Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS201670.roa
File: AS201670.roa (raw, json)
Hash identifier: wpnKzVGgHl1vQjD2PLI3+YGcd59BtZ3aM3AtDTZOK24=
Subject key identifier: 79:F9:BD:59:3B:52:1C:6B:C7:59:35:64:AA:2C:68:99:7A:C0:93:7C
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 53D0CE96F93723A273C1CF1D4AC786628239F939
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS201670.roa
Signing time: Thu 07 Mar 2024 16:03:04 +0000
ROA not before: Thu 07 Mar 2024 15:58:04 +0000
ROA not after: Thu 06 Mar 2025 16:03:04 +0000
asID: 201670
IP address blocks: 91.199.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 12:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d0:ce:96:f9:37:23:a2:73:c1:cf:1d:4a:c7:86:62:82:39:f9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 7 15:58:04 2024 GMT
Not After : Mar 6 16:03:04 2025 GMT
Subject: CN=79F9BD593B521C6BC7593564AA2C68997AC0937C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:da:5c:ed:9a:72:11:82:11:65:a1:0b:b4:
9a:6f:56:15:ce:99:1c:ce:29:5c:57:0b:25:f3:d7:
ec:c2:bb:29:32:cb:18:0e:9b:37:44:74:16:c0:5d:
76:d9:97:12:32:c3:92:2a:2e:6d:39:b2:c9:76:b9:
db:eb:b6:b3:d1:82:85:47:e5:83:ba:15:09:fc:f6:
dc:1c:a7:15:dc:d6:35:b0:e8:f2:a0:e4:de:cd:81:
59:ad:98:5d:63:b7:65:ca:b7:43:89:de:93:ac:33:
ab:e3:03:48:5b:fa:05:09:21:1c:76:62:a6:03:6d:
97:5f:41:f8:cb:5b:4a:ec:32:44:52:4d:99:f2:df:
9c:34:2f:8e:a6:ea:25:77:d3:d3:aa:29:1a:f4:23:
e3:03:d8:78:73:cc:fc:b3:6a:aa:c1:78:93:10:fd:
24:02:2d:f2:a8:ec:60:84:df:e4:40:7e:03:74:da:
e8:87:d3:e4:ee:41:a2:e1:33:59:fa:23:96:af:2b:
0b:23:99:fd:8b:f0:87:a0:eb:1a:df:6f:01:6a:1e:
81:e5:11:ee:ef:aa:bd:c4:28:e0:b2:20:33:a7:3d:
cb:b0:bc:24:92:60:f4:05:1d:a5:5e:a8:27:b5:e0:
5f:9e:a7:7d:4d:2f:e1:c4:cd:c9:78:ba:ba:80:1e:
db:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F9:BD:59:3B:52:1C:6B:C7:59:35:64:AA:2C:68:99:7A:C0:93:7C
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS201670.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.163.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c8:ca:51:89:f4:b5:0f:f4:09:35:f8:77:d6:e5:0f:d2:22:
e7:ce:8b:8d:cf:ad:f6:23:f2:fe:c7:e4:d6:75:08:25:d7:4f:
07:08:1c:fc:b9:9c:80:ed:df:b4:1d:b9:42:0a:3f:39:d4:3e:
99:79:7e:60:51:45:2d:b9:4a:0c:c8:c8:62:4f:f4:6e:ed:34:
e4:c9:00:c8:52:da:a4:b0:86:e8:c1:1f:2e:a1:c0:68:f5:ca:
b0:08:01:ef:03:5f:94:0d:20:57:39:c7:3b:98:c7:b5:85:c8:
53:51:8b:e8:56:58:5f:9a:c4:b9:75:e9:79:6a:2d:f2:48:8e:
88:5c:dd:ae:75:da:67:e8:e2:fe:15:4d:d5:77:9c:4b:4c:21:
af:a8:4d:13:06:03:ee:f8:ca:7f:0c:3c:ae:b2:6b:df:3c:b4:
30:ff:49:8b:56:a4:42:f5:11:ca:72:c2:5d:68:c5:3a:b5:a3:
cd:95:11:40:93:5d:ad:0c:22:0d:98:b2:3a:b9:9b:03:fb:0a:
c3:32:ca:50:fc:69:aa:0f:f3:4a:59:ce:98:bc:f3:26:01:7a:
49:df:31:3d:9c:22:e9:4f:92:46:77:31:ba:fe:3f:36:7b:53:
8d:31:e9:5f:7f:94:d0:7b:ce:fe:f5:6d:de:20:ab:bf:e1:80:
f0:e8:08:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 16:53:27 2024 by rpki-client on console-fra.rpki-client.org