Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208068.roa
File: AS208068.roa (raw, json)
Hash identifier: XnWlkuidjWQ60ovKbuB09h0lcahVkbNY8PjQ80g/HRc=
Subject key identifier: 70:ED:AC:7F:4F:53:EF:72:AA:9C:D0:28:13:A4:B5:5F:C6:5D:03:13
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 4749D372D74499670F22B18D0400549B9C4A51AB
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208068.roa
Signing time: Mon 09 Jan 2023 00:26:28 +0000
ROA not before: Mon 09 Jan 2023 00:21:28 +0000
ROA not after: Mon 08 Jan 2024 00:26:28 +0000
asID: 208068
IP address blocks: 45.149.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:49:d3:72:d7:44:99:67:0f:22:b1:8d:04:00:54:9b:9c:4a:51:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 9 00:21:28 2023 GMT
Not After : Jan 8 00:26:28 2024 GMT
Subject: CN=70EDAC7F4F53EF72AA9CD02813A4B55FC65D0313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:1f:99:8b:93:bb:9e:46:97:49:7a:6c:60:
96:31:7d:23:45:47:3c:c4:aa:9e:2e:23:81:ab:22:
95:ea:53:1b:6b:62:0f:36:ad:41:ad:a9:e4:c5:b1:
d7:80:c0:51:c6:06:55:26:37:fd:33:17:86:0b:f0:
4e:6c:78:e4:c5:22:13:5b:ab:fc:9c:eb:e4:76:96:
a2:92:92:47:24:b0:8d:65:48:bc:b5:37:8f:a1:a2:
c6:24:c7:47:5f:18:b1:4c:b8:fd:dd:9d:7e:0f:84:
97:33:d8:72:82:e2:71:8b:9c:44:b3:36:a7:0f:d4:
39:da:78:cd:d3:81:f1:f2:2b:53:d8:b2:21:a9:a7:
a2:5a:37:f7:d8:c3:9e:33:a0:08:64:d6:34:8c:c1:
86:df:46:cc:5b:61:3f:5b:57:a1:70:ea:27:c7:24:
48:ca:2c:ac:b8:67:96:1f:d8:34:e3:9a:25:40:e8:
b8:a6:c9:d3:b6:31:0f:23:ae:9a:e0:9c:34:fb:4e:
b5:6e:ff:51:09:eb:aa:a7:be:50:a0:25:86:84:f3:
f6:bd:71:73:da:7e:7f:f4:5d:23:8b:e8:50:6e:cb:
0d:f4:d8:85:79:30:c3:00:cc:a2:30:5c:20:dd:1a:
43:04:c8:4d:33:d4:bd:b5:ce:e1:ec:87:87:9f:24:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:ED:AC:7F:4F:53:EF:72:AA:9C:D0:28:13:A4:B5:5F:C6:5D:03:13
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.185.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7e:f2:90:83:36:15:e3:14:eb:b1:ee:a6:99:b9:a7:60:97:
b3:79:55:34:c4:7a:23:73:b9:10:77:bd:a6:3b:31:d3:08:27:
f5:3e:a1:e3:9c:62:f0:c0:62:16:8b:f2:12:c9:10:0f:1b:92:
e5:74:d0:c3:68:d3:78:95:7b:e7:19:c1:e7:08:7a:99:92:9d:
a6:25:a0:1a:3b:9c:f8:d5:1e:0c:11:3b:7c:64:e3:81:60:f3:
93:55:f3:38:5a:da:e9:30:49:6a:83:8c:e3:a4:34:71:9b:20:
1e:d2:3c:98:49:8e:dc:02:9b:2c:8d:93:46:b9:cb:42:30:d4:
5a:b4:7c:bb:d3:50:ba:b4:cd:0c:07:17:ae:19:ae:92:fe:14:
ea:0e:75:7a:80:a6:6f:5d:4a:2c:a4:58:a5:bc:7b:99:24:5d:
6b:24:7c:d0:75:26:92:1f:4f:23:cf:18:07:03:bf:45:45:9d:
b5:5e:54:95:a5:dd:06:f4:f5:0e:e4:6f:6d:af:f8:84:29:1e:
3f:10:e1:5e:aa:f4:55:97:c6:00:75:76:5b:eb:33:e4:fa:d0:
d0:a5:7d:04:51:51:1e:27:50:6b:18:20:a9:c3:16:a3:fa:ef:
df:e1:01:40:da:c6:0e:b1:97:5f:8e:3c:29:40:6f:89:50:ca:
00:e6:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org