Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210703.roa
File: AS210703.roa (raw, json)
Hash identifier: aFxgxv3EWUhoaed4YhNVf4iHQi6+8sB0gICYMra0P7o=
Subject key identifier: 43:E3:28:F4:94:AC:3D:03:92:41:0B:2A:3E:1C:78:F9:77:40:76:8D
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 7ADFD255812723F63E58303E6219C64315A000DA
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210703.roa
Signing time: Wed 05 Apr 2023 00:00:12 +0000
ROA not before: Tue 04 Apr 2023 23:55:12 +0000
ROA not after: Wed 03 Apr 2024 00:00:12 +0000
asID: 210703
IP address blocks: 45.149.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:df:d2:55:81:27:23:f6:3e:58:30:3e:62:19:c6:43:15:a0:00:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Apr 4 23:55:12 2023 GMT
Not After : Apr 3 00:00:12 2024 GMT
Subject: CN=43E328F494AC3D0392410B2A3E1C78F97740768D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:a6:a5:3e:b0:55:be:fb:4d:12:6e:5a:34:
f6:84:09:03:50:f7:62:81:ba:50:60:8f:71:d1:25:
73:27:d2:4a:6a:e1:bd:ab:77:8c:57:79:07:8a:ef:
90:88:ad:ca:bd:cc:64:4c:98:08:ba:2c:1c:02:cc:
34:95:5d:5c:bc:14:b2:ec:0a:ae:b9:45:d3:9c:2d:
43:cd:c2:ac:f7:e1:50:e3:dd:6a:04:7e:6f:c0:8f:
99:60:0a:9b:b9:38:9e:5d:dc:11:70:8e:25:e5:43:
b0:3e:53:7e:e7:1b:39:bd:dc:ba:21:0b:b1:ab:b5:
d3:28:8a:f4:c4:a4:9f:cc:51:2e:1c:a1:6a:6e:01:
3f:6b:24:85:f7:a3:74:f8:66:0d:d4:d3:e5:4f:77:
52:05:cf:a9:da:71:76:05:8d:74:57:49:2e:85:e9:
2b:6d:33:62:4b:8c:45:b0:2b:4b:67:66:f4:10:b0:
03:50:86:a5:9c:9c:5e:13:33:dc:5e:2e:bc:72:cc:
0b:c1:f7:2f:5b:42:73:9d:0a:40:0c:86:20:42:21:
a2:21:b5:aa:49:1b:28:9d:54:c1:a9:8f:c4:93:64:
2b:be:2c:ed:d6:8b:3c:bf:13:48:d7:c8:9a:9c:32:
45:74:74:33:3e:ed:23:79:89:65:b4:ca:82:3c:14:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E3:28:F4:94:AC:3D:03:92:41:0B:2A:3E:1C:78:F9:77:40:76:8D
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210703.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.100.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e0:2d:63:4d:e5:40:07:9d:62:1a:69:d8:f1:75:ce:86:e6:
df:0b:70:2c:9b:d7:be:6e:50:3d:ba:e0:f6:d5:54:6b:ae:a6:
3f:9c:dd:6f:17:c1:22:35:13:75:22:56:bc:8a:17:4e:3b:9f:
af:91:15:07:01:86:2d:1f:d3:0e:d8:c0:e4:02:67:8b:05:20:
7e:9b:25:a4:11:27:d9:79:44:7c:5d:07:00:85:28:37:18:b5:
81:dd:f1:9c:0d:d6:b9:95:27:c2:3b:7a:68:1a:b5:b1:51:ea:
af:04:a5:9c:20:df:2a:0a:58:99:89:ad:41:c0:78:df:07:4c:
ca:bb:4a:7b:1f:4c:12:e5:82:4a:02:d0:a6:92:6b:88:a1:54:
43:d1:67:2e:6a:df:8f:9f:db:9a:9e:b6:8b:fb:e7:c0:55:3c:
31:e5:ce:21:ba:4c:d7:15:0a:60:84:b5:0a:5e:0d:4c:30:a7:
fa:98:28:14:f9:c9:3f:63:78:cf:9d:3c:22:2b:b7:87:43:18:
c7:52:66:2f:4e:7c:88:86:65:0f:01:f5:17:f6:ca:75:e8:11:
f3:06:8e:0f:13:c2:88:1d:5e:f2:2b:20:0b:c4:32:67:e4:29:
09:13:ac:a2:ae:19:88:30:39:18:5a:39:3f:15:cc:93:8d:c1:
a4:ed:53:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org