Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS151734.roa
File: AS151734.roa (raw, json)
Hash identifier: cikN534O+9sh0KRaJLfamxMtcZfBUwUk5qPVoQWZZ3o=
Subject key identifier: 0B:7B:A6:DF:67:DE:5F:DD:82:2D:4D:64:D2:87:4B:79:0E:E4:87:2C
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 55054A2524CD25FE98025503E984298285DF1872
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS151734.roa
Signing time: Thu 28 Nov 2024 15:15:25 +0000
ROA not before: Thu 28 Nov 2024 15:10:25 +0000
ROA not after: Thu 27 Nov 2025 15:15:25 +0000
asID: 151734
IP address blocks: 45.157.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:05:4a:25:24:cd:25:fe:98:02:55:03:e9:84:29:82:85:df:18:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 28 15:10:25 2024 GMT
Not After : Nov 27 15:15:25 2025 GMT
Subject: CN=0B7BA6DF67DE5FDD822D4D64D2874B790EE4872C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:89:a1:51:ab:4c:27:b5:7b:06:be:18:d9:
f2:d2:a5:5e:f0:0a:1a:a9:46:7c:de:04:41:d7:2d:
0a:c3:b5:ad:d2:79:14:33:54:50:00:cc:17:80:73:
22:d5:44:c7:4a:a4:b0:6e:be:aa:29:5d:3f:51:16:
d8:4d:77:05:42:10:f8:25:68:25:1b:ea:d6:71:8c:
68:0a:05:3c:e5:d7:b6:f3:79:6a:b4:62:d8:0a:dc:
61:d6:fc:0b:64:e7:c7:30:85:78:a4:83:d5:e2:fa:
a5:0a:bd:60:52:49:db:cb:0f:0b:22:4a:0a:44:dd:
23:5c:e8:41:e7:2f:2b:02:a8:fe:5f:d6:0e:28:c8:
a6:44:7b:7a:60:d1:b9:74:2c:dc:8d:2c:81:fc:04:
5a:1f:b2:07:96:e3:48:2d:75:96:0f:24:d7:54:4f:
47:91:10:d0:1f:3e:22:da:1e:2e:fb:5a:a0:d5:18:
9a:ee:ee:29:61:79:09:1f:01:0b:ba:2e:ea:a1:39:
8d:db:c5:3f:0a:69:a2:b2:9a:41:7c:67:78:dc:7a:
0b:17:6f:6e:42:55:e1:d8:c8:b6:48:4b:6b:52:13:
25:39:c4:e9:d3:2d:e0:1a:66:c0:5e:9e:71:11:31:
8a:f0:92:8f:0d:59:28:0c:91:81:12:cf:f0:fa:a5:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7B:A6:DF:67:DE:5F:DD:82:2D:4D:64:D2:87:4B:79:0E:E4:87:2C
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS151734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.18.0/24
Signature Algorithm: sha256WithRSAEncryption
94:70:b9:fb:51:f3:3c:95:ab:4f:95:d5:3b:4c:9a:c7:b7:e5:
15:93:77:0f:75:ef:ff:46:9c:3a:8c:70:75:bd:3b:08:45:e9:
65:7e:b8:13:7d:c1:7b:44:30:67:a0:7a:35:a4:71:91:f8:c9:
da:7c:4d:f2:9d:86:de:f3:14:e2:3f:59:07:dd:5d:6b:10:fb:
12:77:1c:c1:84:71:ae:2f:27:65:9d:1f:2f:fc:cb:81:2e:91:
fe:c3:02:b0:0a:02:4a:88:37:7f:54:56:a6:21:df:9d:be:21:
66:99:4b:87:b6:82:c3:f4:ae:58:e5:d0:33:87:85:95:fd:16:
26:70:71:14:78:88:1e:b5:d4:e0:bf:8e:07:61:5e:9b:8f:28:
8d:33:68:da:9c:fe:66:e9:0b:1f:22:a7:42:ce:fb:11:b1:16:
98:92:7d:d7:2d:b0:88:03:31:d3:83:2d:9d:3a:7b:f6:53:c3:
13:22:84:cc:8a:18:75:66:93:8e:d9:ad:db:16:cf:26:8b:64:
ab:55:50:04:2b:ba:bb:5c:ea:96:25:ff:f7:44:06:ca:a6:54:
8e:3c:8a:53:c5:18:1c:4a:fc:cb:25:82:0c:0f:12:da:82:bb:
1f:e7:b9:ff:61:9c:f5:10:df:c5:04:f9:a7:6e:40:e4:a4:8a:
46:13:bb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:01:19 2025 by rpki-client