Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7005.roa
File: AS7005.roa (raw, json)
Hash identifier: Qu2VtCEkzwc6dej6DsTMpzrLyzwUYNIikFtvyo0U+P4=
Subject key identifier: 78:13:69:42:E1:A8:3D:EE:14:DF:8C:5B:E8:1F:11:81:83:33:FF:E0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 23B82555610533CAD66CE25637D4832F3ABE96FF
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7005.roa
Signing time: Tue 10 Sep 2024 14:33:31 +0000
ROA not before: Tue 10 Sep 2024 14:28:31 +0000
ROA not after: Tue 09 Sep 2025 14:33:31 +0000
asID: 7005
IP address blocks: 92.113.200.0/24 maxlen: 24
92.113.201.0/24 maxlen: 24
92.113.202.0/24 maxlen: 24
92.113.203.0/24 maxlen: 24
92.113.204.0/24 maxlen: 24
92.113.205.0/24 maxlen: 24
92.113.206.0/24 maxlen: 24
92.113.207.0/24 maxlen: 24
92.113.208.0/24 maxlen: 24
92.113.209.0/24 maxlen: 24
92.113.210.0/24 maxlen: 24
92.113.211.0/24 maxlen: 24
92.113.212.0/24 maxlen: 24
92.113.213.0/24 maxlen: 24
92.113.214.0/24 maxlen: 24
92.113.215.0/24 maxlen: 24
92.113.216.0/24 maxlen: 24
92.113.217.0/24 maxlen: 24
92.113.218.0/24 maxlen: 24
92.113.219.0/24 maxlen: 24
92.113.220.0/24 maxlen: 24
92.113.221.0/24 maxlen: 24
92.113.222.0/24 maxlen: 24
92.113.224.0/24 maxlen: 24
92.113.225.0/24 maxlen: 24
92.113.226.0/24 maxlen: 24
92.113.227.0/24 maxlen: 24
92.113.228.0/24 maxlen: 24
92.113.229.0/24 maxlen: 24
92.113.230.0/24 maxlen: 24
92.113.247.0/24 maxlen: 24
92.113.248.0/24 maxlen: 24
92.113.249.0/24 maxlen: 24
92.113.250.0/24 maxlen: 24
92.113.251.0/24 maxlen: 24
92.113.252.0/24 maxlen: 24
92.113.253.0/24 maxlen: 24
92.113.254.0/24 maxlen: 24
92.113.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 07:25:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:b8:25:55:61:05:33:ca:d6:6c:e2:56:37:d4:83:2f:3a:be:96:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 10 14:28:31 2024 GMT
Not After : Sep 9 14:33:31 2025 GMT
Subject: CN=78136942E1A83DEE14DF8C5BE81F11818333FFE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:17:b0:e6:de:4b:35:ac:99:91:1f:34:99:
78:87:a8:f1:f0:cc:b3:12:a2:c0:3d:84:d1:fb:f6:
c0:55:b1:6f:f8:16:6b:2d:af:cf:42:c6:2e:1d:1b:
59:23:c2:93:3e:8a:b6:66:59:f3:2d:16:69:9c:06:
6a:4c:f9:9a:52:72:f2:f7:33:4e:77:39:78:d8:af:
5b:78:61:48:dc:1a:6d:a6:4e:eb:c5:bc:72:33:69:
68:d2:07:4c:3f:ce:5c:c7:5e:a3:93:11:06:55:31:
c0:ab:8a:5b:54:d0:e6:95:11:a6:96:31:bf:72:13:
fb:3d:ee:f1:90:e6:3f:65:8e:08:c9:00:3a:b0:0c:
c5:2e:1e:ae:d2:b2:1f:a6:3e:a9:ac:83:e7:dc:98:
68:5a:ac:1c:b8:5c:3e:8c:59:41:98:5f:2c:df:56:
2a:6c:7f:b5:3e:3d:f9:d5:7e:51:96:d4:2c:e5:b1:
a4:81:c6:d3:5e:80:0d:b1:d5:37:84:85:1c:a1:90:
c0:be:08:92:d1:4a:34:ac:dc:4b:cd:5a:9b:bb:8c:
9d:b0:4a:5f:33:86:23:0e:99:46:9e:4b:1d:62:27:
11:86:fd:18:f8:6c:4c:a8:7b:7e:2d:ca:f9:e0:bb:
f1:7c:19:75:55:11:df:3e:de:bb:5d:ee:ac:ed:c7:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:13:69:42:E1:A8:3D:EE:14:DF:8C:5B:E8:1F:11:81:83:33:FF:E0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7005.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.200.0-92.113.222.255
92.113.224.0-92.113.230.255
92.113.247.0-92.113.255.255
Signature Algorithm: sha256WithRSAEncryption
20:cd:de:4d:5e:8f:c3:2c:cc:e0:20:2d:a2:a3:43:08:34:f2:
e0:c4:47:b2:01:a5:13:63:41:b3:35:d7:fd:b6:06:8e:ad:29:
c7:ad:61:c1:3c:d3:ef:4f:b5:93:cb:de:2b:32:1f:32:76:e3:
32:2d:03:fa:1d:51:12:08:69:ab:d2:53:9e:90:3c:20:af:e7:
a6:f0:08:97:b2:c7:8d:35:f0:d8:43:f7:89:32:ea:c9:c2:2b:
a7:59:67:60:43:ce:8a:3d:0d:52:84:29:7d:0c:e2:18:29:f1:
70:43:83:8b:e3:90:63:d4:5a:6b:e0:47:ef:48:ad:64:fc:7b:
db:f4:70:40:d6:ca:50:ea:f7:82:12:25:26:ea:09:4c:8b:38:
a1:d5:9c:59:08:36:08:27:0b:61:ff:79:60:c7:d2:31:a7:32:
fe:26:d2:0b:32:27:b2:68:10:87:c2:71:51:8c:1c:f5:10:79:
1c:33:6d:f1:58:33:db:ac:e6:60:a8:2d:2f:12:42:bb:1c:ed:
8a:7e:1c:34:dc:14:29:39:b6:ab:72:1b:ac:b5:d2:2f:9d:c7:
fb:9a:22:de:c2:cc:07:5b:b7:20:a9:85:05:38:da:7c:90:a5:
55:2f:60:26:d9:49:ed:91:d5:91:a3:a5:c7:3a:3d:d3:16:1b:
8b:08:08:80
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 11 10:41:59 2024 by rpki-client on console-ams.rpki-client.org