Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS55154.roa
File: AS55154.roa (raw, json)
Hash identifier: VqvHFbJB5fGWA9xiMU4PwIzlRufSOtz62KqE6oLaa/Y=
Subject key identifier: 8F:8F:F9:3A:5E:7B:49:F6:7E:BE:26:9A:4E:DE:25:EF:BB:6A:D4:CC
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2AD218ED042C62E12F22BE25C1A0D9B7027DEAB1
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS55154.roa
Signing time: Tue 17 Jan 2023 17:44:48 +0000
ROA not before: Tue 17 Jan 2023 17:39:48 +0000
ROA not after: Tue 16 Jan 2024 17:44:48 +0000
asID: 55154
IP address blocks: 141.11.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d2:18:ed:04:2c:62:e1:2f:22:be:25:c1:a0:d9:b7:02:7d:ea:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 17 17:39:48 2023 GMT
Not After : Jan 16 17:44:48 2024 GMT
Subject: CN=8F8FF93A5E7B49F67EBE269A4EDE25EFBB6AD4CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:4c:41:1f:fb:b3:36:92:ed:6e:44:c4:ee:
15:2b:2e:b2:d1:59:49:eb:db:21:0e:54:59:f5:07:
c7:38:65:6a:f2:64:2e:2a:91:43:bd:8c:be:78:34:
c0:74:43:c7:eb:e7:90:5f:8f:b6:cd:44:06:f2:ac:
09:5f:6f:03:92:66:b5:82:12:9f:76:2d:6b:28:6d:
8b:08:16:2f:27:1e:16:7c:40:ae:21:0a:cc:ca:f6:
25:7b:72:3e:1d:43:6c:cd:1e:d4:17:ab:94:aa:f6:
bf:35:f1:f9:97:3d:2a:21:16:07:10:7e:d9:a7:ab:
7e:9e:33:9c:52:17:52:2c:8b:27:36:b1:e4:c3:65:
0a:b0:1d:a6:d9:90:66:83:fa:c1:97:b1:c2:28:15:
4a:37:47:95:9a:95:82:39:9e:32:9b:07:e5:3a:f8:
b4:d8:ab:a3:0e:a7:34:cf:26:e8:00:f0:03:62:79:
34:dd:5d:d9:5a:46:78:3a:ad:e6:08:b5:78:47:a1:
d5:37:ea:70:cf:3f:0f:a3:25:b4:10:a6:b3:a9:c3:
90:a9:78:0b:b0:88:93:60:0d:36:00:2f:22:f9:9c:
a7:3d:b9:e8:45:80:bb:65:61:b5:b4:ee:cd:1c:74:
a3:40:38:e4:25:eb:d2:cc:37:4f:0a:8a:8d:9b:2d:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8F:F9:3A:5E:7B:49:F6:7E:BE:26:9A:4E:DE:25:EF:BB:6A:D4:CC
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS55154.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.241.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:db:11:90:9f:a4:65:35:a3:30:cf:4f:41:91:d8:b0:68:86:
4a:00:c8:96:0f:f3:c2:d3:ce:19:63:55:5e:7f:22:dc:f9:e8:
c9:23:16:32:b1:c4:3a:53:4b:7a:85:91:c1:78:e4:dc:e4:0e:
a9:d3:1a:f0:43:e0:0b:ed:bc:cb:22:03:36:19:e8:49:50:17:
0b:46:f9:c5:ef:5e:ac:87:cf:59:b7:41:5c:9e:d5:45:da:ba:
5f:a4:03:a6:99:07:75:17:24:94:8e:00:9b:d6:ee:b8:b0:8b:
13:e1:1c:cf:52:f9:6c:fd:ee:b5:48:8c:8e:06:7a:d4:6a:b9:
cd:f6:3f:4a:d1:b4:4d:9a:95:f4:76:d7:bf:87:5e:c7:fd:42:
a2:29:ec:7b:9b:39:5b:b3:0b:6e:8f:22:08:45:10:bb:38:53:
f6:12:a8:35:cf:28:c6:e0:39:f0:94:8f:ca:ea:d5:12:f0:0a:
6b:ad:7e:a3:cf:82:be:a0:48:5f:de:58:05:84:bc:57:37:00:
1f:a7:97:38:4b:6b:b7:64:d8:36:cb:69:3f:58:34:e6:f4:e7:
1e:7f:ab:58:b9:97:6d:60:10:0a:f1:cf:17:37:12:b3:96:ff:
55:5d:d9:23:ac:65:72:89:25:f3:f8:c1:d2:8a:17:88:aa:cc:
b0:83:02:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org