Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213730.roa
File: AS213730.roa (raw, json)
Hash identifier: RUl2T+F+mXqOTVrAWdZkfmub2yKv/SU39q40VLITHO4=
Subject key identifier: 3A:94:D6:15:14:D0:28:F7:56:FF:09:75:48:01:E6:89:04:4C:23:11
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5C11BBFBA2D2A4DCAF3198CE79976F6D2DE236F8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213730.roa
Signing time: Mon 30 Dec 2024 22:14:41 +0000
ROA not before: Mon 30 Dec 2024 22:09:41 +0000
ROA not after: Mon 29 Dec 2025 22:14:41 +0000
asID: 213730
IP address blocks: 46.203.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 02:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:11:bb:fb:a2:d2:a4:dc:af:31:98:ce:79:97:6f:6d:2d:e2:36:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Dec 30 22:09:41 2024 GMT
Not After : Dec 29 22:14:41 2025 GMT
Subject: CN=3A94D61514D028F756FF09754801E689044C2311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:27:75:4c:99:8f:e3:bd:a8:a4:05:d4:62:
3c:a1:f4:1e:f5:1e:e9:6d:61:e9:c5:34:11:35:25:
88:73:ab:18:d5:1f:d9:06:63:a2:bd:b8:80:10:08:
a7:98:50:5b:c1:72:2b:04:cc:0e:51:42:1a:ec:38:
2d:d0:81:8b:cc:56:4b:a3:26:39:b9:f2:97:69:55:
9c:7f:16:b0:a9:de:50:51:62:2d:c0:bd:19:64:c3:
1d:f7:1c:34:29:81:17:11:86:a7:dc:a1:a6:c6:bf:
ad:7c:aa:54:94:d6:76:57:8c:a4:08:a0:78:20:03:
3e:18:d9:ff:a2:36:8a:63:59:9e:cc:2e:e5:32:fd:
9b:c1:06:7d:c2:75:a7:67:5d:67:22:31:bc:d7:8d:
a7:cb:fb:57:27:87:3a:04:38:12:85:bd:48:30:d6:
a1:f2:ed:95:da:36:22:18:d0:46:89:05:50:3b:c7:
fd:fb:47:4b:76:85:c3:3b:e2:ab:31:28:ab:c4:85:
0d:c8:b6:a8:5c:7f:8d:e9:75:db:6a:a7:95:fd:64:
58:59:ce:ca:14:61:6e:d6:e8:6d:f5:ac:4d:2b:d3:
37:0a:20:d5:af:7c:4b:99:21:82:1a:00:51:fa:cf:
32:64:07:56:66:d1:ac:6e:34:39:50:e4:65:05:c2:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:94:D6:15:14:D0:28:F7:56:FF:09:75:48:01:E6:89:04:4C:23:11
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.248.0/24
Signature Algorithm: sha256WithRSAEncryption
13:92:2e:57:d7:95:ed:b8:f7:2f:2e:28:91:46:c8:8f:69:eb:
8f:64:60:8b:34:f6:52:1e:d2:37:83:d3:23:0b:45:9f:1e:44:
35:3d:b3:0e:82:0d:d4:df:0d:47:59:46:8f:32:d1:36:84:f9:
48:97:9d:65:0b:01:ab:59:44:8b:d2:09:8a:83:56:71:86:2d:
e9:85:3d:3e:d5:2d:f2:49:4b:37:4a:cc:7c:68:a8:da:13:64:
c8:47:76:e7:b3:89:90:49:05:c3:c6:6d:ee:fe:75:c3:be:e9:
30:64:29:1c:72:7c:d2:25:a0:1c:db:41:b3:7d:c4:cb:0a:95:
75:b7:4e:c2:20:68:31:ef:63:46:8d:a0:cc:c0:84:d6:4d:a0:
f9:1c:7a:11:91:bd:c5:63:59:00:f4:7b:69:94:15:51:c8:f2:
ae:7e:55:8d:2d:2b:f5:0d:94:f2:2a:35:a2:44:d5:48:f4:7e:
71:c3:b0:72:47:92:ee:0f:56:11:16:c4:6c:bb:66:fc:cd:44:
32:41:b5:ba:99:16:95:8b:09:bf:1a:1f:39:b0:1d:72:4c:61:
93:ec:ce:5e:ed:fa:f1:46:67:57:a4:b5:aa:dd:94:a1:d0:82:
4d:61:6b:42:9a:d6:d9:42:bd:5c:3c:c1:9e:ef:97:1b:c8:36:
e9:cc:ba:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:51:33 2025 by rpki-client