Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS200019.roa
File: AS200019.roa (raw, json)
Hash identifier: ola+HqYF620kP/oFBiwed6tmQSsVsualQTTHhChdOY4=
Subject key identifier: 95:E3:0B:C9:68:2C:DD:0E:77:97:4D:37:F9:F8:5B:73:99:FD:43:18
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 13DC62F676575AEC5422C9ECCFBC5A47F613C8FC
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS200019.roa
Signing time: Fri 23 Jun 2023 07:49:36 +0000
ROA not before: Fri 23 Jun 2023 07:44:36 +0000
ROA not after: Fri 21 Jun 2024 07:49:36 +0000
asID: 200019
IP address blocks: 45.152.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:dc:62:f6:76:57:5a:ec:54:22:c9:ec:cf:bc:5a:47:f6:13:c8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 23 07:44:36 2023 GMT
Not After : Jun 21 07:49:36 2024 GMT
Subject: CN=95E30BC9682CDD0E77974D37F9F85B7399FD4318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f5:50:fb:f3:db:ad:d9:53:64:69:04:44:e5:
50:90:75:20:78:82:55:d9:8b:f7:2b:92:f1:cf:05:
bf:b3:7a:08:e4:f9:75:6a:c3:be:ac:00:20:3f:b2:
aa:23:44:70:58:17:19:a0:5e:63:16:de:89:48:49:
7d:56:51:08:ac:60:e9:55:92:f3:c3:f1:62:ab:15:
51:2c:39:17:46:79:db:d3:d0:78:83:43:9f:49:89:
1b:b3:bd:f1:1e:a1:26:f7:f1:bc:74:b7:07:b8:e9:
45:8f:88:68:1e:48:96:21:09:73:f6:87:3a:91:c4:
8e:f5:8a:7c:a2:b6:7b:b1:9c:4a:4f:60:5f:be:e1:
d8:b2:78:1b:57:ad:48:ef:39:d3:c1:95:e3:65:0a:
2f:65:cb:01:5c:6d:3a:50:45:9f:a4:e5:26:5c:8d:
1f:52:c8:b4:1f:d8:d7:06:65:0e:52:87:f5:03:25:
ec:7f:96:29:49:0a:1f:9e:c2:a1:d9:b5:cf:73:be:
50:6c:92:d9:91:a6:79:7f:45:33:ae:0f:2f:47:19:
18:c4:43:e9:f3:b5:4a:57:06:5c:52:14:4c:bd:5a:
5b:d8:a6:9f:34:9d:8c:cf:e8:e7:6a:d1:43:30:9b:
96:59:d1:c3:c9:ba:4e:de:24:24:f6:33:c1:a7:ef:
d4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E3:0B:C9:68:2C:DD:0E:77:97:4D:37:F9:F8:5B:73:99:FD:43:18
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS200019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.243.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:b3:35:9d:1b:59:da:fd:9e:20:ed:8c:5a:11:fd:8a:e8:6f:
f6:c5:c1:0c:1f:f4:41:34:df:0e:d6:af:d3:86:70:0a:49:00:
af:ae:a9:85:d1:27:6d:78:74:e0:cf:dd:a3:1a:1f:18:18:ce:
55:07:75:e0:2b:51:84:5e:ff:85:71:a5:b5:36:d0:2f:25:16:
2b:9a:de:a1:25:42:6d:4b:08:a0:5e:a2:86:a6:a1:5b:31:35:
28:bd:77:be:f7:bb:a1:fc:61:d5:aa:f7:76:6d:b0:84:44:a2:
cf:76:98:b2:2f:c5:4e:22:db:95:89:de:37:ad:a5:a7:75:7f:
24:de:17:98:3d:b7:50:0c:75:17:86:4f:02:fa:dd:25:84:bf:
b2:d1:45:cd:1c:fb:6e:90:d5:d4:25:41:ec:3d:1f:60:b9:0c:
fc:57:af:e5:ec:c5:b1:12:74:6d:f7:b9:cf:da:c6:58:9f:10:
f5:9f:77:ad:bd:57:6f:52:cf:89:5a:88:2f:6d:d5:8f:57:57:
af:6c:4f:e8:0e:6d:88:ef:51:ca:db:ed:69:1b:fe:58:c3:4a:
ae:ca:44:55:77:e1:64:74:5a:5f:f4:a4:50:0e:15:a0:87:02:
a0:9c:ca:8f:77:f1:8b:b6:77:27:0c:60:84:e5:7c:f7:50:1d:
93:24:a8:57
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 23 00:38:49 2023 by rpki-client on console-fra.rpki-client.org