Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216022.roa
File: AS216022.roa (raw, json)
Hash identifier: J7d0Qc+tuuGsOiC+BndhyDm/kUtsNTdk1y3fBYzr6Tw=
Subject key identifier: 9E:64:1B:FA:B5:56:66:E4:B4:67:68:61:8B:C2:DD:6A:5B:80:32:11
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 19DEF3B5E52C3CD50E677DCA28C9EAE79A937668
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216022.roa
Signing time: Thu 22 Aug 2024 08:53:59 +0000
ROA not before: Thu 22 Aug 2024 08:48:59 +0000
ROA not after: Thu 21 Aug 2025 08:53:59 +0000
asID: 216022
IP address blocks: 92.113.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Sep 2024 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:de:f3:b5:e5:2c:3c:d5:0e:67:7d:ca:28:c9:ea:e7:9a:93:76:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 22 08:48:59 2024 GMT
Not After : Aug 21 08:53:59 2025 GMT
Subject: CN=9E641BFAB55666E4B46768618BC2DD6A5B803211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:92:98:10:04:04:59:12:56:53:27:ae:8b:
c9:c8:cd:a2:02:f1:7f:3d:11:83:4c:31:28:a5:d3:
fe:3d:09:5a:26:01:a7:3c:57:2c:06:b8:1f:dc:fc:
d3:ab:3e:bc:ed:b0:85:31:79:b6:fa:f7:df:4d:cd:
21:d6:05:cd:b2:dd:97:45:b3:af:17:b3:cf:4f:d7:
6a:5d:e1:b3:a2:6e:72:ef:b2:3c:10:05:ce:fa:18:
6c:90:5d:78:76:a9:f0:5f:aa:b1:ff:bb:87:dd:48:
4a:ff:a5:49:9f:0a:b9:3c:24:f8:f8:09:0c:9a:4f:
b7:74:f5:de:86:9e:2a:0a:37:c6:02:b6:0e:94:2f:
46:7c:f9:38:c7:c2:db:2d:ce:9d:a6:6b:22:d3:2b:
36:83:bb:e3:39:60:c3:26:47:1b:f5:c6:dc:42:68:
5c:97:ce:3f:c1:20:73:8c:78:4b:51:25:46:be:13:
b3:74:79:99:1e:2e:a1:cb:d7:f1:6f:5e:ca:65:82:
2a:4f:45:17:fa:7a:82:e2:4f:a4:a4:6c:3f:3f:27:
04:f8:de:de:04:ec:75:f1:98:15:f8:35:15:06:43:
b0:99:b8:59:92:58:83:19:14:18:0c:49:ef:9c:e1:
de:66:a8:7a:7a:29:f6:d8:70:4c:c4:8a:90:f8:02:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:64:1B:FA:B5:56:66:E4:B4:67:68:61:8B:C2:DD:6A:5B:80:32:11
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216022.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.41.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ac:84:28:06:ae:10:1a:e9:88:3d:08:94:f4:da:53:3a:e0:
26:a0:07:42:1d:dd:af:1c:7a:b8:b7:e8:0f:e7:71:ec:8f:2b:
18:73:21:20:a6:85:4a:4e:68:54:b3:88:1a:c1:e6:22:29:a1:
b4:07:7e:d5:9c:79:fd:57:52:76:18:9f:da:34:b9:0b:5b:1c:
db:e9:3c:e0:8e:78:69:e2:a2:2f:d7:4d:6e:5c:0f:f9:ed:c9:
28:72:5a:a3:25:9b:90:ea:27:69:d3:5a:6b:eb:82:9d:e0:44:
54:c4:77:fa:47:1e:b8:34:10:c7:89:f2:47:02:a0:54:b5:95:
b7:cb:c5:42:58:02:2d:e2:1a:b7:cf:2b:41:fa:1c:bc:7a:fd:
2c:9e:4a:67:0e:e8:eb:55:da:d6:20:29:ce:32:fc:ab:f3:78:
67:0d:27:48:a5:d1:34:90:8e:d3:0e:f9:9a:80:5f:6e:51:2a:
da:83:8f:4d:85:79:a1:89:b8:8b:eb:70:d2:d3:d2:0c:77:a2:
99:77:77:5e:b0:1f:96:74:0b:cf:18:6d:4b:37:bb:b0:fe:90:
7d:7d:f1:f8:57:45:94:0c:e2:15:68:a5:6d:d9:cc:f4:c2:c9:
c9:89:e3:fe:87:9f:e4:99:e4:6c:ff:9a:d8:f9:27:04:39:0a:
1f:e2:cd:48
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 22 02:52:41 2024 by rpki-client on console-fra.rpki-client.org