Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS146943.roa
File: AS146943.roa (raw, json)
Hash identifier: 1lyW9YszlZL8Vlgdd34HmzG1V7wknfbi5cFGeyoG1ZQ=
Subject key identifier: CC:97:84:D0:ED:C7:B2:0B:25:B0:D3:AF:87:F0:67:ED:DC:5C:DE:79
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 7CA146CD0108079DBE3E82041B519B3A9CA396B1
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS146943.roa
Signing time: Fri 07 Jul 2023 07:00:07 +0000
ROA not before: Fri 07 Jul 2023 06:55:07 +0000
ROA not after: Fri 05 Jul 2024 07:00:07 +0000
asID: 146943
IP address blocks: 45.142.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a1:46:cd:01:08:07:9d:be:3e:82:04:1b:51:9b:3a:9c:a3:96:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 7 06:55:07 2023 GMT
Not After : Jul 5 07:00:07 2024 GMT
Subject: CN=CC9784D0EDC7B20B25B0D3AF87F067EDDC5CDE79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:e8:ab:b8:5b:98:48:aa:02:e1:7f:62:90:
69:c5:1c:75:7f:4e:44:66:45:ac:35:78:91:33:20:
3e:81:f7:38:de:d1:2b:ac:64:ba:3e:24:d8:b2:5f:
a7:e2:b4:87:26:20:03:23:28:58:ec:5b:82:5c:27:
d4:ad:7f:7e:26:c7:df:93:f6:bd:4f:42:a2:d3:47:
73:4f:9f:0e:8c:1a:d1:ee:c0:00:a4:a0:aa:a3:a1:
b3:ec:fb:98:df:38:19:89:58:27:38:fb:c4:94:7d:
77:c6:85:06:ed:fe:9f:3e:cb:d0:9d:7f:16:b6:65:
0f:f9:62:fb:9d:77:ca:c8:e0:2e:4a:24:70:0b:c9:
bd:c5:09:09:e1:6c:ff:23:70:28:76:f9:7a:e5:30:
fc:49:74:4e:e8:45:e4:35:06:be:32:3f:48:09:92:
ca:a1:31:8a:3b:e5:24:ef:0c:04:f5:c0:15:9e:ca:
e4:85:f3:3e:c1:c2:a8:66:68:37:6c:2e:73:ae:21:
df:e4:f3:2d:13:22:65:69:c8:b8:63:01:c7:34:ac:
a6:e3:c7:6c:ef:d8:6b:59:7d:66:da:b2:3a:24:d7:
b4:29:f9:e2:4a:a3:2c:14:eb:47:97:fa:10:f3:6b:
46:99:f8:57:d5:7e:cc:4a:f0:87:1a:d0:0c:32:e0:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:97:84:D0:ED:C7:B2:0B:25:B0:D3:AF:87:F0:67:ED:DC:5C:DE:79
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS146943.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:27:89:cc:d8:08:36:be:5a:dc:d1:7c:7f:d4:f0:8b:ea:36:
39:45:fb:1e:b2:38:34:a4:f6:3e:fd:b0:ee:fa:b1:0d:5c:81:
c0:ad:8c:e6:08:71:98:39:30:c5:28:1a:4f:94:2e:de:b6:5f:
9a:46:5a:3d:11:a4:3b:81:42:c5:db:e8:ab:aa:50:5b:7d:d2:
5b:47:55:9b:77:a5:d7:e4:08:7a:ce:a9:2e:37:96:00:f6:e6:
77:2f:64:87:a3:87:9a:ef:39:88:cf:63:8f:ed:21:b3:ff:8d:
73:bd:65:55:30:2b:17:c5:26:ef:19:65:46:57:b1:e9:7f:a0:
5e:a5:e4:bd:41:e8:ce:fe:99:c0:37:5c:ad:5c:52:7e:8f:11:
6d:cb:03:8c:2b:20:f1:17:72:06:9d:ce:82:ab:b5:75:2e:db:
dd:1c:b4:09:c8:37:61:95:d8:19:ad:99:7b:62:9c:1c:1d:8d:
46:6c:a7:56:ba:31:47:05:b3:a6:0d:91:e7:a9:2f:61:6a:44:
52:67:73:de:45:17:e0:1d:d9:0a:08:aa:d8:4a:30:31:1d:ba:
ea:61:e8:ed:97:db:e4:9d:7f:27:d9:52:fa:a8:9d:48:7f:cf:
64:02:ea:fa:7a:a6:d6:73:c2:b5:bf:82:59:5b:57:8f:c7:a5:
dd:44:2b:42
-----BEGIN CERTIFICATE-----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Generated at Fri Dec 1 10:49:03 2023 by rpki-client on console-ams.rpki-client.org