Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS139660.roa
File: AS139660.roa (raw, json)
Hash identifier: kokhoJgZ5Ns/9ffCPZJb8Ai1q+9gbkaMNIEEEGgxNHA=
Subject key identifier: A8:2D:C6:6E:E7:FE:2A:ED:70:D0:B5:06:7C:F5:9E:A5:FA:AD:5D:5F
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3A1FDD0996A28FFFB96F970344C3CDD0551087B9
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS139660.roa
Signing time: Sat 04 Mar 2023 06:43:29 +0000
ROA not before: Sat 04 Mar 2023 06:38:29 +0000
ROA not after: Sat 02 Mar 2024 06:43:29 +0000
asID: 139660
IP address blocks: 176.105.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:1f:dd:09:96:a2:8f:ff:b9:6f:97:03:44:c3:cd:d0:55:10:87:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 4 06:38:29 2023 GMT
Not After : Mar 2 06:43:29 2024 GMT
Subject: CN=A82DC66EE7FE2AED70D0B5067CF59EA5FAAD5D5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:c7:e8:d4:8a:03:ea:73:7b:3c:15:e8:f8:
a1:82:4f:cf:23:1e:98:87:b2:c0:f4:e2:8a:89:f1:
ea:5a:90:7a:4f:69:01:1e:b2:8f:35:8d:ab:e8:f9:
20:18:db:18:87:dc:aa:fc:40:5c:07:db:18:ea:32:
9a:1b:6a:76:56:68:cc:fc:cf:29:25:df:61:ff:fe:
c2:d8:d8:34:a4:d5:b7:c4:e0:4f:da:47:0b:d3:75:
c5:bf:86:56:e8:e2:4a:96:c9:44:2d:8c:0d:f0:94:
3f:d5:2f:10:ab:d7:a5:c4:b6:70:7e:b4:97:29:e4:
13:d8:5c:92:43:0d:d2:ef:01:a4:71:7d:ce:a2:8f:
cc:50:6e:c7:3e:47:2e:89:eb:44:1a:68:ab:a2:6b:
cf:48:a9:1c:82:c5:a4:f8:29:a4:7a:d5:c2:d2:10:
e1:36:16:f8:27:b8:ee:1d:29:3a:cb:61:38:f0:b9:
28:12:23:ec:20:b1:1c:f6:6d:71:f8:d8:85:60:e8:
ac:e7:e4:12:d9:b3:2a:78:fa:5d:a0:5e:da:08:f5:
99:51:05:91:26:0b:16:40:e4:0d:0a:38:1b:f1:33:
32:36:e7:49:71:0d:2e:c8:e7:84:3d:47:2d:6e:14:
8c:d7:13:7a:0c:a0:8a:cd:d7:b2:ef:90:1e:c2:1b:
be:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2D:C6:6E:E7:FE:2A:ED:70:D0:B5:06:7C:F5:9E:A5:FA:AD:5D:5F
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS139660.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.227.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:76:df:35:63:3d:f3:cb:40:f3:88:ee:5d:97:17:f4:87:20:
d5:50:55:76:aa:13:83:2a:29:30:02:34:70:8a:77:fd:79:ba:
2c:9a:6a:70:c8:9f:07:98:21:46:00:5b:ca:a1:db:68:82:e7:
28:74:01:ba:79:90:3d:38:69:44:c0:bf:ed:f6:1b:11:d4:11:
b7:26:eb:e6:0b:ab:c5:aa:29:79:80:b1:ef:ee:d8:46:1a:06:
a7:bc:c8:de:82:e7:ee:c6:1c:15:9a:dc:be:4c:93:28:db:c8:
b1:6f:96:8f:d2:aa:68:d3:43:07:41:0d:81:2d:bc:ef:ae:56:
fa:f1:21:b3:49:47:59:4b:f6:b0:32:26:17:09:bc:b0:f7:78:
ee:95:c1:dd:97:f7:62:0a:09:05:a0:07:8f:30:fe:a5:2d:f4:
20:76:1f:ca:40:bf:79:89:7b:44:e8:db:15:ba:18:f8:cc:7a:
d7:3c:b2:a0:b6:48:f0:fe:f1:a6:76:7f:66:21:d3:e2:a9:f9:
d2:19:c7:6a:91:d4:ea:94:fe:fd:55:ac:48:18:59:64:c5:6c:
94:b0:ea:e1:c1:af:5e:c8:7e:56:71:bf:ec:74:8b:31:4f:b4:
4c:a4:07:40:15:74:95:b5:23:69:d4:f3:a5:38:f9:4f:ed:ef:
01:a9:cc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org