Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS198351.roa
File: AS198351.roa (raw, json)
Hash identifier: j2sf604UVTV5ICO4ZJjcgVXsyS7/fa3v0ad5qvYPvjA=
Subject key identifier: 35:4A:E2:32:35:E8:2A:63:10:67:A1:1B:F2:78:58:14:EA:7F:F5:C2
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 4B487DEC54736E53B1E33F076E54076A58688F99
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS198351.roa
Signing time: Sun 04 Jun 2023 12:05:34 +0000
ROA not before: Sun 04 Jun 2023 12:00:34 +0000
ROA not after: Sun 02 Jun 2024 12:05:34 +0000
asID: 198351
IP address blocks: 45.153.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:48:7d:ec:54:73:6e:53:b1:e3:3f:07:6e:54:07:6a:58:68:8f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 4 12:00:34 2023 GMT
Not After : Jun 2 12:05:34 2024 GMT
Subject: CN=354AE23235E82A631067A11BF2785814EA7FF5C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:b6:a4:f2:3e:3e:7f:5d:57:90:bf:ef:3c:
46:29:96:6d:48:7b:96:70:67:3a:da:c1:5c:12:9b:
fd:15:a5:7b:23:a2:af:19:69:a1:59:26:f7:ec:5f:
24:e8:22:d4:a4:1e:41:da:93:d1:25:f2:27:37:d7:
d1:b6:81:c0:73:b9:44:cb:63:70:cd:fc:97:d0:bb:
ec:53:c3:2c:93:6a:c2:eb:a5:51:e7:ed:b4:ed:6d:
95:ae:f2:db:dc:8f:38:c5:4d:5f:87:aa:09:8a:d3:
c9:5d:80:4d:f9:5e:92:9f:d5:32:04:90:1c:13:cf:
87:dd:00:7f:68:ef:bb:c5:b0:fe:7b:96:0c:f7:d8:
31:aa:22:ff:80:08:c2:bd:72:89:30:cd:06:49:53:
10:ca:13:c0:c4:54:19:9f:70:8b:94:85:2c:1b:39:
b3:46:45:a9:83:eb:03:85:28:c8:c8:88:bd:1d:0a:
57:a1:3f:32:6d:72:e4:6c:46:c0:b7:3f:05:fd:b8:
fd:fe:67:f8:d6:d1:d4:04:0f:68:dd:46:bf:f1:40:
03:d5:fc:4d:ba:b6:58:55:3f:53:b2:24:f6:f4:43:
50:ee:3c:74:1d:29:0d:3a:58:2b:b0:2b:4a:4d:12:
b8:e6:bc:9f:8b:ce:03:e9:38:5d:51:f8:23:a9:51:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4A:E2:32:35:E8:2A:63:10:67:A1:1B:F2:78:58:14:EA:7F:F5:C2
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS198351.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:fd:06:15:8c:4e:3f:73:1d:c6:b7:73:89:e0:40:15:0f:39:
ff:d0:15:4b:c3:31:4f:68:3f:4e:38:ad:e6:60:a2:be:7b:71:
0d:89:d0:6e:b9:83:19:09:76:e9:7c:a0:7a:a3:0a:dc:f3:cd:
40:4f:b6:e6:a4:4d:c8:5f:0a:99:cb:f8:f0:64:d1:1f:53:11:
c4:1e:3c:7c:d1:7e:69:55:9c:e0:fe:a5:4e:ec:30:f7:aa:b8:
b1:44:c2:18:3b:f9:e6:6a:d0:e2:26:52:97:8b:df:01:14:6f:
98:f7:7e:e2:fb:05:42:27:ad:7b:da:08:66:d2:c7:7b:c4:81:
20:94:54:6c:db:d4:c4:7b:80:5b:6b:25:b9:99:54:75:af:44:
93:80:33:b3:e9:59:d1:c1:47:1e:00:89:e6:96:fd:93:f3:e4:
36:08:a9:52:c1:ff:c8:98:8f:59:83:4f:2f:34:5f:b0:bf:1d:
67:af:57:29:93:24:03:55:4b:a5:54:86:37:9f:f1:11:37:7c:
86:b6:32:0f:c7:c1:59:d2:0c:53:a9:bf:57:95:a1:77:f4:37:
e3:f2:cb:66:b9:09:82:0a:be:dd:f4:24:04:d0:e2:5d:53:ba:
4c:20:4e:36:de:72:18:88:6a:0d:c3:5a:e6:07:4d:be:89:da:
5b:29:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org