Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS10753.roa
File: AS10753.roa (raw, json)
Hash identifier: RChNdqHkQnY1Uvcq6t+/1zkM4OwG2KUHtw18JDx/X5Q=
Subject key identifier: 56:0C:33:2D:13:FD:7C:9A:BD:19:CA:75:64:D6:89:0A:80:0B:31:2D
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0AD2ECE72D5792F4FF7754762DE7AAE6B4AAD738
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS10753.roa
Signing time: Wed 12 Jun 2024 05:22:53 +0000
ROA not before: Wed 12 Jun 2024 05:17:53 +0000
ROA not after: Wed 11 Jun 2025 05:22:53 +0000
asID: 10753
IP address blocks: 91.199.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 10:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d2:ec:e7:2d:57:92:f4:ff:77:54:76:2d:e7:aa:e6:b4:aa:d7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 12 05:17:53 2024 GMT
Not After : Jun 11 05:22:53 2025 GMT
Subject: CN=560C332D13FD7C9ABD19CA7564D6890A800B312D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:d6:23:41:75:b0:3b:a1:3d:85:7a:b2:de:
3d:2d:97:4a:e5:3f:de:c8:36:84:30:53:45:b8:19:
da:d3:8a:87:c0:97:99:be:7a:7d:72:15:9b:89:de:
6c:9e:f2:b1:72:32:65:40:00:1d:e3:59:18:66:33:
0d:71:0b:75:cd:15:00:8f:2a:bd:81:25:52:93:9e:
1b:1b:c6:ab:34:d8:78:4b:ae:b1:c0:40:2e:cf:67:
79:06:94:1f:aa:85:e6:9f:49:fe:39:8d:47:1a:96:
1a:d7:b4:6d:d3:9f:46:3e:a9:32:43:0b:f3:71:03:
50:0d:30:55:85:c4:4b:68:2e:0d:c0:94:4b:cc:66:
3e:3a:77:52:c2:c8:0b:29:76:f5:44:d7:24:95:c3:
53:f3:56:75:a6:15:47:7a:84:af:48:9f:62:15:ef:
8d:43:8f:fe:8d:d2:aa:ef:58:99:a6:b0:29:cc:86:
10:4c:3e:7d:ba:e5:a5:bf:dd:4a:1d:f7:52:26:b8:
37:df:d7:54:ff:d1:a8:4d:f6:48:b9:6a:c7:c7:3c:
e7:4e:e3:50:53:15:78:11:7e:ac:90:20:42:01:60:
90:84:19:7c:d3:00:8c:76:25:52:35:ba:25:57:b1:
40:56:ab:bc:07:b1:47:19:55:fc:16:f2:2b:99:d1:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0C:33:2D:13:FD:7C:9A:BD:19:CA:75:64:D6:89:0A:80:0B:31:2D
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS10753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:52:89:2a:4b:15:4e:12:65:4c:be:90:13:50:91:45:8b:5d:
0a:58:c2:2b:94:87:80:3f:67:16:9b:a6:91:a5:7e:85:d3:aa:
87:ba:b0:e3:95:80:a0:ce:38:88:66:be:53:2e:0a:f1:10:dd:
94:a4:92:43:7e:b2:29:63:6e:c2:f4:b7:57:a0:ae:64:6c:71:
f2:36:9b:6b:24:0e:f4:a6:e6:b7:52:65:b4:1e:51:fb:58:4e:
3e:e2:e8:df:da:8e:3a:da:e6:c7:25:3b:72:fb:bd:65:09:6e:
a1:b3:bf:6a:2c:e1:5e:c9:2c:18:8f:0d:3e:4a:b9:e2:9c:2d:
99:4a:ae:17:4e:c5:83:c2:a4:37:50:28:68:00:01:af:32:0a:
0e:22:d8:cc:5a:c4:9a:e4:61:67:90:44:1b:fe:ef:c7:82:16:
2d:0a:00:e4:0a:52:4a:fa:90:f1:16:6d:8d:5e:31:ab:fc:80:
49:7a:ad:fe:f8:33:32:d3:ae:04:15:77:c4:ad:48:99:8d:c1:
a0:b4:11:bf:1b:be:28:ff:ce:aa:fe:10:19:20:68:1a:f9:c8:
49:fb:39:8c:7c:12:63:a6:a1:10:85:95:9b:e7:94:9e:f3:db:
91:df:93:6c:4a:8a:de:2d:cb:25:fa:2b:9a:bb:0f:b9:5a:78:
ec:79:32:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 12:56:43 2024 by rpki-client on console-ams.rpki-client.org