:
ab:e4:9e:c1:21:ba:a4:ba:d7:4d:5d:a8:36:c5:8b:
df:bf:35:9b:76:57:a5:89:9e:b7:b1:97:44:16:a6:
f1:07:66:f1:c4:71:73:8e:bc:90:af:c3:82:de:10:
f6:ee:fa:6d:c3:18:b7:ae:cf:17:19:b5:94:17:cc:
5b:81:39:83:5e:d9:2b:00:5a:c4:6d:93:f9:40:7c:
9d:30:f4:e0:54:4d:d6:13:08:d8:9a:1b:90:25:e1:
69:b5:53:e4:59:fa:69:f1:8e:7d:ec:45:bb:86:16:
07:a2:1a:62:c1:5b:52:a5:65:2d:50:d0:79:0e:0f:
63:2c:09:a7:64:91:73:fa:c1:b6:1c:1a:43:62:43:
15:ec:8b:7b:34:bc:00:29:4f:ec:2d:02:b6:e7:3b:
d8:78:f8:ff:24:13:d7:35:fb:65:1e:63:f8:b1:35:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A4:AD:64:2A:A5:EF:20:C5:13:63:10:51:1F:76:A0:60:95:D9:17
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS401039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.25.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f8:86:69:5a:dc:d9:2d:fc:72:97:af:7c:84:50:cf:27:61:
4a:aa:5f:97:73:30:55:28:da:1f:e5:fd:b8:72:bb:62:87:5e:
b5:3b:b6:28:99:91:58:26:81:bf:93:b8:cc:99:c9:d3:fd:9a:
9e:7b:9d:be:c0:df:79:82:29:10:87:90:d2:bc:5d:3f:92:d3:
38:99:58:24:69:3e:a9:64:b6:d1:18:88:6b:b8:fa:07:9f:37:
6f:b7:5d:ce:51:79:01:02:f6:37:b4:17:a6:8d:9c:93:3e:89:
12:f9:ad:c2:31:36:b7:16:ed:0f:dd:a0:3e:3a:18:40:5d:1d:
82:94:5e:a3:b0:7a:bd:fc:09:88:b6:9b:70:4d:68:ce:78:d7:
fe:c3:2d:05:9c:c2:61:51:f6:a1:cc:df:0a:73:ac:29:92:5c:
b2:b2:19:34:ed:f7:9e:14:50:7a:b8:15:66:bb:63:a9:c3:7b:
32:f8:1a:e1:f4:79:87:ac:c2:30:c9:c5:78:3f:96:38:16:8e:
d9:f6:6f:76:2c:0c:93:9b:e1:c5:20:27:e4:91:ee:a1:75:a9:
3f:b3:34:4d:9a:03:8e:fd:89:96:0b:3a:6a:58:6c:48:3c:7d:
24:4e:50:c1:47:97:55:da:52:45:8a:d7:ae:aa:db:ee:fc:4d:
12:76:fe:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:18 2025 by rpki-client