Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214560.roa
File: AS214560.roa (raw, json)
Hash identifier: MPd1SLATHp+Py5jgf11f9SRmEilXhDp0Wm10/JXbnVk=
Subject key identifier: 03:60:EB:DE:A7:AC:FF:F2:B0:D6:6C:AD:DD:6C:E6:FB:24:58:C8:DB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0A4849346D4FB6E4EB42E9E07974A8B74BE81D10
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214560.roa
Signing time: Mon 26 Aug 2024 14:31:43 +0000
ROA not before: Mon 26 Aug 2024 14:26:43 +0000
ROA not after: Mon 25 Aug 2025 14:31:43 +0000
asID: 214560
IP address blocks: 92.112.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 00:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:48:49:34:6d:4f:b6:e4:eb:42:e9:e0:79:74:a8:b7:4b:e8:1d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 26 14:26:43 2024 GMT
Not After : Aug 25 14:31:43 2025 GMT
Subject: CN=0360EBDEA7ACFFF2B0D66CADDD6CE6FB2458C8DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b7:09:fe:30:e1:01:89:1c:12:eb:fe:8d:6a:
16:fb:ff:74:c7:ab:a7:b5:06:79:40:65:a4:d5:af:
55:79:b8:6a:b1:92:14:76:2c:da:a4:8b:51:ad:d9:
a7:c2:1b:01:8a:38:d3:97:5d:aa:07:6a:88:2d:3b:
14:36:07:cc:99:dd:3a:9d:65:d7:2a:3f:11:a3:bb:
be:20:49:34:a6:7b:2f:7c:d6:82:58:60:b4:a5:12:
42:c6:c5:68:31:62:b2:60:20:b2:c2:23:6a:1d:1e:
82:6e:c8:90:98:54:3d:2e:f9:7b:f5:d8:e1:25:42:
cc:d9:6d:20:72:84:16:dd:47:76:b9:fc:86:e0:fc:
8d:3c:c9:3d:7b:35:75:17:cc:54:76:76:3b:02:10:
13:7c:b1:4f:7f:f8:28:47:04:47:11:c4:fb:19:a0:
6d:f4:85:d3:a8:82:f9:0a:4a:28:58:b5:09:86:82:
64:b0:ca:66:76:7d:92:a4:50:d5:76:84:0c:4e:12:
56:8f:2d:84:bd:57:d7:8d:7e:f2:b9:f4:b7:5d:3a:
af:e4:71:89:78:6e:af:4e:b8:00:fc:71:ca:5b:25:
a0:b7:32:f6:8a:d5:3f:c6:d9:e1:a3:3e:31:cf:77:
b5:fd:e0:af:50:c2:cf:06:0b:d8:69:18:14:18:1d:
4b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:60:EB:DE:A7:AC:FF:F2:B0:D6:6C:AD:DD:6C:E6:FB:24:58:C8:DB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214560.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.92.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a1:89:34:21:76:fa:a6:a6:6c:1b:7c:ed:ba:d4:33:a6:c7:
65:7d:0e:5d:a8:76:84:43:1c:74:bb:e6:54:e7:17:7c:13:9c:
ca:25:07:e0:f4:6f:c3:9d:fe:8e:f9:51:54:60:f4:3d:77:b5:
50:f2:f3:84:10:73:59:2b:f9:dc:63:39:18:90:04:ef:e9:ae:
d8:b1:05:80:cd:b6:80:6f:cb:08:fc:b7:4b:17:d1:83:34:87:
2b:e3:cb:e4:02:af:03:7c:16:11:38:de:41:04:72:c1:b0:89:
3a:a1:55:74:b3:02:4f:5f:06:57:21:bb:be:1d:10:18:c3:9a:
65:39:d6:cb:47:a6:8e:b8:7c:f6:f7:29:f4:a3:1c:5e:c9:2c:
3f:5f:32:1c:71:18:49:a1:b8:60:fe:6e:3c:e6:fe:a0:e9:53:
08:07:5a:dc:d6:fb:e2:08:78:b5:23:24:8f:dd:ba:1f:70:2d:
8a:bb:26:f0:b0:d6:45:83:ff:ef:3c:ed:b6:a5:e8:ec:82:24:
46:97:97:f4:01:c9:cc:f1:d2:a2:47:a9:79:c3:bc:27:40:20:
96:c2:f7:aa:69:f8:3d:36:cf:ff:aa:0d:74:7b:2d:6a:c7:29:
2e:2f:36:b7:a5:a8:6e:a6:90:b8:f4:f5:8b:57:e4:e8:cc:64:
20:e2:9f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:44 2025 by rpki-client