Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS135750.roa
File: AS135750.roa (raw, json)
Hash identifier: e/kZXb4Ds5bpIZk55wdcGMHb5ZCCfycwm0zcHZ9jbi0=
Subject key identifier: 27:29:F1:AB:35:D1:E1:05:58:A0:F7:34:C4:39:A4:22:C2:0D:33:17
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6011D19DB377F5A822F9A1854CDFACB97D0A3DD6
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS135750.roa
Signing time: Thu 16 Feb 2023 14:56:51 +0000
ROA not before: Thu 16 Feb 2023 14:51:51 +0000
ROA not after: Thu 15 Feb 2024 14:56:51 +0000
asID: 135750
IP address blocks: 45.154.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:11:d1:9d:b3:77:f5:a8:22:f9:a1:85:4c:df:ac:b9:7d:0a:3d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Feb 16 14:51:51 2023 GMT
Not After : Feb 15 14:56:51 2024 GMT
Subject: CN=2729F1AB35D1E10558A0F734C439A422C20D3317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:dc:37:d8:57:e6:81:73:5a:f6:e5:aa:cc:
45:82:33:db:5b:19:be:31:7e:94:68:2a:5a:05:d7:
81:3d:75:e5:01:fb:8f:05:6e:0e:7c:8e:71:c5:6d:
47:d2:4f:ec:f1:03:4d:69:8b:e0:c4:9b:b0:49:67:
e1:06:6e:53:2c:5e:93:b8:1e:35:42:6b:62:4d:63:
5f:38:4a:4c:e1:4d:ff:e7:42:27:b8:c0:17:68:05:
12:72:56:f2:73:b9:4c:ba:88:cd:f6:fa:31:27:f8:
b4:c5:56:d3:fb:c7:16:e4:cd:40:38:90:fb:b3:6f:
89:af:ff:c0:d7:89:00:4c:21:1e:14:7b:e9:21:25:
0f:3b:3f:62:da:0b:f2:35:ae:2a:a9:46:0a:2a:c8:
ac:43:2b:f9:9b:ef:9f:52:bf:ed:a5:19:e8:e8:59:
24:c5:10:f7:2a:b9:9d:2e:b2:97:74:d3:7a:be:56:
9e:1a:a7:4f:2a:d0:21:c4:4f:43:2d:37:4e:c1:eb:
68:5f:8c:30:1d:70:b7:32:d0:62:a0:6b:0c:45:6a:
b7:43:93:fe:29:79:e8:8d:ee:5b:c4:ec:3f:b5:5d:
eb:74:51:0e:94:c6:3d:ac:78:59:6a:d9:65:76:ed:
c5:15:2b:51:64:a2:bd:06:23:1d:93:ff:8a:d5:bf:
d6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:29:F1:AB:35:D1:E1:05:58:A0:F7:34:C4:39:A4:22:C2:0D:33:17
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS135750.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.107.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a4:58:52:57:84:99:df:f7:2e:bc:b1:94:b6:ea:c8:19:13:
52:30:d1:8c:e2:bd:2c:21:58:a1:1f:6a:42:a0:49:0f:9e:81:
09:93:0d:07:51:d2:07:88:b6:fa:28:a5:71:69:92:5c:6d:41:
cc:9d:64:6b:a7:aa:40:a7:82:20:d7:6a:da:4f:b3:72:64:78:
ed:18:e8:ae:3d:a1:54:3e:37:76:42:46:f2:f9:bf:6e:98:ae:
b8:e8:2e:39:4a:c4:e2:3a:81:37:5e:db:56:a0:cf:db:f9:38:
82:c6:3e:91:5d:9d:7c:2a:01:24:d7:15:bb:7e:fa:61:58:c9:
ac:fa:67:ba:71:58:a2:2a:29:aa:31:d0:8d:fb:28:ab:5a:5c:
5b:b8:83:b6:7d:aa:8d:3c:b5:ea:3e:b2:ed:95:d4:f6:d7:91:
db:61:ae:f2:95:98:2f:5b:f1:24:de:b2:a1:6c:b0:3c:38:cc:
16:f1:3a:9b:ae:27:ac:af:58:47:60:25:da:ff:bc:82:34:d7:
2c:56:c8:25:83:52:07:d4:ba:a5:89:3e:00:49:7f:a8:25:a7:
4a:86:02:19:ff:58:16:be:e1:7f:b0:94:bf:ee:24:d0:99:ed:
b0:ba:6e:e6:ef:b6:7b:89:b3:53:03:ce:3f:55:97:b0:f2:be:
82:13:81:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 09:52:07 2023 by rpki-client on console-ams.rpki-client.org