Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS45887.roa
File: AS45887.roa (raw, json)
Hash identifier: GcwAG0oANbGMyItjsfO62dApY24wuhYH91MDVnNAXx8=
Subject key identifier: B2:A9:F5:5E:37:90:42:09:B0:14:33:57:6E:FE:11:DC:88:BB:F1:46
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 67B0E5984BDDE74E9917CFFF26EE87704E157411
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS45887.roa
Signing time: Wed 07 Jun 2023 04:25:18 +0000
ROA not before: Wed 07 Jun 2023 04:20:18 +0000
ROA not after: Wed 05 Jun 2024 04:25:18 +0000
asID: 45887
IP address blocks: 141.11.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b0:e5:98:4b:dd:e7:4e:99:17:cf:ff:26:ee:87:70:4e:15:74:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 7 04:20:18 2023 GMT
Not After : Jun 5 04:25:18 2024 GMT
Subject: CN=B2A9F55E37904209B01433576EFE11DC88BBF146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:c4:91:a7:f9:0c:10:8b:c5:be:f2:a0:45:
39:51:05:5d:9a:95:cd:93:5c:05:42:cf:28:e3:42:
7b:e8:cb:75:d1:dd:33:f7:44:49:8d:8d:6a:7a:c2:
bf:54:7e:cb:23:ed:f4:32:8d:1b:2c:49:e7:e2:9e:
59:db:82:b9:9b:3b:bd:ae:65:31:c0:fc:65:7b:da:
30:7f:53:86:24:07:19:f4:23:08:d4:50:5f:f4:50:
c2:22:92:ee:65:16:4c:04:83:3a:af:24:b6:e8:08:
46:86:09:01:92:5d:f2:42:bb:26:78:4c:a9:fb:f7:
0e:1f:df:40:24:c6:05:2b:b5:35:f3:c8:2f:c8:a4:
72:fc:fc:b5:be:03:4c:0a:58:ec:2e:f9:81:c0:35:
ef:93:60:1e:fd:d8:c0:02:12:2a:d0:63:38:69:79:
14:f1:68:96:0e:a7:dc:ee:67:99:fe:fb:4b:0c:a0:
ac:da:ef:b1:2e:0c:65:b8:56:5a:b5:e9:e8:8f:ac:
43:94:62:bd:0f:eb:8e:42:68:79:f9:57:8d:e6:10:
3b:0a:be:92:b5:54:bb:ce:c3:3b:69:5c:42:17:ad:
07:c2:b3:9e:4c:ae:df:ed:1a:a3:c5:4e:ad:1a:7b:
61:36:a9:f5:53:c7:5e:e6:56:27:3a:79:ea:e0:09:
9e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A9:F5:5E:37:90:42:09:B0:14:33:57:6E:FE:11:DC:88:BB:F1:46
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS45887.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.43.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:39:ed:fc:7f:3d:cb:71:d9:f6:7c:4e:f4:58:58:fe:2c:c7:
d0:cc:07:23:46:0e:5c:cd:28:7f:f3:47:1f:44:5a:47:1f:82:
80:c6:27:28:1f:e8:58:e6:2c:09:b3:19:ad:8e:43:72:65:3a:
24:5c:db:02:f2:c6:af:26:ac:4f:bb:64:6b:16:61:3d:e1:b4:
32:c9:a7:fa:9c:cc:19:a1:1e:21:37:cd:3d:98:28:ea:ad:ff:
d4:25:33:e9:e0:83:c0:a8:31:c1:f4:22:11:de:67:3f:bd:3e:
4b:d4:86:a9:11:8a:82:36:c1:5b:45:6c:07:f9:4a:10:74:3d:
6d:8c:aa:0d:c0:65:7c:e3:b4:db:f5:01:e1:ab:2d:25:3f:37:
52:e7:40:47:2f:38:6e:35:98:d4:75:cb:44:0e:7e:20:bb:f7:
84:4c:6a:56:ba:94:b0:54:9d:77:a9:f6:61:9e:0d:1a:14:e0:
c8:cb:f2:de:d3:0e:cc:e8:b5:16:a5:bc:d0:5e:23:29:fe:e8:
55:08:92:67:3d:e8:ba:a2:e3:6c:f2:18:81:2d:e7:14:a0:46:
8d:b4:cb:3c:48:31:e5:86:74:9f:a6:b7:c0:b2:ee:3e:04:9f:
dc:ef:2d:27:d6:6a:0a:14:02:83:97:37:29:c2:75:8e:e8:f0:
cc:f2:85:39
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUZ7DlmEvd506ZF8//Ju6HcE4VdBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yMzA2MDcwNDIwMThaFw0yNDA2MDUwNDI1MThaMDMxMTAvBgNV
BAMTKEIyQTlGNTVFMzc5MDQyMDlCMDE0MzM1NzZFRkUxMURDODhCQkYxNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2JcSRp/kMEIvFvvKgRTlRBV2a
lc2TXAVCzyjjQnvoy3XR3TP3REmNjWp6wr9Ufssj7fQyjRssSefinlnbgrmbO72u
ZTHA/GV72jB/U4YkBxn0IwjUUF/0UMIiku5lFkwEgzqvJLboCEaGCQGSXfJCuyZ4
TKn79w4f30AkxgUrtTXzyC/IpHL8/LW+A0wKWOwu+YHANe+TYB792MACEirQYzhp
eRTxaJYOp9zuZ5n++0sMoKza77EuDGW4Vlq16eiPrEOUYr0P645CaHn5V43mEDsK
vpK1VLvOwztpXEIXrQfCs55Mrt/tGqPFTq0ae2E2qfVTx17mVic6eergCZ7NAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUsqn1XjeQQgmwFDNXbv4R3Ii78UYwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNDU4ODcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNCysw
DQYJKoZIhvcNAQELBQADggEBALI57fx/Pctx2fZ8TvRYWP4sx9DMByNGDlzNKH/z
Rx9EWkcfgoDGJygf6FjmLAmzGa2OQ3JlOiRc2wLyxq8mrE+7ZGsWYT3htDLJp/qc
zBmhHiE3zT2YKOqt/9QlM+ngg8CoMcH0IhHeZz+9PkvUhqkRioI2wVtFbAf5ShB0
PW2Mqg3AZXzjtNv1AeGrLSU/N1LnQEcvOG41mNR1y0QOfiC794RMala6lLBUnXep
9mGeDRoU4MjL8t7TDszotRalvNBeIyn+6FUIkmc96Lqi42zyGIEt5xSgRo20yzxI
MeWGdJ+mt8Cy7j4En9zvLSfWagoUAoOXNynCdY7o8MzyhTk=
Generated at Sun Jan 7 01:05:58 2024 by rpki-client on console-ams.rpki-client.org