Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS142594.roa
File: AS142594.roa (raw, json)
Hash identifier: 3Z90+0PuPxbJvkhs8rE8neeKPCrkrREsY4JAsgy63YQ=
Subject key identifier: 16:D7:2A:D3:F4:40:00:7C:6E:26:E1:6C:E5:41:DA:37:F8:A1:92:F2
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 12FBACAF6304758B033DEFD9E17BB52E8C4F9FE3
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS142594.roa
Signing time: Wed 22 Mar 2023 01:05:06 +0000
ROA not before: Wed 22 Mar 2023 01:00:06 +0000
ROA not after: Wed 20 Mar 2024 01:05:06 +0000
asID: 142594
IP address blocks: 45.152.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:fb:ac:af:63:04:75:8b:03:3d:ef:d9:e1:7b:b5:2e:8c:4f:9f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 22 01:00:06 2023 GMT
Not After : Mar 20 01:05:06 2024 GMT
Subject: CN=16D72AD3F440007C6E26E16CE541DA37F8A192F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:c6:03:2e:a7:58:b0:7e:e9:76:6d:23:6c:
8c:f7:0a:8c:46:0e:6d:0d:ff:9f:f7:9c:31:9e:b8:
bb:cf:d2:e1:8c:b9:55:52:21:d4:dd:11:ea:62:90:
39:a2:9e:f8:20:7b:b0:db:18:17:ad:d9:6f:ff:8f:
bd:91:e3:02:8a:49:1b:b2:f3:13:aa:96:2a:55:14:
98:5f:1a:7a:86:5a:4e:81:e9:9d:0f:5b:f1:8c:04:
f9:44:2e:8c:f6:77:84:fc:f5:93:2a:51:89:15:4b:
c4:a5:41:0e:ce:73:b2:1d:bc:11:90:5e:06:af:18:
cb:8d:74:e0:82:0b:ed:ab:8b:f7:1a:0f:a0:40:4d:
d3:f1:98:85:a5:36:1d:5a:ac:31:5f:b7:e7:be:a7:
ba:05:6c:a4:2f:f3:de:3e:69:6b:8b:d8:95:78:da:
35:2f:64:49:c7:3f:f5:4f:71:4d:e8:f2:3f:27:bc:
0b:ea:17:bf:ce:ce:5f:ad:2c:a8:e8:7e:fa:a6:e4:
23:4e:aa:e1:fc:9f:4a:e2:8b:27:d4:d9:51:21:a3:
5a:a8:12:a0:bd:5d:98:24:dd:3f:cb:b8:21:f4:1a:
2a:c0:5a:cf:19:83:d9:ae:26:b0:c2:ba:a5:80:f2:
6f:a4:ad:61:09:ff:4a:ce:99:a6:80:de:c4:f7:ea:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D7:2A:D3:F4:40:00:7C:6E:26:E1:6C:E5:41:DA:37:F8:A1:92:F2
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS142594.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.243.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b4:45:ac:f4:6a:e4:cf:7e:3f:90:14:ed:dc:b6:9f:b7:41:
82:bb:6b:44:0c:9b:f3:31:f6:a5:41:14:f8:27:1c:e5:14:79:
92:6a:18:7f:b2:22:4b:ac:4b:a3:92:3a:d4:e0:d6:df:7a:39:
d2:e9:eb:84:92:36:7b:0f:bf:f9:ae:b9:13:dd:8c:62:51:63:
91:fb:d8:04:68:9a:0a:8d:74:93:d1:68:4d:66:df:f5:c2:68:
98:93:2a:87:47:a1:3f:c4:ab:0e:eb:f3:a1:5d:9f:ea:cf:c6:
5e:70:67:78:d5:11:d3:9d:cb:fc:d5:f5:75:23:39:1e:6c:9c:
85:b3:c2:34:28:2b:6f:cd:39:af:f7:b7:d6:5c:51:42:d8:bb:
c1:47:80:35:8c:16:95:6e:94:5d:93:22:f8:f1:ca:24:50:66:
e9:51:36:0b:1d:09:a6:34:09:9d:58:66:aa:e7:da:ef:3d:62:
20:74:da:8f:d9:6b:59:8e:06:6c:59:d0:96:e0:18:53:28:2e:
1a:14:d7:17:cc:a2:fa:60:1e:88:0b:c5:02:fa:84:61:73:8c:
28:87:84:ad:20:31:e7:0d:ac:12:20:92:e3:36:a0:b1:a2:14:
8b:fe:5c:18:52:06:06:bf:09:ad:02:ec:53:d8:a2:4e:03:d1:
7d:94:0f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org