Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS50225.roa
File: AS50225.roa (raw, json)
Hash identifier: Nj09pH2PJlXYnnOeLFGhxMOkqjLbyxr8IauY39h2f18=
Subject key identifier: 4F:CF:D1:0C:13:AD:AD:5D:EF:5F:97:F0:04:46:30:15:51:A2:1D:CB
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1609A0268D90E06775C6A970C13C493231142665
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS50225.roa
Signing time: Tue 27 Dec 2022 14:44:38 +0000
ROA not before: Tue 27 Dec 2022 14:39:38 +0000
ROA not after: Tue 26 Dec 2023 14:44:38 +0000
asID: 50225
IP address blocks: 141.11.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:09:a0:26:8d:90:e0:67:75:c6:a9:70:c1:3c:49:32:31:14:26:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Dec 27 14:39:38 2022 GMT
Not After : Dec 26 14:44:38 2023 GMT
Subject: CN=4FCFD10C13ADAD5DEF5F97F00446301551A21DCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:f5:84:4c:9f:35:be:a2:30:bc:77:71:82:
65:67:06:8b:5e:f2:3a:76:ba:2b:ed:86:1a:03:71:
32:b0:a4:69:36:9e:b5:a5:0e:b1:e7:50:fb:a1:1e:
f4:42:28:40:93:97:3b:0c:ae:9a:c5:61:44:c2:9b:
89:52:9b:86:8a:33:d1:ec:4a:5d:06:19:e0:85:3f:
c8:b2:b4:53:ed:7e:fb:55:da:de:a4:88:16:ba:25:
14:79:51:f5:36:10:9c:a5:70:7a:8c:50:46:58:69:
5b:ee:e2:29:3d:bf:3d:80:68:95:fe:1c:e6:83:d8:
e7:31:7e:b8:fd:1f:a1:b1:87:fe:de:51:20:c2:95:
d9:3c:c6:0d:43:d8:f6:89:50:bf:70:ef:f5:4c:32:
2c:27:ad:00:bd:be:3b:6d:6b:f1:2f:9d:d0:21:c7:
69:5a:d0:10:15:ec:8a:d7:7d:f0:e2:96:d5:1b:d9:
cc:80:80:d9:6b:4b:75:47:de:d3:64:3f:68:63:a0:
76:de:3a:97:40:3b:a9:34:43:cb:b5:b1:51:52:8e:
cc:69:ac:be:6b:92:d6:44:d3:ea:24:23:a4:3d:1d:
01:4f:fb:0e:96:9b:b5:db:d2:b3:50:0e:35:a2:e3:
1a:e0:c3:4b:79:6b:d5:a2:fb:6a:90:93:7c:43:fd:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CF:D1:0C:13:AD:AD:5D:EF:5F:97:F0:04:46:30:15:51:A2:1D:CB
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS50225.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:07:07:37:51:7b:bc:b7:c3:36:c0:51:50:13:3c:90:57:7b:
cd:76:3f:2d:dc:0f:12:b9:91:5f:0b:fd:f1:c9:37:2a:93:23:
4d:25:e2:05:3c:29:56:bd:74:8c:cc:13:ff:33:1d:c0:af:b8:
d1:5d:b2:68:43:10:37:48:0f:9a:00:55:a5:93:ce:e1:c9:99:
2a:e3:8b:94:c0:bb:a4:72:40:8c:53:0a:9c:ed:d4:8d:f0:a9:
c8:a1:33:f2:cd:d2:0f:e6:2c:0a:6c:49:43:79:36:aa:18:5b:
8f:b8:0e:e7:a9:23:4e:70:f9:bd:8e:af:c0:0b:c5:78:bf:bd:
a0:2d:37:38:aa:db:31:7c:14:fd:92:92:d1:45:61:ba:db:be:
8d:24:3e:af:88:f6:bf:2b:df:3c:52:2f:3e:61:04:0f:74:01:
67:29:27:06:fe:e2:c8:39:b0:e7:3f:d9:ca:1d:88:0e:ce:35:
c6:f3:97:b1:db:28:6a:13:57:2e:93:19:c1:72:f7:0b:c7:29:
bf:98:be:e5:97:b7:a4:a5:b8:cc:3f:32:d3:12:4c:b1:8f:69:
31:a6:94:56:e5:0f:14:a7:ff:74:7b:9d:e3:71:56:8b:40:17:
4a:2c:66:a8:11:d8:bd:3d:01:88:a5:39:6b:93:b7:68:b2:86:
f7:da:85:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org