Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS210935.roa
File: AS210935.roa (raw, json)
Hash identifier: FuwLb5ZSkKQD185g/afHTqxILQJjAvekKI54DNRWs4Q=
Subject key identifier: 97:C4:54:4D:7E:0E:2D:8D:F1:BA:84:69:82:38:2D:00:B1:48:66:23
Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial: 375E5EB4EBF7A57CA348E89F07AFD75796E4A727
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS210935.roa
Signing time: Tue 19 Sep 2023 02:14:56 +0000
ROA not before: Tue 19 Sep 2023 02:09:56 +0000
ROA not after: Tue 17 Sep 2024 02:14:56 +0000
asID: 210935
IP address blocks: 2a07:54c4:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Jun 2024 17:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:5e:5e:b4:eb:f7:a5:7c:a3:48:e8:9f:07:af:d7:57:96:e4:a7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Validity
Not Before: Sep 19 02:09:56 2023 GMT
Not After : Sep 17 02:14:56 2024 GMT
Subject: CN=97C4544D7E0E2D8DF1BA846982382D00B1486623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:7e:93:b6:34:9b:4a:0a:1f:6e:0c:02:af:
eb:0f:3a:73:b9:2d:57:ed:77:8d:0b:cf:25:46:73:
5d:df:ec:c4:f3:ea:09:5f:d6:a8:22:29:3c:81:45:
5b:5c:a3:47:ec:71:85:f3:11:e8:3b:3b:79:50:c1:
71:f1:69:cd:9b:4a:5a:38:97:13:19:87:e8:c3:56:
d5:c7:7c:7f:86:1d:77:b6:ed:30:8e:21:80:c0:84:
0e:3d:1f:58:86:8c:9c:c6:40:ea:88:11:eb:63:4e:
3b:55:00:69:37:d2:65:91:bc:fe:e8:a9:97:70:b8:
f5:8b:5e:65:bc:57:aa:0f:bc:89:db:d7:13:c0:a0:
9d:c8:29:5a:a6:88:ec:b9:66:b2:4c:f2:d8:ac:30:
09:f6:15:95:67:23:e8:01:cf:1a:13:94:7f:fb:ea:
07:c2:76:43:6d:9b:18:60:11:e7:c2:60:9c:87:6e:
61:a1:3d:cc:4f:70:13:1e:fc:1e:99:9d:68:ff:d9:
fb:b9:0c:74:72:9d:90:93:64:9e:6e:f8:20:cc:d7:
f6:b2:26:76:dc:c6:90:85:6d:4e:eb:aa:8d:b3:d3:
63:73:50:bf:01:6c:c6:c3:b8:49:52:ef:d6:8b:b9:
a7:f4:77:c0:73:08:5e:92:03:7c:23:0b:fb:ef:e9:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C4:54:4D:7E:0E:2D:8D:F1:BA:84:69:82:38:2D:00:B1:48:66:23
X509v3 Authority Key Identifier:
keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS210935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c4:1::/48
Signature Algorithm: sha256WithRSAEncryption
20:4d:6f:70:43:21:ce:37:43:ba:40:47:ec:1a:af:52:66:cd:
2a:6a:14:25:05:84:3a:a2:18:b1:96:ac:0c:c1:9d:c5:3b:6d:
94:40:22:29:d8:a3:7d:41:bf:d5:06:41:c7:51:da:df:42:80:
43:09:d3:39:1c:82:3a:87:7e:e4:63:43:8d:d6:2b:1d:4f:bd:
41:5d:7b:0c:ab:2c:55:42:4e:54:e8:e0:ec:d0:5f:65:56:e3:
88:ff:14:49:d8:f2:f2:d0:52:82:12:8a:97:12:09:cf:c8:d1:
d1:25:ed:de:21:e7:9e:fe:ec:71:43:8f:e1:be:c4:64:3e:7b:
2e:e4:4b:ae:db:11:27:d7:fa:91:e0:a8:3a:1c:83:63:2a:fe:
59:e9:9f:0c:06:51:69:e0:68:1d:dd:d6:6e:43:40:97:8f:81:
bf:bb:8e:78:b1:65:9b:57:98:39:b8:11:94:37:71:3d:54:1d:
1a:6d:6d:6e:3d:e3:4a:8d:82:27:b1:57:07:48:d1:88:3c:d3:
79:5c:09:f2:b9:65:07:b4:e3:8b:2c:86:b4:46:8f:82:6d:41:
93:d8:3a:66:d5:6e:83:77:2c:79:99:ff:4b:df:f9:46:e5:91:
a3:5e:ab:4f:f0:2a:37:f0:20:df:54:0e:50:50:aa:08:a9:31:
b6:2c:96:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 22:31:08 2024 by rpki-client on console-fra.rpki-client.org