Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS150445.roa
File: AS150445.roa (raw, json)
Hash identifier: aHRi+dPIfoAnOfSCKmL6stK2lQvo05LA20OXbEPzqd8=
Subject key identifier: B2:E5:5D:A0:2B:90:C8:6F:60:C8:A0:50:DE:42:03:EB:66:86:FE:6C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 20514474698D5B53B95A66D8A51D17208C54BFBB
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS150445.roa
Signing time: Thu 17 Aug 2023 14:50:57 +0000
ROA not before: Thu 17 Aug 2023 14:45:57 +0000
ROA not after: Thu 15 Aug 2024 14:50:57 +0000
asID: 150445
IP address blocks: 2a0a:ce00::/29 maxlen: 48
2a0b:500::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 16 Oct 2023 08:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:51:44:74:69:8d:5b:53:b9:5a:66:d8:a5:1d:17:20:8c:54:bf:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 17 14:45:57 2023 GMT
Not After : Aug 15 14:50:57 2024 GMT
Subject: CN=B2E55DA02B90C86F60C8A050DE4203EB6686FE6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:78:7e:ba:74:af:cf:92:06:fd:13:51:e3:
59:aa:ba:20:dd:b8:21:64:ac:a5:e1:03:33:21:0b:
c9:e7:72:21:aa:3a:e1:84:61:84:90:9a:02:58:f8:
41:41:34:ce:09:5e:4b:29:99:90:cd:7d:b2:d6:63:
0f:3b:f6:08:96:f6:30:a5:bc:b6:97:ba:2a:98:b4:
a4:7d:91:a9:97:9a:7b:a9:40:dd:73:ac:b1:4d:13:
ab:d8:db:8b:ca:7a:20:15:03:7a:83:cc:77:67:86:
51:55:fd:93:84:90:f3:cf:e9:55:b0:9d:3b:60:fa:
e6:f2:b5:3a:ce:00:bb:06:e6:a2:d5:9c:61:36:dd:
67:28:10:bf:9d:85:6e:e7:fe:75:ef:e8:8f:82:9b:
4e:7f:06:95:b2:f4:c1:5b:1c:87:26:0b:ac:d3:34:
39:6a:da:29:e0:f6:94:78:94:e5:de:34:4c:ef:ad:
38:ae:8a:8a:99:d6:68:59:71:e4:75:f4:04:a5:c7:
14:9b:72:5e:0d:bf:68:b8:00:27:fb:4d:f6:4f:90:
57:d3:aa:4f:3b:8c:b0:15:33:9f:3b:ba:c7:cf:31:
1b:a6:a2:8f:e9:b4:bb:c3:92:e4:c3:38:88:ff:30:
f5:38:51:77:74:bc:0e:d0:ff:99:ec:97:fd:1b:12:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E5:5D:A0:2B:90:C8:6F:60:C8:A0:50:DE:42:03:EB:66:86:FE:6C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS150445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:ce00::/29
2a0b:500::/29
Signature Algorithm: sha256WithRSAEncryption
4e:d7:82:3c:9b:25:e4:91:24:88:4d:dd:53:58:6f:b5:e7:82:
5d:41:14:29:8d:8f:86:ee:cc:95:fa:9f:49:5a:90:1a:48:40:
7b:72:95:70:a9:3d:3e:20:e9:c5:54:ca:bd:a1:e9:4e:b7:d3:
ef:2a:1b:f5:58:e3:82:1c:06:68:64:04:72:82:a9:66:e7:0c:
1d:08:cb:0f:a0:a4:b6:4a:7b:04:6d:95:32:1f:65:02:e8:2f:
44:58:94:57:ac:08:98:51:cf:c5:9f:0a:e5:ac:5f:63:2d:71:
54:2f:6f:51:6c:68:de:d8:0f:32:07:32:9b:b9:44:67:f9:8d:
c9:76:e8:34:cf:8d:92:ee:d1:c0:f8:fc:be:3f:7f:50:be:d2:
39:c5:90:93:3f:46:d9:da:3c:80:35:86:ea:40:a2:4d:a4:e3:
0d:dc:d2:13:ef:52:15:db:fc:79:28:a2:87:7d:27:21:ba:cc:
3e:3a:93:f8:27:00:8f:02:2f:16:e5:e3:87:2e:f5:91:af:ff:
12:1f:10:87:6e:c0:ef:4c:87:a5:b6:ce:84:5f:b5:1a:a0:19:
52:2e:c6:93:16:77:37:1d:b5:c3:6d:bd:41:92:8c:fc:1d:a8:
a3:13:3c:ee:9f:39:74:10:e2:a6:70:fc:59:f7:06:3a:e1:9a:
46:79:a1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:02 2024 by rpki-client on console-ams.rpki-client.org