Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS135752.roa
File: AS135752.roa (raw, json)
Hash identifier: Flo7iXRw/bPoKTyc5+zCFhkJbM/LDDx6Fh++XhANSz0=
Subject key identifier: DE:AA:C2:E6:33:EF:B1:24:A3:0B:7D:75:7C:20:09:BB:E1:77:2A:1B
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2BCA2EE40685C9F0131D1500DF4CC001384A94BF
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS135752.roa
Signing time: Wed 14 Jun 2023 00:00:05 +0000
ROA not before: Tue 13 Jun 2023 23:55:05 +0000
ROA not after: Wed 12 Jun 2024 00:00:05 +0000
asID: 135752
IP address blocks: 45.154.107.0/24 maxlen: 24
45.158.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ca:2e:e4:06:85:c9:f0:13:1d:15:00:df:4c:c0:01:38:4a:94:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 13 23:55:05 2023 GMT
Not After : Jun 12 00:00:05 2024 GMT
Subject: CN=DEAAC2E633EFB124A30B7D757C2009BBE1772A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:ea:56:2d:30:92:d5:b0:47:5a:d2:32:a4:
c8:06:08:f9:6d:4c:f5:0f:4e:51:58:00:bc:94:82:
64:34:64:be:cd:bd:4d:6c:0a:c8:12:ef:37:dc:05:
02:f2:2b:a3:b4:8b:4f:28:16:e8:7e:b0:a7:92:3c:
d5:82:34:0a:98:14:eb:1c:d1:45:cd:13:b0:7b:de:
77:61:dc:60:40:09:24:0f:d5:06:83:4a:85:03:b1:
f4:f5:37:fb:1a:34:dd:0c:47:5a:eb:82:e0:df:74:
c0:a2:f2:8f:a1:1d:9d:b7:78:6f:a8:45:8a:35:74:
16:ba:71:0f:4c:a6:7e:81:12:5f:1d:81:bf:fa:08:
15:f8:fa:0f:82:20:06:21:c7:6f:f2:d9:c4:7b:f8:
f2:63:24:92:d5:9d:c1:55:93:06:1b:cb:b1:ee:89:
b0:a3:19:e3:63:ae:04:92:7a:f5:c0:02:42:06:c1:
8b:37:ee:b8:fa:6b:d8:c9:b6:bb:6c:4e:61:a2:fb:
ac:69:dc:1b:0a:b3:05:68:e3:22:88:23:2d:38:30:
de:e4:27:ed:b8:02:fc:98:9d:30:ae:2e:51:0d:3d:
31:81:34:51:67:28:1c:8b:65:37:9b:bb:b8:8e:72:
d3:b9:80:fe:9a:c9:9f:4c:59:dc:1f:9a:3d:28:e9:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AA:C2:E6:33:EF:B1:24:A3:0B:7D:75:7C:20:09:BB:E1:77:2A:1B
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS135752.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.107.0/24
45.158.8.0/24
Signature Algorithm: sha256WithRSAEncryption
88:92:fd:d6:e4:7b:bd:3a:74:11:3f:1d:75:f5:f4:e9:17:9f:
05:c9:27:5b:42:5a:9e:75:e1:15:59:81:7e:b6:92:de:91:c5:
3c:92:a5:93:8f:8c:82:c9:a8:e5:b2:2c:ff:ca:60:a0:30:14:
82:51:e9:3f:65:62:b7:4e:6b:18:a5:35:01:96:29:8f:d6:d0:
08:ce:eb:f3:76:80:ac:37:53:6e:d1:c0:3d:fe:f3:9c:2e:2b:
55:85:0c:33:bf:e9:82:5d:42:63:47:c4:21:b4:87:38:6f:e2:
e6:de:4d:4b:fb:5d:2b:8d:7d:ac:bc:07:9e:6c:61:ee:66:40:
35:de:d9:93:76:00:f5:7b:31:bc:a2:ee:9f:39:a9:77:99:8f:
62:cd:38:c5:73:0a:b6:6f:83:1d:26:21:a5:de:89:cb:d3:35:
64:f0:3b:ff:fd:93:7a:2e:55:51:ff:26:ad:fc:4a:e3:7c:a4:
68:3b:21:30:1c:b3:f9:5a:ad:f1:f9:dd:37:c6:72:d5:71:99:
21:c1:8f:11:24:0a:81:7c:1a:f7:40:ef:ac:b9:9a:68:39:45:
98:1d:29:a0:46:fd:1e:6c:c0:55:36:5d:b4:d6:b3:81:35:25:
b5:93:3e:7c:fe:be:63:07:09:53:af:19:7d:be:19:7e:e1:1d:
fc:d6:b0:ca
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 8 09:50:51 2023 by rpki-client on console-fra.rpki-client.org