Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS209260.roa
File: AS209260.roa (raw, json)
Hash identifier: JvzLTXd3D8IrEZ1/NUReDMRCfYuLKE4SLljMHrsthgQ=
Subject key identifier: A3:F9:C8:CA:2C:BF:B0:8B:DF:A8:12:43:E6:E3:F4:B2:49:79:15:3A
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 121584E36A0A1A9E49FDC4A5455F85B8EBF367A5
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS209260.roa
Signing time: Wed 17 May 2023 00:00:03 +0000
ROA not before: Tue 16 May 2023 23:55:03 +0000
ROA not after: Wed 15 May 2024 00:00:03 +0000
asID: 209260
IP address blocks: 45.152.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:15:84:e3:6a:0a:1a:9e:49:fd:c4:a5:45:5f:85:b8:eb:f3:67:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 16 23:55:03 2023 GMT
Not After : May 15 00:00:03 2024 GMT
Subject: CN=A3F9C8CA2CBFB08BDFA81243E6E3F4B24979153A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9a:a7:71:4f:f8:15:e0:f4:74:bd:05:ae:91:
00:00:96:2e:b1:38:bf:d6:04:36:98:3c:41:8a:92:
d4:09:7b:1b:89:1c:e3:4a:1f:71:1e:4f:16:90:ba:
11:cd:14:4d:40:e0:40:82:49:23:ef:cb:f3:55:06:
d5:fd:4c:57:8d:09:63:2d:9c:b2:8a:47:5e:3b:9d:
b9:c3:1e:ff:d6:00:c0:4a:86:d5:44:5d:5f:6b:c0:
65:fe:4b:a1:c7:08:e1:fd:06:2c:53:f2:42:80:bb:
22:74:91:06:1d:f9:cf:d4:6a:8b:60:76:c1:64:17:
24:98:cb:49:09:8d:7b:38:30:42:89:3c:29:08:3f:
8b:ea:4f:66:39:a4:47:bd:a9:d4:ef:56:9a:02:f5:
da:3e:97:93:21:aa:76:23:97:09:21:38:cb:47:d1:
ed:0a:ea:e4:78:54:f9:01:9b:3b:9d:90:cc:a2:2b:
b9:e4:e1:fe:1e:72:6a:44:aa:ce:d8:b7:b0:56:99:
ac:b4:98:74:e4:7e:ee:83:f2:b3:99:7c:bb:2e:63:
42:7f:b0:64:fd:aa:af:09:ab:5d:5c:26:23:17:6e:
c5:19:b6:5a:b8:8a:ea:ec:b3:3a:75:4d:83:e4:d5:
d9:88:fa:c4:6b:b5:c2:dc:5e:70:df:66:40:fb:36:
96:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F9:C8:CA:2C:BF:B0:8B:DF:A8:12:43:E6:E3:F4:B2:49:79:15:3A
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS209260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.242.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f8:2c:6b:b5:d3:dd:9b:a0:48:df:31:4a:a5:dc:5d:9e:0d:
8a:84:00:31:52:2c:63:aa:f8:4d:72:60:47:37:6f:c7:9f:bd:
0b:22:fd:5a:c4:23:53:34:b9:01:91:9e:c3:41:2a:b3:aa:65:
5e:02:98:4e:0e:99:ac:bc:07:ee:8a:b5:89:83:36:fc:1d:4e:
ae:e7:9a:34:14:ce:6d:db:40:8b:79:e7:2b:05:03:d0:6b:08:
5c:1f:f4:ce:46:a9:34:a8:7f:0e:35:d4:e3:52:3c:c2:f5:1f:
2a:e4:a2:0b:21:da:39:8c:66:9d:85:a3:20:e9:6c:42:cf:ec:
50:e4:29:8f:42:54:3d:16:76:5e:01:fb:bd:b4:82:71:1a:e7:
21:c6:4f:ac:3f:1e:e5:b9:31:92:fd:d6:13:d1:55:33:b7:19:
3a:88:e3:b3:a0:63:e1:7b:82:fb:9e:3b:d2:1f:d3:e8:a6:9e:
b6:18:04:d0:f3:25:0e:08:83:74:db:72:05:62:c3:e7:a0:a0:
ef:c2:7d:68:ed:05:2e:ff:6d:06:fb:2e:23:20:e1:42:d9:9b:
a6:e8:bf:21:9e:1a:a6:65:31:3b:0f:e2:18:5f:ec:56:87:5e:
49:39:68:9e:4d:60:a5:db:63:64:22:8f:49:e2:e7:fc:c3:0e:
45:99:4c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org