Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: Zic+cjkw5CmNtVv8ixkDlCPhLowxPixqTPBCzSsqclU=
Subject key identifier: F3:EF:D1:A8:73:FE:4E:F7:F0:29:17:04:A5:0D:BF:64:92:BB:C0:90
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0467FE2086056B82CC7114C00A0610893D838C6D
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS6079.roa
Signing time: Fri 23 Jun 2023 15:32:55 +0000
ROA not before: Fri 23 Jun 2023 15:27:55 +0000
ROA not after: Fri 21 Jun 2024 15:32:55 +0000
asID: 6079
IP address blocks: 141.11.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:67:fe:20:86:05:6b:82:cc:71:14:c0:0a:06:10:89:3d:83:8c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 23 15:27:55 2023 GMT
Not After : Jun 21 15:32:55 2024 GMT
Subject: CN=F3EFD1A873FE4EF7F0291704A50DBF6492BBC090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:c9:b1:c6:8a:db:1a:67:dc:71:1a:9e:20:
b1:37:38:d3:ab:a1:32:09:0d:30:b1:9d:6c:20:3b:
0e:0d:54:0c:06:a6:98:49:ea:c1:f2:fb:a2:73:84:
16:dc:66:55:53:92:1c:77:59:91:19:5b:f4:02:e8:
48:1b:72:83:a2:15:3a:fe:4d:e3:e0:03:30:68:ed:
47:6e:42:6d:52:16:4d:41:c9:58:f3:36:0a:f2:0c:
08:06:49:04:f0:1a:fc:9e:b6:2c:8a:17:05:17:f3:
bc:74:1c:68:19:be:3a:d0:00:70:f2:ec:31:8d:fb:
37:98:52:3d:25:1f:d8:00:9d:4d:b1:db:05:a5:ba:
be:e8:cc:82:2f:20:ef:ed:93:f9:36:73:2e:ee:f7:
b6:8b:a2:cf:cf:29:64:4f:15:54:65:0b:96:c6:bf:
31:f7:f7:62:3c:95:25:4f:56:49:38:82:8a:9d:21:
60:2b:9f:7f:9d:89:6d:d3:54:ea:24:df:4c:54:cc:
17:2e:bb:68:bc:b8:dd:03:48:bf:64:c5:df:51:d1:
48:13:ab:87:28:af:42:ed:0f:99:25:6a:fe:aa:19:
36:07:79:7b:25:14:56:d4:6c:e8:12:38:05:32:46:
79:af:e6:af:35:18:63:04:7f:3e:c8:04:64:de:71:
45:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EF:D1:A8:73:FE:4E:F7:F0:29:17:04:A5:0D:BF:64:92:BB:C0:90
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
Signature Algorithm: sha256WithRSAEncryption
93:4d:02:68:0a:01:b5:76:e7:58:3d:b4:bc:1e:8b:f5:9d:af:
1f:58:62:b4:e6:51:01:d9:73:c3:19:93:f3:13:93:41:9b:bd:
83:b3:c7:a2:16:55:bd:2a:a8:a8:32:39:9e:a4:34:6a:fc:78:
fc:3a:07:9d:d9:c8:4e:63:19:09:ba:2f:6c:92:0c:93:17:02:
f1:4f:28:19:ea:b5:25:77:29:88:a7:4b:4a:72:6a:38:9f:3c:
d7:87:7e:51:79:0c:7e:7f:00:44:2c:02:dd:82:a1:8d:1e:41:
3a:2a:89:3b:2f:a5:24:35:c0:c3:8d:1f:50:93:84:5f:36:b6:
9e:9d:79:5c:e3:a1:59:4e:cc:58:53:30:f7:e0:e7:f6:c0:03:
5f:2d:35:f2:5d:d7:50:a2:7b:83:4c:ae:4f:44:af:a5:c6:29:
a8:1b:c6:5d:c1:fd:66:77:5d:5c:13:c6:9b:24:3c:d7:27:c4:
f4:e2:01:61:f1:8e:dd:73:66:b1:8d:50:7f:f0:1d:6c:b0:9a:
d3:c6:5d:b5:e6:ad:72:b2:95:78:34:f4:e7:cf:b7:6f:3f:32:
f2:7c:3d:c1:c4:2f:76:96:1e:e6:50:8a:47:60:f1:f0:3e:79:
cf:50:a8:43:6e:2c:a3:28:bd:de:14:d1:ce:bc:08:47:5b:b4:
fb:93:7e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 14:01:29 2023 by rpki-client on console-ams.rpki-client.org