Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205220.roa
File: AS205220.roa (raw, json)
Hash identifier: XjAF2F87AGxSh0nP/xBywuj6EXEqdCmc1iKy/2lhCC0=
Subject key identifier: 9F:FF:A6:22:5C:97:5A:5C:78:9A:A5:CC:11:21:A4:F3:87:E7:43:78
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: D47DDB23E7A7D9CE4310C8FC89FC5BA40E70BA
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205220.roa
Signing time: Fri 03 Mar 2023 18:10:54 +0000
ROA not before: Fri 03 Mar 2023 18:05:54 +0000
ROA not after: Fri 01 Mar 2024 18:10:54 +0000
asID: 205220
IP address blocks: 45.149.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d4:7d:db:23:e7:a7:d9:ce:43:10:c8:fc:89:fc:5b:a4:0e:70:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 3 18:05:54 2023 GMT
Not After : Mar 1 18:10:54 2024 GMT
Subject: CN=9FFFA6225C975A5C789AA5CC1121A4F387E74378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:e8:5c:6f:1b:70:d0:20:ad:fd:7a:2a:4d:
72:0b:da:43:08:f8:3c:a3:f9:34:8a:17:1b:ec:e9:
49:88:7f:08:e8:bd:c3:1d:46:e6:37:94:43:60:0c:
86:0f:27:13:99:fe:4f:76:c3:3a:88:07:36:cc:d8:
92:a0:ea:6f:ee:3f:f0:85:56:e5:4c:9a:38:1e:04:
b9:d0:5e:98:e8:6d:e1:70:4e:b3:af:9a:ba:d0:d7:
35:1c:36:2e:0d:1d:31:42:98:23:d3:6a:01:e9:48:
92:13:9c:be:81:a3:2d:fe:5b:f0:ec:7c:0f:3f:3a:
cf:18:71:70:f2:b5:b5:d4:13:5c:a8:a1:28:3f:f3:
fd:83:14:a2:d0:07:0f:e9:4a:13:75:c5:af:92:26:
a1:3c:43:a3:43:d1:ef:2a:22:1c:1a:c1:a4:6e:3b:
33:2e:ef:9f:d7:2e:36:c3:31:28:16:6c:8c:1e:db:
69:70:0e:99:4a:ff:24:b6:71:08:29:54:df:c9:ad:
b4:0f:76:8b:de:12:66:a7:04:26:8e:87:4a:03:17:
e1:6d:df:30:83:73:97:d4:7b:eb:ef:df:5e:00:0a:
09:b1:8f:d0:c1:b7:c9:61:bb:00:fa:9a:4a:c9:79:
f7:61:2f:53:06:68:0e:26:27:80:d1:06:39:0a:93:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FF:A6:22:5C:97:5A:5C:78:9A:A5:CC:11:21:A4:F3:87:E7:43:78
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205220.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d8:de:43:6f:5d:e5:c2:48:7d:b7:e6:d2:c2:ad:eb:b3:09:
92:9d:51:98:42:71:b5:35:ca:4e:a5:32:94:bc:2c:ba:2d:67:
bb:bb:ce:c4:fb:50:b5:af:f4:02:a3:2a:00:5b:7f:4a:76:82:
c6:2a:d8:0f:9c:4f:1a:35:fd:65:1a:40:ba:31:0e:aa:5c:87:
03:53:a1:eb:a3:95:fc:74:42:b5:4d:9e:ae:80:ca:5a:20:2c:
40:ab:b9:b1:b7:3b:65:fa:1e:70:e7:1c:4b:9f:9e:47:44:ad:
a6:5e:b8:0b:e1:be:5f:69:cc:81:d8:53:39:8d:4c:5f:04:37:
03:b1:41:d3:31:2f:13:75:96:cb:ef:20:55:c8:bb:38:e1:12:
01:7c:18:5d:ff:ca:a3:d0:c9:e7:1e:4b:25:7c:d4:95:64:8a:
7b:8e:00:72:1a:87:67:7a:07:42:7f:f6:47:cb:c8:41:d8:3e:
25:e5:4b:b4:a9:22:e8:7d:9f:f6:cc:b2:62:64:7d:f1:de:ec:
66:60:82:28:92:87:a0:e0:10:61:3a:df:8f:48:09:50:45:31:
ea:17:af:71:63:5c:df:bd:7a:93:32:6f:8f:e2:1c:67:59:44:
13:06:52:08:77:65:41:50:13:86:3d:a6:a6:21:46:db:31:61:
68:9f:6d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org