Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211287.roa
File: AS211287.roa (raw, json)
Hash identifier: ZECV8iderXH4qO6Q1U9IlWCbEtEjIB0r3VbBOlGMi6c=
Subject key identifier: 17:EC:B5:C4:AC:B5:46:4C:C0:C2:E1:9F:88:05:E9:1C:0C:01:8F:50
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 4F3232993FB309687648DF3C69FB5DC87025C7BA
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211287.roa
Signing time: Fri 17 Feb 2023 11:47:32 +0000
ROA not before: Fri 17 Feb 2023 11:42:32 +0000
ROA not after: Fri 16 Feb 2024 11:47:32 +0000
asID: 211287
IP address blocks: 45.154.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:32:32:99:3f:b3:09:68:76:48:df:3c:69:fb:5d:c8:70:25:c7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Feb 17 11:42:32 2023 GMT
Not After : Feb 16 11:47:32 2024 GMT
Subject: CN=17ECB5C4ACB5464CC0C2E19F8805E91C0C018F50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9d:de:b6:91:cb:8b:a2:0f:9d:d2:69:c5:c1:
b4:17:71:99:29:3a:90:1e:65:ba:89:2d:8c:14:09:
cb:6d:cc:4f:55:22:9c:9e:ca:98:16:01:70:b7:57:
13:38:f4:08:d1:e1:3f:29:46:40:cc:8d:b7:33:36:
fa:db:af:9c:da:fc:71:38:b7:ba:50:2a:8a:98:d6:
b1:62:a9:e5:f1:da:22:57:08:f6:d8:fa:1b:86:a7:
13:58:b3:6e:e2:75:ed:60:d4:33:7f:b9:84:69:c1:
7a:97:1e:43:e2:d9:f0:d1:59:7d:96:45:9b:88:59:
a1:c6:d3:4c:71:23:a8:71:17:d0:16:3e:fe:cb:1e:
4a:f4:10:02:c2:30:3b:ee:60:bb:cb:9a:5c:91:a0:
6b:6a:93:cf:06:1a:d8:0c:ad:0d:ad:a1:f2:bb:11:
9d:44:28:1f:06:d5:3b:24:7c:a4:20:97:47:6d:91:
ff:94:8c:8f:91:e9:e6:2a:5e:12:dd:36:0e:74:7b:
60:be:8c:8b:9d:36:b3:ff:04:53:1f:02:6b:33:ca:
7c:b7:44:6c:70:bf:50:1d:b1:aa:fc:0e:c9:36:d4:
d9:39:cc:b2:92:d8:81:36:d7:70:94:08:aa:70:0d:
95:56:5f:e6:78:7a:81:b3:10:e6:c2:79:3d:40:19:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EC:B5:C4:AC:B5:46:4C:C0:C2:E1:9F:88:05:E9:1C:0C:01:8F:50
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c9:0a:ac:f4:3c:f1:69:40:d9:54:f2:15:44:70:bd:11:bd:
1f:89:f8:c1:9b:ed:cf:c0:1e:9b:3c:dc:6b:5e:e5:d7:92:6a:
31:dd:4f:17:1a:9c:83:f1:0b:3a:53:2a:85:53:1a:92:73:19:
3a:c8:10:63:a7:b9:1c:a2:0a:b8:e3:dc:6f:28:ed:0e:00:49:
94:00:a9:b6:09:49:6b:b5:18:e7:53:83:a5:d3:27:6b:2e:74:
91:4d:70:22:50:1e:14:67:e2:26:8f:72:81:d8:0b:ba:47:bb:
aa:c7:bc:71:2e:3f:39:65:33:65:7b:0c:9a:7d:a4:c8:61:46:
f7:fa:07:dd:1a:86:5b:a4:00:25:e1:0f:7f:92:bb:bb:28:52:
42:ac:b0:44:11:c2:4a:f3:9a:6a:a7:ca:a8:7f:d2:58:d5:57:
01:57:91:49:ff:44:cf:95:06:c6:21:64:44:ca:67:3f:8c:fe:
fa:ee:65:ba:cd:54:9e:ef:86:31:f2:29:11:8c:a8:01:b9:12:
91:52:54:4c:ca:44:59:55:f0:cf:4f:bb:51:a2:cf:83:eb:ca:
6b:15:f4:b3:bf:18:cf:cb:ad:7e:81:26:cf:49:2d:11:db:2a:
ad:f0:d7:6b:94:86:f1:cd:e1:a3:e3:e6:df:ce:7b:7b:48:56:
0e:f9:a5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org