Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS200636.roa
File: AS200636.roa (raw, json)
Hash identifier: fYAJOr3wxTSXC5bL9pADKhbAct0fWavkava2KZPzj00=
Subject key identifier: D6:7F:5E:A6:F3:B6:69:CE:17:27:B9:22:2D:7F:6F:A0:56:83:32:1A
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0E17F3E67277046FEF410A3383EAACDDB68CF0E5
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS200636.roa
Signing time: Fri 19 Jan 2024 15:25:01 +0000
ROA not before: Fri 19 Jan 2024 15:20:01 +0000
ROA not after: Fri 17 Jan 2025 15:25:01 +0000
asID: 200636
IP address blocks: 45.154.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 11:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:17:f3:e6:72:77:04:6f:ef:41:0a:33:83:ea:ac:dd:b6:8c:f0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 19 15:20:01 2024 GMT
Not After : Jan 17 15:25:01 2025 GMT
Subject: CN=D67F5EA6F3B669CE1727B9222D7F6FA05683321A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:6d:92:a6:00:ee:8d:1d:46:1e:b1:83:f4:
3a:2e:eb:d6:f4:07:d1:ec:4d:c8:7c:f0:f1:6d:8d:
19:16:8c:24:f2:a8:48:07:4d:af:2f:1c:8e:d9:e7:
9d:bd:1a:65:97:b3:81:ad:e4:21:2f:7f:47:2e:71:
a2:60:79:10:14:b7:ba:33:b8:f2:e0:cd:1a:5d:22:
cf:c2:5c:e1:07:d0:bb:8c:8b:02:43:4c:16:ca:47:
78:85:8f:8d:b9:b1:82:d6:97:58:c8:5c:e7:df:52:
57:de:70:fc:a1:8d:fc:31:e4:eb:a7:41:d6:ff:a3:
3a:c5:b5:7c:05:14:ff:69:7d:67:56:9f:ce:02:e5:
85:e1:08:99:df:ee:cc:23:1f:d2:d9:3a:9d:cc:4d:
61:12:93:88:a6:e2:5b:d5:f1:4f:f3:e0:06:df:55:
fe:19:69:41:dc:55:90:68:88:ae:61:95:c4:0a:0b:
b5:fc:4b:cd:d4:ba:c1:bb:99:01:fc:db:f4:b0:37:
a9:13:3e:18:8b:d0:7e:a4:a3:32:23:e3:fb:a0:bb:
d1:1e:67:5a:b7:dd:da:53:09:9f:b5:d2:65:2e:7b:
05:d5:45:e9:9d:0a:fa:a1:1c:80:17:33:e5:fe:9c:
cc:b0:73:bf:47:c1:ad:9b:4c:4b:8f:90:94:5f:60:
8d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7F:5E:A6:F3:B6:69:CE:17:27:B9:22:2D:7F:6F:A0:56:83:32:1A
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS200636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:41:ca:7a:0b:2a:00:d7:f2:52:09:f3:f6:b4:7a:50:6e:00:
0e:0f:0c:28:09:e0:34:99:38:25:d5:1a:eb:8f:c3:0c:f9:14:
17:b6:90:dc:a8:2d:7b:45:36:d8:c3:b5:bb:2e:89:dd:4d:2c:
f5:9d:6b:48:2f:a7:ed:04:e6:3e:7a:1c:86:01:e6:64:10:76:
3f:fc:aa:8b:0c:5e:75:18:6a:44:4b:ef:87:11:3f:f2:a4:2d:
eb:b6:85:0c:29:62:34:9f:5b:5d:90:79:70:ed:f5:2e:a5:ae:
b8:03:c8:45:58:4c:e3:2e:81:50:ba:6f:d2:10:d9:d1:eb:95:
1c:12:b6:94:15:68:82:7d:20:2e:8d:37:47:54:b8:7d:cd:bb:
8e:5e:68:cd:93:b7:db:d3:de:a7:a3:66:5d:bd:c8:fb:e1:25:
ad:85:c8:ec:f2:67:5a:62:19:9b:32:98:60:ec:ef:30:53:a4:
5a:dc:b4:ce:8c:d9:72:c5:5a:03:e9:b1:5b:a8:74:3f:fa:01:
51:a5:6f:5f:bc:7b:be:76:30:a3:9b:a5:7f:34:7d:fe:13:65:
97:a4:45:0b:4e:b9:fe:7c:a8:de:a3:8e:4a:ae:6a:ee:bb:b3:
93:e2:89:74:bf:01:96:1a:87:c8:a7:08:29:c5:88:3b:8f:10:
16:94:3d:15
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUDhfz5nJ3BG/vQQozg+qs3baM8OUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNDAxMTkxNTIwMDFaFw0yNTAxMTcxNTI1MDFaMDMxMTAvBgNV
BAMTKEQ2N0Y1RUE2RjNCNjY5Q0UxNzI3QjkyMjJEN0Y2RkEwNTY4MzMyMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQ22SpgDujR1GHrGD9Dou69b0
B9HsTch88PFtjRkWjCTyqEgHTa8vHI7Z5529GmWXs4Gt5CEvf0cucaJgeRAUt7oz
uPLgzRpdIs/CXOEH0LuMiwJDTBbKR3iFj425sYLWl1jIXOffUlfecPyhjfwx5Oun
Qdb/ozrFtXwFFP9pfWdWn84C5YXhCJnf7swjH9LZOp3MTWESk4im4lvV8U/z4Abf
Vf4ZaUHcVZBoiK5hlcQKC7X8S83UusG7mQH82/SwN6kTPhiL0H6kozIj4/ugu9Ee
Z1q33dpTCZ+10mUuewXVRemdCvqhHIAXM+X+nMywc79Hwa2bTEuPkJRfYI0TAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU1n9epvO2ac4XJ7kiLX9voFaDMhowHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjAwNjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZpq
MA0GCSqGSIb3DQEBCwUAA4IBAQBOQcp6CyoA1/JSCfP2tHpQbgAODwwoCeA0mTgl
1Rrrj8MM+RQXtpDcqC17RTbYw7W7LondTSz1nWtIL6ftBOY+ehyGAeZkEHY//KqL
DF51GGpES++HET/ypC3rtoUMKWI0n1tdkHlw7fUupa64A8hFWEzjLoFQum/SENnR
65UcEraUFWiCfSAujTdHVLh9zbuOXmjNk7fb096no2Zdvcj74SWthcjs8mdaYhmb
Mphg7O8wU6Ra3LTOjNlyxVoD6bFbqHQ/+gFRpW9fvHu+djCjm6V/NH3+E2WXpEUL
Trn+fKjeo45Krmruu7OT4ol0vwGWGofIpwgpxYg7jxAWlD0V
-----END CERTIFICATE-----
Generated at Tue Mar 19 14:59:08 2024 by rpki-client on console-fra.rpki-client.org