Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS5065.roa
File: AS5065.roa (raw, json)
Hash identifier: 5MJ0UPZBRAYu7KN8QDmJcBst67jE1ydKWdTZPbdsWrc=
Subject key identifier: DA:FB:C4:5F:E2:EA:92:F6:3B:74:59:BB:D3:20:2F:23:CE:13:E1:B7
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2879DA3F4D4D1FF1FE3C72E3DA6C8C5A103449A0
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS5065.roa
Signing time: Sun 18 Feb 2024 05:52:41 +0000
ROA not before: Sun 18 Feb 2024 05:47:41 +0000
ROA not after: Sun 16 Feb 2025 05:52:41 +0000
asID: 5065
IP address blocks: 141.11.130.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:79:da:3f:4d:4d:1f:f1:fe:3c:72:e3:da:6c:8c:5a:10:34:49:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Feb 18 05:47:41 2024 GMT
Not After : Feb 16 05:52:41 2025 GMT
Subject: CN=DAFBC45FE2EA92F63B7459BBD3202F23CE13E1B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:a9:1f:c9:13:21:b2:c6:9b:bf:fc:9b:da:
aa:db:82:82:52:6c:9f:88:2d:fd:1b:7d:d6:91:04:
45:44:3c:80:21:70:98:dc:c4:b5:07:3f:46:70:71:
49:04:c3:41:25:6a:ee:fd:2b:1d:08:e0:9d:e7:c8:
92:7f:e7:d2:8c:d4:00:a3:b6:49:3e:7a:3a:65:98:
60:2f:b2:30:62:7f:e5:d3:3c:b0:65:77:2b:57:5e:
7b:21:28:09:37:de:23:09:39:15:9d:7e:b2:e8:6d:
f5:dc:0a:6e:53:6c:77:d4:bf:d3:db:c5:79:51:35:
ca:3e:94:3c:68:64:c4:d9:a5:14:61:b4:bc:05:9a:
d7:66:29:8b:fb:2c:93:28:62:34:16:b5:48:85:14:
70:89:e8:b9:dd:17:b3:5b:2d:c2:f9:72:0e:27:d7:
54:ca:0b:20:a8:f1:b9:0e:1d:69:1e:5d:c5:f0:36:
15:3a:74:31:58:1b:5b:7f:da:48:11:61:00:68:42:
0b:4c:ad:aa:ec:e1:9f:66:74:0b:d9:e7:f3:8f:ba:
02:b8:1b:5b:dc:6f:59:55:14:fd:4f:20:ec:76:98:
57:8f:05:dc:4d:28:c8:27:f2:bf:27:0c:bf:5a:d6:
a1:b3:ec:6d:b4:30:ff:1d:05:f7:2c:24:54:32:a7:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FB:C4:5F:E2:EA:92:F6:3B:74:59:BB:D3:20:2F:23:CE:13:E1:B7
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS5065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.130.0/23
Signature Algorithm: sha256WithRSAEncryption
45:3a:80:48:69:ce:38:4b:97:45:22:7b:ce:bc:b2:e1:5b:47:
c9:fb:82:a3:6e:1a:52:c5:1f:6f:e9:c8:cd:4e:74:a2:b5:e5:
f1:cb:cb:78:67:0e:c4:8a:45:d6:e0:71:7b:fa:06:96:65:b0:
8e:46:b7:1c:b5:48:bc:10:c3:28:9a:f4:68:64:af:c2:3a:3e:
a8:2a:f9:3c:37:93:4b:7d:3b:17:3d:30:80:e5:bc:bc:3d:bb:
d8:f6:e1:98:ea:a8:82:56:b3:75:27:2a:24:58:bc:8b:a8:7f:
82:ac:26:5a:46:03:36:9f:6a:40:f4:19:b1:60:53:de:a8:ba:
75:17:c4:70:6e:d7:c2:b1:c1:6d:62:bd:4a:31:95:96:e5:65:
7d:db:ce:0a:48:60:ec:ff:7c:26:9d:ce:69:39:f7:44:ff:35:
58:b5:de:31:da:f2:6e:1f:b5:87:3f:f4:2d:04:20:3b:3e:df:
2e:40:68:6a:8b:b1:71:26:d8:8c:40:f0:4b:23:cd:16:18:6b:
1b:aa:bd:b8:ca:77:d0:49:13:6b:b0:9c:7d:47:64:bb:d8:e3:
74:f1:96:39:85:a8:d8:3e:5a:22:e6:d5:b4:cb:9f:57:ae:f6:
dd:ff:58:21:10:37:d6:ae:16:56:9c:10:9e:63:97:40:40:55:
dc:cc:5e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 02:10:31 2024 by rpki-client on console-ams.rpki-client.org