Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS140641.roa
File: AS140641.roa (raw, json)
Hash identifier: lJQnprCAAk1SmhR1qVOltU3XCy1/EaYQVWjxE+HWvgU=
Subject key identifier: A9:9B:34:D8:55:13:FF:07:46:45:C0:A9:40:65:66:15:FB:24:D1:40
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 7E24EFD53A80BC4001F1AD72DD9FF9979D3787D2
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS140641.roa
Signing time: Wed 14 Jun 2023 13:34:09 +0000
ROA not before: Wed 14 Jun 2023 13:29:09 +0000
ROA not after: Wed 12 Jun 2024 13:34:09 +0000
asID: 140641
IP address blocks: 45.153.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:24:ef:d5:3a:80:bc:40:01:f1:ad:72:dd:9f:f9:97:9d:37:87:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 14 13:29:09 2023 GMT
Not After : Jun 12 13:34:09 2024 GMT
Subject: CN=A99B34D85513FF074645C0A940656615FB24D140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:09:d5:0a:a9:cb:e2:e9:74:8b:fb:e3:a3:
bd:8f:ef:5f:90:75:66:38:55:8d:3b:6f:9a:47:5c:
37:f0:20:81:a7:d5:ab:05:5d:e6:42:5b:ae:1f:8c:
3c:84:91:41:f0:fc:3a:92:85:8e:a9:e0:a7:b5:75:
2c:1c:e3:13:db:c6:44:20:37:f5:be:37:0f:28:77:
70:8c:de:ed:c9:78:5d:46:45:36:ee:0b:c7:c3:40:
3a:41:ed:de:ed:82:40:29:2f:4c:85:8c:0e:e9:35:
10:0e:fe:3f:84:23:dd:57:ff:83:4d:d8:9e:43:8f:
fe:b0:e7:68:e0:37:db:f5:07:8f:09:0a:27:66:21:
9d:fe:5e:8a:76:18:ab:60:d7:e9:fc:cf:ff:c1:6f:
3e:36:44:b1:e0:0c:ec:f5:2d:7d:ef:b9:60:f7:1d:
07:7c:1f:68:54:66:62:ce:7d:ac:b5:f7:27:96:f0:
4d:da:5f:01:93:2c:bf:e2:32:ed:fb:a2:ad:f8:0a:
c8:36:26:c6:8e:bb:be:42:5a:ea:94:e3:46:50:06:
24:15:07:d0:b1:d8:7f:38:c2:73:cf:8a:00:3d:38:
db:45:f1:d9:93:19:78:4d:ed:ef:61:61:a0:b3:43:
16:7b:7e:4c:3d:b7:3f:36:0c:b6:e6:9f:54:47:a3:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9B:34:D8:55:13:FF:07:46:45:C0:A9:40:65:66:15:FB:24:D1:40
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS140641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.7.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c5:ce:87:7f:7c:13:05:1d:f9:ed:a3:76:45:47:1e:20:e4:
cc:a0:b2:37:b7:9c:fc:cc:52:43:b1:92:18:40:6e:85:8f:54:
bd:8c:de:ff:39:32:b2:6f:05:c1:66:60:95:e3:95:d8:a6:db:
d5:3b:30:c9:13:42:82:99:5f:f4:20:f4:87:43:5e:5d:c4:0f:
78:df:a4:1c:d0:28:33:3d:8d:fd:6e:fb:31:98:f1:fb:00:0d:
8f:a7:0a:65:e1:0e:25:29:58:c1:13:d8:1f:92:11:c3:ae:a0:
33:fa:75:37:1c:0f:8f:ff:52:c4:d0:1b:22:0e:c2:71:1d:92:
96:3e:c4:14:b7:df:58:0b:7c:9d:78:2d:e2:59:f0:b8:aa:f4:
51:d8:dc:77:70:4f:29:22:4c:be:1a:32:0b:3f:70:98:4b:72:
c5:73:10:4b:9f:bf:06:83:16:3b:23:f4:2c:45:c8:0c:da:63:
c4:33:04:a6:dc:70:8f:d2:37:34:62:41:69:54:d0:4c:c9:b6:
05:b5:e3:4c:05:6f:20:12:a4:71:ac:04:67:37:41:60:74:50:
51:fd:16:60:45:b8:26:ba:a8:f6:da:ec:48:7a:b3:4d:ed:35:
69:e6:23:c6:6e:58:8c:ca:50:ff:d9:de:04:71:db:46:f5:1b:
4d:74:8a:4e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUfiTv1TqAvEAB8a1y3Z/5l503h9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yMzA2MTQxMzI5MDlaFw0yNDA2MTIxMzM0MDlaMDMxMTAvBgNV
BAMTKEE5OUIzNEQ4NTUxM0ZGMDc0NjQ1QzBBOTQwNjU2NjE1RkIyNEQxNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkPgnVCqnL4ul0i/vjo72P71+Q
dWY4VY07b5pHXDfwIIGn1asFXeZCW64fjDyEkUHw/DqShY6p4Ke1dSwc4xPbxkQg
N/W+Nw8od3CM3u3JeF1GRTbuC8fDQDpB7d7tgkApL0yFjA7pNRAO/j+EI91X/4NN
2J5Dj/6w52jgN9v1B48JCidmIZ3+Xop2GKtg1+n8z//Bbz42RLHgDOz1LX3vuWD3
HQd8H2hUZmLOfay19yeW8E3aXwGTLL/iMu37oq34Csg2JsaOu75CWuqU40ZQBiQV
B9Cx2H84wnPPigA9ONtF8dmTGXhN7e9hYaCzQxZ7fkw9tz82DLbmn1RHo3VVAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUqZs02FUT/wdGRcCpQGVmFfsk0UAwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTQwNjQxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZkH
MA0GCSqGSIb3DQEBCwUAA4IBAQABxc6Hf3wTBR357aN2RUceIOTMoLI3t5z8zFJD
sZIYQG6Fj1S9jN7/OTKybwXBZmCV45XYptvVOzDJE0KCmV/0IPSHQ15dxA9436Qc
0CgzPY39bvsxmPH7AA2Ppwpl4Q4lKVjBE9gfkhHDrqAz+nU3HA+P/1LE0BsiDsJx
HZKWPsQUt99YC3ydeC3iWfC4qvRR2Nx3cE8pIky+GjILP3CYS3LFcxBLn78GgxY7
I/QsRcgM2mPEMwSm3HCP0jc0YkFpVNBMybYFteNMBW8gEqRxrARnN0FgdFBR/RZg
Rbgmuqj22uxIerNN7TVp5iPGbliMylD/2d4EcdtG9RtNdIpO
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org