Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197842.roa
File: AS197842.roa (raw, json)
Hash identifier: AXZSd/TuN+rX0o6zqu8YdMeRJmdxgTnEbGw5Xb3T118=
Subject key identifier: CE:A6:94:99:2F:94:1E:07:F1:62:81:CD:24:3A:AF:8F:DA:7D:69:D3
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 672718128DDBDB9F23A2D42B42102479BD2CEB31
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197842.roa
Signing time: Thu 20 Jul 2023 17:00:06 +0000
ROA not before: Thu 20 Jul 2023 16:55:06 +0000
ROA not after: Thu 18 Jul 2024 17:00:06 +0000
asID: 197842
IP address blocks: 181.214.250.0/24 maxlen: 24
193.7.203.0/24 maxlen: 24
213.109.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:27:18:12:8d:db:db:9f:23:a2:d4:2b:42:10:24:79:bd:2c:eb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 20 16:55:06 2023 GMT
Not After : Jul 18 17:00:06 2024 GMT
Subject: CN=CEA694992F941E07F16281CD243AAF8FDA7D69D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:34:cf:83:b8:9e:b7:f0:87:db:12:bf:ce:
84:52:f7:95:aa:ff:88:45:43:7e:82:45:a6:a7:82:
9a:30:68:c0:39:3a:a3:2d:00:09:29:4d:92:a1:b9:
e8:5a:1f:cc:d8:35:4c:19:2a:c2:e1:6a:9e:c7:75:
40:55:b4:04:a3:6d:b1:cf:f2:b2:bf:3b:ef:61:1a:
bd:47:0a:6c:7e:b2:d2:94:52:24:96:aa:1b:33:88:
14:73:50:98:2a:d2:1d:a8:84:c7:ba:97:e2:74:72:
bf:3a:1d:6f:0b:15:da:09:2e:28:dc:31:23:76:90:
8d:3d:7c:39:36:30:25:21:1c:dc:a3:35:50:97:7a:
62:b5:d2:72:40:7e:6c:2f:8e:09:03:40:a2:67:7f:
1c:1f:e9:ed:83:91:14:bf:cd:62:c4:8f:db:16:9a:
84:17:90:91:6c:16:58:a3:a0:75:77:d4:2b:78:09:
90:de:cc:ac:90:a0:dd:3f:88:e1:f5:d0:39:c7:50:
7c:58:1a:27:ab:1c:ee:d3:2a:ee:ac:98:fb:32:41:
26:f8:56:ba:fd:dd:82:8e:56:ad:02:84:73:44:d7:
d8:90:6e:66:69:07:67:fd:73:4e:88:98:83:ab:d4:
45:3f:30:d3:24:59:f9:dc:d7:f5:5f:f9:22:6e:0b:
8e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A6:94:99:2F:94:1E:07:F1:62:81:CD:24:3A:AF:8F:DA:7D:69:D3
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197842.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.250.0/24
193.7.203.0/24
213.109.169.0/24
Signature Algorithm: sha256WithRSAEncryption
70:84:89:69:76:4a:84:72:93:80:49:ae:b3:f6:bd:a8:e2:1c:
91:2b:e0:01:7a:c0:64:c4:f8:38:82:28:f3:d5:c5:ac:68:6f:
8b:cc:56:47:a1:f7:83:82:ca:21:7f:ee:4d:f3:e6:96:59:23:
8d:a7:e2:ac:00:7b:75:71:ea:04:4f:55:19:fb:88:c7:3c:e8:
ec:d8:ab:7b:02:a1:13:62:65:62:a2:fb:1c:14:36:d2:0a:f1:
01:63:03:ba:67:3b:85:65:85:fd:a6:d5:50:be:b5:1d:18:65:
61:1b:d2:3a:28:ec:b0:5d:93:ff:34:33:58:73:50:62:fd:eb:
d1:63:8d:cc:93:c4:0e:c8:c8:49:0d:8f:06:9d:10:86:67:da:
73:b7:43:ad:5c:d7:e3:9c:a4:55:cb:d4:cc:10:1d:c0:f0:69:
02:7e:cb:f4:a8:f0:80:3d:04:b9:83:6e:58:67:57:f8:57:d6:
03:51:4b:e1:11:06:ed:1e:94:e7:e1:5e:72:6c:8c:5b:fc:1c:
6b:54:ec:c3:5c:18:49:ea:68:f1:e0:7a:72:6f:a7:89:c6:ed:
cb:4f:b1:fc:f8:00:83:22:7e:68:ae:8c:36:f9:c6:d2:fe:6e:
3e:8f:63:47:77:af:b6:59:94:dc:56:ec:d7:35:5e:c0:c5:18:
b2:de:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:02 2023 by rpki-client on console.sobornost.net