Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS57152.roa
File: AS57152.roa (raw, json)
Hash identifier: l0wWdNssEaKBWqlzvCTcZAKvo2RIBW5n1JAcEzTh11o=
Subject key identifier: A1:0D:51:43:06:60:4F:17:BF:C9:2D:29:E5:7E:44:76:C9:07:59:79
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 055678833E00772B7FD950B98AA589F061C24032
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS57152.roa
Signing time: Sun 05 Mar 2023 12:28:49 +0000
ROA not before: Sun 05 Mar 2023 12:23:49 +0000
ROA not after: Sun 03 Mar 2024 12:28:49 +0000
asID: 57152
IP address blocks: 141.11.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:56:78:83:3e:00:77:2b:7f:d9:50:b9:8a:a5:89:f0:61:c2:40:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 5 12:23:49 2023 GMT
Not After : Mar 3 12:28:49 2024 GMT
Subject: CN=A10D514306604F17BFC92D29E57E4476C9075979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:32:ec:73:64:de:63:48:5f:78:00:db:ad:
e4:d2:30:17:8f:58:fd:ba:90:15:6c:11:52:9a:a0:
84:d7:4d:05:75:0a:a6:8a:b6:18:55:9e:ec:61:de:
ff:e9:ee:95:b8:0d:c2:fe:34:d2:b3:fd:0e:a4:64:
83:1c:7a:69:86:9b:03:b3:94:53:e2:20:fd:8b:40:
68:f4:10:71:6b:cc:63:9d:a1:47:26:7c:43:aa:da:
11:e1:ca:af:b7:77:e9:f9:69:a5:d2:48:c8:4d:9c:
80:e7:49:e1:ba:12:dc:22:fd:96:9a:fc:9e:7f:36:
34:3f:86:68:bb:39:3b:cd:01:a2:a4:21:4b:d8:67:
78:69:4f:9b:14:3e:a2:41:a6:06:10:18:91:3c:6c:
28:59:2b:25:a2:a4:9b:c5:ba:25:a1:90:e7:94:79:
0f:b1:22:96:f8:77:08:db:3e:66:6a:d7:0d:7d:96:
be:ab:9d:ed:f0:c1:cc:dc:4b:f1:3a:41:3b:41:9b:
97:7d:3a:71:01:69:f7:b8:10:b7:70:77:e6:93:be:
3d:30:43:06:27:b9:84:50:83:b1:99:72:84:1d:34:
45:d6:5e:bb:f1:77:7e:48:6b:88:37:a1:9a:e2:02:
23:0b:c8:7f:f8:af:20:b0:fb:4b:e2:57:b3:5c:ce:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0D:51:43:06:60:4F:17:BF:C9:2D:29:E5:7E:44:76:C9:07:59:79
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS57152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.109.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:9f:5b:8f:25:d8:fb:fc:83:64:08:f6:74:3a:66:f1:c0:e9:
f7:1f:71:5b:fb:f5:2a:4b:9a:e7:5d:96:3e:3a:ce:91:61:13:
2c:c1:da:d3:46:3f:f2:1c:da:cd:77:b6:eb:9a:a9:e7:44:77:
10:f3:ad:ff:6b:b4:2b:2a:27:66:50:6d:ed:f3:8c:1b:f3:46:
0d:b6:02:23:c1:e8:ed:b4:e6:7a:d5:72:ad:97:be:1a:27:44:
e8:25:ca:2a:fa:62:53:6e:87:2c:ff:f7:ab:74:2b:c4:94:aa:
ee:b9:e5:bb:62:0b:e0:fe:13:47:1f:2c:e7:8f:05:e5:be:80:
3b:94:bb:ac:47:ba:35:c4:ed:40:28:2f:91:ad:53:b9:8f:e2:
3a:97:a8:aa:74:10:40:16:49:43:d8:44:5c:8c:16:04:33:35:
ae:ce:87:22:50:cd:56:7d:c9:4a:88:bd:62:1a:82:7a:91:c3:
9e:fc:a3:c4:d6:85:3a:be:46:38:71:c1:a7:66:be:f2:f7:a7:
d2:24:84:48:03:d6:b6:87:63:fe:33:e1:7c:63:15:e4:9a:b3:
6d:39:30:97:ee:8e:e6:f0:e0:6a:b7:46:67:4e:1e:7b:f8:06:
03:a1:ab:77:62:82:ce:35:3a:61:bb:f4:b2:ea:1e:88:99:89:
fb:f7:48:05
-----BEGIN CERTIFICATE-----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Generated at Wed Dec 6 10:41:54 2023 by rpki-client on console-ams.rpki-client.org