Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS57935.roa
File: AS57935.roa (raw, json)
Hash identifier: 5+dh55dGCOThl/hWn/Zz0iKPYsvSgQMu0wXBlVO2GrA=
Subject key identifier: EF:68:75:CF:84:4B:66:26:48:48:63:04:98:28:E4:18:EC:95:19:EA
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 37AF60296A04A042713F8B60BBAAF776D9EF14F0
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS57935.roa
Signing time: Fri 03 Jan 2025 13:53:51 +0000
ROA not before: Fri 03 Jan 2025 13:48:51 +0000
ROA not after: Fri 02 Jan 2026 13:53:51 +0000
asID: 57935
IP address blocks: 141.11.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:af:60:29:6a:04:a0:42:71:3f:8b:60:bb:aa:f7:76:d9:ef:14:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 3 13:48:51 2025 GMT
Not After : Jan 2 13:53:51 2026 GMT
Subject: CN=EF6875CF844B6626484863049828E418EC9519EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:34:52:8c:b3:c3:6e:01:1f:88:c8:f9:2c:
6e:e2:82:5a:93:1d:50:19:ef:a2:b7:06:64:6c:85:
41:e3:1b:46:f9:75:fc:df:b8:e1:f5:2b:fe:35:c1:
1b:be:55:2e:58:26:df:bb:aa:fe:20:3f:ac:20:49:
17:22:4c:e4:bb:be:3e:f0:e9:1e:c5:54:25:59:c8:
85:ed:85:8f:58:a5:42:1f:b2:e4:ca:68:61:84:9a:
2f:fb:a7:6b:03:6c:f8:4b:89:8f:a8:93:e0:34:f3:
17:95:04:d7:e2:ec:fe:d3:7e:48:8e:85:47:81:32:
6d:7d:73:2f:ec:bf:44:19:14:48:35:9f:6a:5e:f4:
56:d4:07:7e:37:c4:bd:a1:b7:74:e6:74:fb:91:aa:
a1:32:26:4f:cc:ab:ef:96:11:b3:fa:01:29:86:a7:
d7:19:bb:3d:b9:6a:16:2b:f2:a3:44:15:01:fe:bc:
30:62:f6:18:36:c8:71:28:97:60:43:06:b7:26:60:
ab:07:bb:b0:4a:9b:35:b6:58:87:95:ea:7a:b9:a2:
66:f5:2e:60:d9:76:81:be:67:4c:99:7c:d2:78:ca:
49:d2:2f:0f:37:c8:5b:f6:01:0c:56:1b:9d:87:17:
d5:e1:f4:0e:d7:f9:ff:cb:5d:3b:33:71:39:86:0d:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:68:75:CF:84:4B:66:26:48:48:63:04:98:28:E4:18:EC:95:19:EA
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS57935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.120.0/24
Signature Algorithm: sha256WithRSAEncryption
35:39:27:4d:54:a7:8e:54:e0:78:80:66:be:40:15:8a:d1:eb:
25:87:81:d0:16:0f:5c:ac:fe:28:b8:9a:25:3b:4d:8c:ca:fd:
c7:c1:7c:70:ba:52:3a:a3:ad:c1:d4:ed:18:3c:d4:ca:3c:29:
2a:c6:7f:5d:ee:85:7c:ea:a0:66:53:21:e4:5b:9f:c5:3e:06:
be:1b:97:fc:4e:5c:69:94:9d:39:28:b5:86:48:6d:ee:d0:0e:
15:b4:3a:60:51:c6:73:c3:8b:68:44:5c:d5:b2:e8:60:b0:c5:
6d:a3:2b:07:53:c2:3f:4a:94:5e:eb:a2:47:04:0b:bb:8b:e3:
12:9f:6b:72:15:e6:97:f3:ef:b8:87:a2:fa:8e:cf:52:2c:aa:
e4:86:03:c9:2d:e7:c1:ae:e2:c7:54:f3:ff:17:af:e2:fa:0b:
62:29:ec:0f:45:56:ea:4b:9a:b4:5c:c8:dc:56:a6:80:7c:53:
99:b3:d7:9c:e2:8a:5f:b0:d3:7a:2d:a7:a0:5a:79:d3:f7:90:
8d:6f:6b:91:4c:d9:46:8d:e2:f7:3b:8f:17:98:14:c4:42:c9:
13:1a:10:77:e1:b1:01:fc:28:71:3b:e5:e9:6e:90:dd:5c:10:
30:27:8f:53:d2:7c:fa:28:4f:69:f4:4c:35:96:5a:ea:9c:f7:
ff:1d:b2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:04 2025 by rpki-client