Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS150752.roa
File: AS150752.roa (raw, json)
Hash identifier: BG33H8fOXR8Nl82vpwlYtejnJL1mQ9SHaNzZaZNlLec=
Subject key identifier: 65:27:44:5F:A7:74:D1:9A:20:FF:BE:88:70:88:01:7C:2C:BC:DE:2B
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 408CD7376FCC897DFBC53316458C5E95C5AF706E
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS150752.roa
Signing time: Fri 24 Mar 2023 17:54:14 +0000
ROA not before: Fri 24 Mar 2023 17:49:14 +0000
ROA not after: Fri 22 Mar 2024 17:54:14 +0000
asID: 150752
IP address blocks: 45.155.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:8c:d7:37:6f:cc:89:7d:fb:c5:33:16:45:8c:5e:95:c5:af:70:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 24 17:49:14 2023 GMT
Not After : Mar 22 17:54:14 2024 GMT
Subject: CN=6527445FA774D19A20FFBE887088017C2CBCDE2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:46:60:63:58:49:9b:4f:74:50:9e:47:4a:
bd:9b:20:a4:35:ae:75:e1:ec:f0:e7:d3:5d:17:20:
3e:61:9e:2c:75:bf:92:47:6f:fe:98:3a:f4:b5:1a:
ef:5e:a7:ba:f6:e4:65:1c:ee:c9:3f:f5:60:b1:68:
d1:f3:ec:52:2f:cf:18:87:82:00:cd:30:9c:0d:88:
17:15:b3:14:68:63:59:01:08:3d:b7:fe:f7:20:3a:
be:7e:74:a0:25:af:6f:4b:21:78:e9:6a:3a:cc:03:
d4:32:4d:49:87:fd:9e:92:0e:4c:a5:c7:f4:96:ab:
f6:11:89:c9:5c:41:08:72:d0:c0:3d:74:16:b4:71:
f4:a8:ac:3b:cb:69:13:28:fc:95:bb:d6:64:1b:59:
c1:80:f7:1a:14:db:ea:90:10:b9:67:6b:d6:a7:e7:
a7:7c:d0:52:49:7d:99:81:1a:b3:a2:bc:4b:5b:ef:
c6:23:ca:a8:e6:62:ee:a0:aa:cb:1c:80:f7:d0:a4:
69:e7:59:36:f0:25:e3:62:d3:95:e5:11:2d:79:53:
17:5d:8d:2b:58:e1:ea:31:79:16:f0:b8:73:8d:84:
0a:9e:bc:51:f3:91:50:67:76:f3:26:a0:2f:bb:0a:
c0:fe:21:89:11:fd:35:c3:91:54:13:99:51:be:cd:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:27:44:5F:A7:74:D1:9A:20:FF:BE:88:70:88:01:7C:2C:BC:DE:2B
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS150752.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.17.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:44:ad:15:97:38:11:8a:55:09:37:de:f9:ef:ce:8e:57:bb:
79:1c:1a:5d:ed:46:0a:a2:e9:b8:1c:2f:45:c8:d4:e0:68:c8:
53:c7:55:9b:a6:7e:1e:fd:b1:b2:9a:32:a7:aa:27:fd:78:83:
7f:d1:76:c3:74:54:24:60:b6:f4:23:7b:e7:88:96:97:f3:ea:
fb:63:aa:0d:87:5c:c5:67:ab:6e:a0:df:dd:24:1f:d1:be:13:
27:46:73:d6:f0:6a:be:4f:e0:c6:94:75:8d:d0:8b:6d:92:3a:
23:33:02:fa:34:40:a7:7d:f2:a9:4a:31:ca:4e:0b:c5:b0:ad:
a6:a6:d7:01:d0:3c:01:34:c8:83:b6:60:30:69:e0:45:34:5c:
b4:1d:8e:e8:a6:f4:c7:07:f1:f1:04:19:fb:d7:e8:ce:1b:c2:
e1:9e:9e:dc:fe:da:a9:ad:05:cd:ec:02:56:28:33:9e:9d:c7:
e0:56:da:26:7b:5e:92:d4:1b:1e:7a:61:26:2e:e1:4b:06:a4:
bc:39:f3:98:03:cd:a8:06:15:3b:b2:6c:02:da:76:cb:8f:d3:
1f:e2:bc:46:d2:7d:a1:83:08:d6:ce:13:21:da:af:ac:d0:02:
bb:3d:7d:7d:76:7a:09:a9:14:6f:3c:8d:f0:e9:2d:ef:6a:95:
82:fc:09:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org