Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49999.roa
File: AS49999.roa (raw, json)
Hash identifier: Jh6aUAB5YM3KKtMsgrZ+hvd3VcT5bEUnlkfJTkmnRVU=
Subject key identifier: CF:86:F3:C7:CF:EA:C5:F1:5C:A1:52:B6:86:88:72:54:DF:D4:AB:75
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1D19A4F3027932741421A411418D4D26236077E9
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49999.roa
Signing time: Tue 10 Jan 2023 09:26:07 +0000
ROA not before: Tue 10 Jan 2023 09:21:07 +0000
ROA not after: Tue 09 Jan 2024 09:26:07 +0000
asID: 49999
IP address blocks: 141.11.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:19:a4:f3:02:79:32:74:14:21:a4:11:41:8d:4d:26:23:60:77:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 10 09:21:07 2023 GMT
Not After : Jan 9 09:26:07 2024 GMT
Subject: CN=CF86F3C7CFEAC5F15CA152B686887254DFD4AB75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:44:b5:84:d9:06:0c:f1:72:37:73:cf:b1:
f9:5d:8c:bf:24:a0:2a:de:d9:43:57:90:ed:0e:8d:
34:5c:20:6f:23:00:4a:d0:33:89:ee:62:79:40:3e:
06:be:ef:3d:78:12:0e:32:a9:8b:13:a6:0b:6b:72:
ea:01:d6:76:bf:e6:0d:c6:d8:cf:79:5e:7e:91:f2:
27:1c:e1:98:79:b1:d7:bd:40:ef:01:13:72:a1:64:
d3:f4:62:49:b1:6a:62:a8:7f:1c:d1:7c:f3:3b:5a:
d2:58:3d:db:b9:92:68:de:01:85:aa:4e:2b:ad:1a:
41:a6:65:a6:01:ee:49:85:6b:e7:0a:cd:7b:05:48:
cd:ce:96:a1:a8:33:e4:92:91:58:ba:d7:6a:89:4b:
f7:a2:35:ef:41:dd:a6:0c:5b:2f:50:df:0e:85:53:
ae:79:fb:13:c6:d0:d1:6e:1e:de:92:b2:0a:8b:01:
89:3b:33:7b:d1:33:76:7f:98:47:ab:3f:bd:59:85:
64:6e:7e:e7:b4:cd:ea:05:83:4b:55:db:21:ab:17:
e5:05:e8:41:86:ae:fb:33:be:da:a5:da:87:3a:6e:
a8:bc:54:ec:e4:cd:77:fd:b2:ba:76:42:52:ec:3e:
84:ad:45:5c:77:12:ee:65:ba:3f:0c:07:2b:0d:32:
a0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:86:F3:C7:CF:EA:C5:F1:5C:A1:52:B6:86:88:72:54:DF:D4:AB:75
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49999.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.188.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a2:3a:b8:5b:83:29:78:d1:64:50:0d:8c:86:11:fc:17:79:
39:12:0e:01:7e:56:6b:09:9d:a1:09:b8:8f:ac:3b:58:fe:cc:
1d:87:87:f3:77:49:67:10:23:8b:b8:52:e3:c0:a4:e2:1e:73:
eb:43:2a:d7:19:a6:9a:61:79:bc:30:ad:a9:f5:f8:40:9b:73:
dc:89:c6:c1:5e:fc:28:95:e0:1d:da:ef:fb:a0:73:36:9f:54:
ad:45:d2:5b:55:e8:ee:76:da:30:33:41:ae:df:a3:87:bd:30:
c2:ef:0c:7e:6e:b3:3e:67:6a:0b:e9:07:c7:e8:bd:55:a6:ac:
7c:c3:42:3c:69:91:dc:7f:a7:01:ac:bf:b4:c9:53:87:c3:12:
c8:3e:4f:eb:a5:4a:1f:8c:c9:2c:a7:1a:ce:ef:2a:bb:03:2f:
e4:a2:5a:ea:5e:8d:e3:3b:45:cd:8c:a2:43:8a:5d:e3:8a:5e:
ec:d2:45:e7:f5:ae:c5:6f:9f:fb:08:0b:56:7d:9d:de:2a:9e:
b9:b9:62:84:1c:9d:97:56:ef:e8:4e:2d:2c:95:ce:2d:d6:42:
60:87:19:ab:48:e3:60:72:fe:1e:6c:6b:ac:17:be:84:b9:a8:
1c:e5:23:f4:2a:5a:97:16:e3:b2:16:73:3c:78:65:3a:61:dc:
6e:51:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org