Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS43043.roa
File: AS43043.roa (raw, json)
Hash identifier: Ip+nF5Iqbl8Kbx5KNWvnFGwZmlgqQEMoUgEHIkwk0qI=
Subject key identifier: A2:B5:EA:84:F7:29:C8:6F:A4:E6:3F:B7:3F:0A:46:B2:B1:FB:CB:47
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 655FD1EB19CCF60CCD45DD7000C3F7506A2F3738
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS43043.roa
Signing time: Tue 27 Dec 2022 14:44:36 +0000
ROA not before: Tue 27 Dec 2022 14:39:36 +0000
ROA not after: Tue 26 Dec 2023 14:44:36 +0000
asID: 43043
IP address blocks: 141.11.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:5f:d1:eb:19:cc:f6:0c:cd:45:dd:70:00:c3:f7:50:6a:2f:37:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Dec 27 14:39:36 2022 GMT
Not After : Dec 26 14:44:36 2023 GMT
Subject: CN=A2B5EA84F729C86FA4E63FB73F0A46B2B1FBCB47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:30:de:30:f1:62:26:0d:cc:98:b3:a7:73:
e7:ff:aa:8d:b3:ec:4a:dd:ac:54:cf:88:92:a7:bc:
04:d6:44:de:20:90:c5:e6:2c:06:da:71:00:03:f2:
ac:16:27:34:dd:94:26:15:1e:8c:ce:f8:e7:e6:c6:
a3:3a:8e:f1:b1:d3:f9:26:ae:96:89:57:27:d3:b8:
ea:e7:9b:3d:20:d8:bc:60:74:36:83:c9:a1:53:52:
79:62:c9:84:a3:4c:23:c4:cf:fd:9b:63:8e:76:8c:
1f:2d:e0:86:08:d0:58:3a:34:9c:33:d9:12:a1:b8:
b8:b9:b6:b6:e1:36:55:cb:b1:f5:82:e9:93:72:c9:
89:00:6d:df:20:9d:fe:f0:ad:59:f3:fa:e2:80:01:
eb:01:16:84:d5:32:0a:13:37:6e:3d:79:41:f0:42:
a7:4e:81:de:d9:4e:be:14:54:57:0d:02:d8:b5:e9:
1e:f4:5a:52:b1:02:d9:ce:03:8e:82:d9:77:c8:71:
a2:08:a1:2e:fb:e8:4e:ff:18:60:d8:aa:eb:99:60:
29:4b:73:2b:03:5b:eb:d1:c7:fa:f5:bf:3b:e9:30:
87:f0:7e:d0:f5:9c:4f:b3:2e:e8:a1:dc:67:92:7a:
27:05:76:cd:b5:38:8b:fe:3c:34:2f:d0:8b:7e:2b:
93:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B5:EA:84:F7:29:C8:6F:A4:E6:3F:B7:3F:0A:46:B2:B1:FB:CB:47
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS43043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:6c:f8:44:c4:77:cb:e0:84:b1:17:d0:c7:9d:99:1f:5d:f8:
01:b5:ea:75:d2:ac:26:54:47:ae:aa:e6:3a:65:b7:63:ae:d9:
d8:8a:de:1f:74:ab:a1:ba:1a:27:b5:f3:8e:6f:f4:2b:ea:6c:
49:db:45:ff:32:fc:94:3e:af:fc:73:1e:4d:77:ee:89:e2:7f:
93:5d:1e:78:6d:f0:e5:1b:20:0e:95:95:f5:44:d7:e7:be:60:
00:bb:c9:5b:62:42:1d:1a:e4:44:3d:3d:09:d3:8a:e4:28:bb:
d0:e0:2d:5a:6d:8c:50:4e:90:93:bd:e0:5f:63:1e:0c:8f:72:
75:42:da:d1:e3:94:1f:3d:55:8a:3f:7d:68:2b:22:d3:d3:2c:
0b:86:ef:bc:2e:6b:ad:e3:38:21:ae:f4:95:14:61:6b:ee:9d:
26:0e:65:c9:de:46:53:d5:dc:a8:7d:70:dd:65:ac:76:76:f7:
d4:3d:79:fb:02:ae:f3:19:ce:af:81:56:3b:49:c3:71:72:10:
b3:9c:2d:b6:c4:08:d5:b4:fc:5c:25:45:17:f6:29:7e:20:44:
88:08:67:96:ba:29:8a:b9:71:95:5d:44:8c:c5:d4:7f:06:f3:
7e:35:e4:c0:36:63:5e:f8:e4:47:41:f0:28:44:cf:86:ec:54:
a2:61:89:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org