Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205450.roa
File: AS205450.roa (raw, json)
Hash identifier: HDLZMDf+2turrr/AsQZ7FOEX0dzUDCnaHRF56B27H1M=
Subject key identifier: 60:1B:75:CF:3C:D2:FF:AF:57:31:06:68:33:36:89:0C:21:8F:37:F9
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 568F542FE3BA966BE37159CA8FC0A66E597591C1
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205450.roa
Signing time: Thu 10 Aug 2023 16:14:36 +0000
ROA not before: Thu 10 Aug 2023 16:09:36 +0000
ROA not after: Thu 08 Aug 2024 16:14:36 +0000
asID: 205450
IP address blocks: 45.153.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:8f:54:2f:e3:ba:96:6b:e3:71:59:ca:8f:c0:a6:6e:59:75:91:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 10 16:09:36 2023 GMT
Not After : Aug 8 16:14:36 2024 GMT
Subject: CN=601B75CF3CD2FFAF573106683336890C218F37F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f7:96:e7:13:57:76:d9:20:85:af:2c:14:a6:
e7:8e:0b:37:d4:35:d1:b2:68:25:ee:c5:27:5e:0e:
6f:46:90:70:9b:34:9a:62:31:1a:5c:6c:0f:80:f0:
a5:6b:f8:80:dc:0a:ec:97:04:5d:92:53:75:7c:be:
63:91:ed:15:3e:cb:ac:5f:73:32:d2:04:e6:37:3d:
84:44:46:16:1a:f0:e9:4a:74:8a:a4:d0:17:cb:69:
7a:24:52:96:84:ae:37:bc:c5:9e:0e:48:33:37:8f:
2a:eb:8f:3e:cb:8f:d7:97:b0:d6:7f:3d:8f:ae:93:
09:4a:ae:74:4c:8d:a4:d2:09:e8:68:55:8e:ff:eb:
32:57:82:6b:aa:f4:09:f2:1d:6b:07:e8:97:2d:ed:
86:e2:a5:5d:56:6a:e7:c6:dc:83:b2:aa:2b:14:f4:
e9:00:e9:6f:b1:38:76:22:c1:b1:58:5b:5b:ba:85:
dd:23:55:23:19:1e:58:2b:6f:ac:2b:da:c5:7d:8d:
0b:4c:81:d2:78:2c:48:f4:8e:e8:33:91:4e:d9:95:
15:7c:74:9d:28:c9:73:03:85:cd:a7:83:4d:be:f0:
3a:b8:95:63:12:9c:17:3f:fd:aa:7a:b8:24:96:33:
20:75:2f:79:a4:e8:3c:5e:9b:a1:07:63:01:be:29:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1B:75:CF:3C:D2:FF:AF:57:31:06:68:33:36:89:0C:21:8F:37:F9
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205450.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.5.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:55:af:33:78:80:14:b6:3b:a7:db:7e:43:4b:b8:a6:e1:df:
9d:9a:bf:af:0e:fe:2e:8a:e7:58:5d:1b:6a:9c:9d:c4:87:7f:
a1:15:28:f0:ab:15:84:8c:21:24:4d:0b:59:aa:f5:5f:3d:51:
f9:a2:15:22:68:58:7c:17:dc:cb:47:f3:65:55:e8:d7:4c:d5:
96:ac:ed:3b:e4:f2:f9:bc:5c:ba:02:c4:a6:7a:51:5a:a9:49:
fe:81:c4:7a:36:92:8c:3d:ff:23:f6:e7:e4:ca:7d:b2:49:22:
f3:54:31:91:01:c8:bb:84:49:4d:d5:06:4d:ce:5e:4a:39:10:
8b:e2:7d:1b:d9:ac:ee:b3:7d:2a:90:ef:6d:94:79:a9:75:93:
a5:a0:82:e2:b3:0e:03:36:01:c2:7d:27:ad:71:2d:25:00:a9:
04:92:b8:87:68:5c:70:5e:7d:54:12:f2:9c:d5:cc:0f:39:09:
4c:cd:43:d5:c2:32:33:90:a2:89:43:86:25:52:d8:b7:05:5c:
aa:b7:f4:c1:15:fb:7a:eb:cd:21:1d:27:07:6b:ec:6c:9c:06:
71:80:1e:f2:9f:dd:b9:45:e2:46:81:83:42:c6:2b:7d:0c:55:
e1:b7:2c:d8:6a:24:14:83:db:79:10:54:a4:80:53:7c:71:df:
99:56:ba:12
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 11 08:02:28 2023 by rpki-client on console-fra.rpki-client.org