Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS198361.roa
File: AS198361.roa (raw, json)
Hash identifier: GthNpf3ZnmSWNVTOtdya0GiENTVR13Euy6MLn0yIXNY=
Subject key identifier: 85:9B:F9:E6:16:9B:FD:DD:DD:45:4B:61:35:4B:1E:D6:93:85:0F:75
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1461A26DBE447B6F7ED2689CA55C8989044B0680
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS198361.roa
Signing time: Tue 13 Feb 2024 02:10:18 +0000
ROA not before: Tue 13 Feb 2024 02:05:18 +0000
ROA not after: Tue 11 Feb 2025 02:10:18 +0000
asID: 198361
IP address blocks: 45.151.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 03:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:61:a2:6d:be:44:7b:6f:7e:d2:68:9c:a5:5c:89:89:04:4b:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Feb 13 02:05:18 2024 GMT
Not After : Feb 11 02:10:18 2025 GMT
Subject: CN=859BF9E6169BFDDDDD454B61354B1ED693850F75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:36:18:90:1e:98:6f:d9:e4:0f:3e:e5:bd:
4d:4e:07:6d:52:b8:f6:e6:9b:e2:4b:e2:08:8d:0a:
66:ea:5c:82:b3:5b:ac:e2:20:d3:d8:77:d8:5a:e2:
0a:02:27:96:7c:93:0e:a3:08:16:22:92:2f:4d:ac:
2f:86:5a:72:fe:f2:97:35:bc:36:cf:b6:0f:2c:0a:
11:a1:0a:d4:92:07:b5:c2:16:1a:ab:b6:f8:b6:5a:
30:4e:dd:07:aa:c7:38:aa:3b:b0:7c:32:d3:bd:a2:
5e:08:6a:15:1e:4a:61:d1:ba:19:ab:78:0c:71:01:
79:72:1a:2e:f7:c3:fc:62:08:c7:19:b4:d9:b9:f3:
fc:ca:fe:3d:6a:c4:58:49:16:03:8f:e4:75:c4:26:
d7:b8:34:08:99:75:a6:3d:48:8b:bd:d1:1a:f6:d5:
9c:0d:82:11:84:02:4d:7f:9d:12:0a:67:c0:55:3a:
b8:0a:67:78:22:a5:56:d3:83:37:ee:51:a5:96:24:
7e:d7:52:49:5b:ba:62:93:9f:44:e8:d1:6c:d8:d0:
38:84:06:15:13:53:d4:1a:2c:29:26:6f:77:4a:87:
b4:e8:8d:ea:15:f6:c9:6f:fd:b3:8e:db:14:a0:ea:
eb:49:65:cd:45:a3:68:88:e8:c8:8d:6b:67:96:23:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9B:F9:E6:16:9B:FD:DD:DD:45:4B:61:35:4B:1E:D6:93:85:0F:75
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS198361.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.44.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ce:2d:c8:56:6d:dd:63:c5:66:fc:51:aa:8a:3e:4c:62:40:
f3:2a:2e:58:ee:58:8c:fd:e0:73:a0:1f:c6:65:20:28:c4:f2:
c9:ec:b9:93:ae:d8:fe:ef:00:8c:12:55:08:f6:2a:06:12:b5:
55:98:d5:5a:ff:aa:63:ef:bf:be:0a:e7:71:87:50:46:76:cf:
f2:09:b2:26:db:94:7a:af:32:bd:65:6f:4f:27:5b:68:e9:c9:
57:12:f5:de:5a:b5:2c:b6:a9:74:55:ba:4b:b9:fe:c3:32:a4:
01:fc:cc:00:ec:a9:64:5e:b4:5f:9c:1a:37:a9:75:a5:14:75:
f2:c2:98:f2:6d:b8:4b:a4:ca:2f:22:d7:b2:61:b9:f7:16:1f:
4c:51:09:03:64:7a:10:02:ae:a9:3b:95:5e:41:2f:23:da:c9:
7c:7e:f1:c6:16:d1:9a:4c:d9:30:ea:f5:5a:ac:75:5d:6d:18:
3b:ce:ca:56:46:05:6b:9c:8a:4e:c8:5e:df:34:71:26:ec:3b:
85:0b:27:76:38:e2:d5:35:07:2a:a3:7e:78:b1:eb:b6:ef:9c:
a7:94:7e:71:e3:c6:3a:8a:a1:42:31:37:b2:71:41:31:1a:63:
95:98:16:c5:2e:21:eb:fe:7d:a1:30:9b:39:82:9c:c6:e2:08:
e3:e6:94:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 05:56:32 2024 by rpki-client on console-fra.rpki-client.org