Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208485.roa
File: AS208485.roa (raw, json)
Hash identifier: 4XQVY1QvW3siPsPwCnwTtKGlD13SDA8qHGasP/MfQ10=
Subject key identifier: C9:64:FB:A1:C6:FC:D0:2E:13:02:A0:C8:CB:61:A0:61:D6:70:F3:7E
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 55479CA367EF47607CBC808E7A44360EC3BC2DC6
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208485.roa
Signing time: Fri 05 May 2023 18:26:38 +0000
ROA not before: Fri 05 May 2023 18:21:38 +0000
ROA not after: Fri 03 May 2024 18:26:38 +0000
asID: 208485
IP address blocks: 45.153.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:47:9c:a3:67:ef:47:60:7c:bc:80:8e:7a:44:36:0e:c3:bc:2d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 5 18:21:38 2023 GMT
Not After : May 3 18:26:38 2024 GMT
Subject: CN=C964FBA1C6FCD02E1302A0C8CB61A061D670F37E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:7e:92:37:e2:e9:15:51:c9:d7:4a:a3:15:
e9:4c:08:13:65:5e:ae:fe:e7:5c:47:91:99:1f:ec:
6c:ee:63:a3:84:2c:37:5e:46:a0:c7:03:23:6a:6a:
89:70:df:c6:26:9d:0b:1b:61:09:b9:19:fe:83:fb:
6f:df:14:22:74:80:d6:a3:c2:79:07:51:ce:77:17:
bf:ba:5d:70:ea:39:dc:ee:c1:fc:f5:2c:1c:bd:a5:
62:85:78:fc:47:89:13:c4:9a:eb:92:f7:08:b6:13:
37:bb:2a:a7:7c:07:3f:77:5f:df:d5:4b:88:03:0b:
08:e8:a0:ce:94:3c:a9:d8:66:15:68:8c:82:42:da:
ef:8b:62:50:0c:f0:35:12:69:6c:72:af:ae:42:ff:
48:e1:fa:25:63:ae:a6:53:23:96:3b:e5:4e:f3:d6:
69:d4:58:81:b2:70:d2:c3:68:e5:dd:6b:a8:d1:e6:
f7:47:c3:98:d0:e1:5e:eb:d3:4c:2d:95:93:88:0d:
9a:0b:70:74:dd:21:05:ca:b5:84:3d:85:0c:bc:0b:
81:1b:98:e6:1f:ae:3e:b8:27:16:fb:6a:fd:54:7d:
05:60:7c:8e:60:cf:32:60:8d:c2:50:17:c8:72:32:
96:fe:37:26:cc:b6:52:c3:1f:b3:45:30:1b:3b:38:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:64:FB:A1:C6:FC:D0:2E:13:02:A0:C8:CB:61:A0:61:D6:70:F3:7E
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208485.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.5.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d6:dd:e3:33:8f:91:3f:fa:ea:77:14:9f:1f:7d:a2:b3:4d:
09:b5:eb:00:c2:17:84:d3:ea:af:32:38:ef:78:eb:fd:b0:7e:
d5:fe:1b:27:40:ce:f6:98:19:78:6c:7c:63:7f:bb:aa:15:8f:
80:b7:c4:50:3e:d0:59:a2:b3:01:65:05:03:72:71:6b:67:58:
ab:b5:df:a3:52:67:6c:bb:17:be:3f:7b:f7:68:5a:be:ac:16:
fe:77:85:a6:9d:98:06:bb:5c:a1:52:49:33:d4:f8:94:ed:50:
7b:be:49:9c:f3:1e:e9:ed:9a:d5:aa:3e:a5:c0:20:6f:21:e2:
e7:a4:40:22:3b:1f:5b:24:c6:dd:be:4b:08:ac:c0:eb:ad:46:
cf:3c:4a:f2:7b:4d:37:93:05:11:56:f1:4d:d7:c8:86:78:91:
f6:24:0f:78:5e:be:52:33:aa:fd:16:bd:b8:23:28:3b:ea:ab:
af:e4:1d:aa:3f:a1:9e:96:b4:e3:d0:1f:5d:bb:b7:99:c5:09:
a6:7b:c5:c8:cd:f4:24:10:fc:7f:3b:d4:cc:6e:d5:ac:72:b4:
ed:43:ec:5f:9f:47:fe:9b:05:a9:0b:f0:e3:06:29:82:70:4c:
88:9b:2e:e1:d4:98:80:ce:97:05:14:70:23:20:04:04:47:47:
67:cb:ed:1d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUVUeco2fvR2B8vICOekQ2DsO8LcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yMzA1MDUxODIxMzhaFw0yNDA1MDMxODI2MzhaMDMxMTAvBgNV
BAMTKEM5NjRGQkExQzZGQ0QwMkUxMzAyQTBDOENCNjFBMDYxRDY3MEYzN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfz36SN+LpFVHJ10qjFelMCBNl
Xq7+51xHkZkf7GzuY6OELDdeRqDHAyNqaolw38YmnQsbYQm5Gf6D+2/fFCJ0gNaj
wnkHUc53F7+6XXDqOdzuwfz1LBy9pWKFePxHiRPEmuuS9wi2Eze7Kqd8Bz93X9/V
S4gDCwjooM6UPKnYZhVojIJC2u+LYlAM8DUSaWxyr65C/0jh+iVjrqZTI5Y75U7z
1mnUWIGycNLDaOXda6jR5vdHw5jQ4V7r00wtlZOIDZoLcHTdIQXKtYQ9hQy8C4Eb
mOYfrj64Jxb7av1UfQVgfI5gzzJgjcJQF8hyMpb+NybMtlLDH7NFMBs7OMy9AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUyWT7ocb80C4TAqDIy2GgYdZw834wHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjA4NDg1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZkF
MA0GCSqGSIb3DQEBCwUAA4IBAQBl1t3jM4+RP/rqdxSfH32is00JtesAwheE0+qv
MjjveOv9sH7V/hsnQM72mBl4bHxjf7uqFY+At8RQPtBZorMBZQUDcnFrZ1irtd+j
Umdsuxe+P3v3aFq+rBb+d4WmnZgGu1yhUkkz1PiU7VB7vkmc8x7p7ZrVqj6lwCBv
IeLnpEAiOx9bJMbdvksIrMDrrUbPPErye003kwURVvFN18iGeJH2JA94Xr5SM6r9
Fr24Iyg76quv5B2qP6GelrTj0B9du7eZxQmme8XIzfQkEPx/O9TMbtWscrTtQ+xf
n0f+mwWpC/DjBimCcEyImy7h1JiAzpcFFHAjIAQER0dny+0d
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org