Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207459.roa
File: AS207459.roa (raw, json)
Hash identifier: NnzS9C2bLX73Y/ADQsK0pk6y4MHuQgNfjoA8pyBIBwk=
Subject key identifier: 19:98:CE:6C:9C:FF:59:19:CF:FE:02:15:2D:5F:87:0D:D1:09:B1:EF
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6C90C8CFAACDB96A67DCD6AA4235D534792BB1A3
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207459.roa
Signing time: Tue 28 Feb 2023 00:00:17 +0000
ROA not before: Mon 27 Feb 2023 23:55:17 +0000
ROA not after: Tue 27 Feb 2024 00:00:17 +0000
asID: 207459
IP address blocks: 45.146.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:90:c8:cf:aa:cd:b9:6a:67:dc:d6:aa:42:35:d5:34:79:2b:b1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Feb 27 23:55:17 2023 GMT
Not After : Feb 27 00:00:17 2024 GMT
Subject: CN=1998CE6C9CFF5919CFFE02152D5F870DD109B1EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:4d:17:75:0b:7c:99:90:aa:6e:f6:d6:d2:
b7:08:98:7e:17:c6:67:a7:24:56:ba:5b:50:ec:56:
b7:ea:84:98:c2:50:8d:5c:b5:24:a9:a4:d4:e4:e6:
e7:6a:10:7d:80:92:47:26:f3:4a:20:d9:06:00:dc:
86:3e:7b:42:29:d6:58:0f:13:d7:14:81:76:ba:f9:
a2:9d:b0:a7:c6:4d:4d:2e:67:15:db:72:4e:13:53:
32:6b:f4:38:d2:57:ff:90:87:2b:86:d1:a3:d9:8b:
9f:c0:01:56:fd:44:03:fc:41:00:2d:6a:a3:1b:ed:
3c:cf:33:ee:71:c1:4e:dd:1a:56:96:88:db:5b:9a:
b5:0d:ab:35:00:b6:a8:30:3a:fe:1d:48:16:05:a7:
a2:ed:1b:6c:bc:0a:67:00:4b:77:bc:96:a2:83:08:
24:1c:88:24:ff:af:b7:c8:7d:af:42:77:47:50:aa:
87:df:db:b5:5b:26:65:e0:ca:d2:56:ed:b7:d6:c1:
3e:d7:79:cd:3a:23:5c:4a:fc:e6:db:b4:18:8d:74:
08:ac:08:1c:7b:de:f6:b9:81:a5:01:df:73:26:77:
07:0e:7c:5f:02:3f:e1:ea:71:c8:a3:b0:14:72:8e:
5e:3a:4f:2c:61:a7:7e:20:b8:f5:e1:a3:54:be:3a:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:98:CE:6C:9C:FF:59:19:CF:FE:02:15:2D:5F:87:0D:D1:09:B1:EF
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.82.0/24
Signature Algorithm: sha256WithRSAEncryption
52:83:97:5b:2c:a4:0c:a0:99:0c:f5:15:6a:f9:8a:89:b9:01:
8f:d2:59:59:3d:47:db:26:c5:c1:64:a3:8f:f6:4b:bb:1f:76:
45:ba:d7:9e:53:0f:7e:bb:89:d5:30:13:88:f7:44:9c:47:42:
85:63:4a:e2:bd:a0:a8:05:39:40:aa:52:24:df:14:20:84:86:
2a:90:bf:0e:f9:12:87:2d:a9:a7:6d:07:c0:26:c3:46:e2:7f:
66:f1:c6:b3:f8:61:c6:e2:23:ad:30:4b:0d:67:33:4c:45:aa:
37:1d:35:7b:29:1e:8d:45:67:53:58:c4:f7:02:10:c0:36:3c:
3a:0f:0f:67:03:42:a1:9c:88:6c:15:f3:60:73:c9:05:06:41:
f7:ff:a3:65:62:ca:b1:6d:5b:66:46:6b:51:29:e5:09:1b:76:
e8:c6:64:ca:42:9f:71:2e:8b:be:b6:5d:91:15:aa:cf:ef:6f:
42:0f:7b:65:1d:49:3c:6e:11:46:0e:9b:59:e5:74:41:50:dc:
45:0c:f3:40:49:f5:2e:94:4d:b6:5b:1f:8e:94:47:2f:b2:c5:
3b:3c:71:02:af:90:f6:e0:af:1f:7b:bb:64:4d:58:e4:f5:c8:
5a:63:4d:1e:34:26:94:4a:3c:d3:56:20:05:a4:ba:7e:08:8e:
1d:ed:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org