Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211432.roa
File: AS211432.roa (raw, json)
Hash identifier: Zg7iij3k9p64fHSJROPNcYmY1KSpnhadiw9XCmlPhGw=
Subject key identifier: 18:CC:DF:71:26:5D:E5:C7:0B:A6:14:8D:64:54:12:15:EE:71:C6:01
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6E8B86EC66E141717A383116567CCB38055DE0FC
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211432.roa
Signing time: Tue 26 Sep 2023 00:00:06 +0000
ROA not before: Mon 25 Sep 2023 23:55:06 +0000
ROA not after: Tue 24 Sep 2024 00:00:06 +0000
asID: 211432
IP address blocks: 45.149.100.0/24 maxlen: 24
45.149.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:8b:86:ec:66:e1:41:71:7a:38:31:16:56:7c:cb:38:05:5d:e0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 25 23:55:06 2023 GMT
Not After : Sep 24 00:00:06 2024 GMT
Subject: CN=18CCDF71265DE5C70BA6148D64541215EE71C601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:aa:69:d3:25:2c:f5:ff:c3:7b:c5:8f:89:
c2:cf:34:4f:19:31:7a:c0:9f:cc:b2:87:2c:71:e9:
38:f6:47:a1:f5:c2:0a:78:64:be:6b:cc:1e:f3:eb:
ba:3f:d1:b5:8e:0c:47:cb:6a:3c:6f:59:03:b5:84:
07:dd:58:09:e3:41:83:ac:c3:5b:a6:2c:60:60:fb:
1a:d2:c3:53:89:5a:46:d8:3e:b4:1c:6d:e0:64:58:
8f:c4:8e:1a:68:ce:d2:1d:3a:9b:dd:85:b3:65:36:
6a:fe:5c:e7:21:8c:33:23:b4:db:13:a6:f8:9e:31:
97:07:d9:63:e1:9c:14:e1:4c:48:49:fc:05:10:bf:
77:5c:16:75:8b:4f:21:31:c5:df:f6:84:93:37:7d:
52:56:90:00:3f:2c:9b:14:89:ca:de:c4:e7:e0:c2:
63:56:b2:44:cc:a7:34:b8:d3:d5:3f:7d:d2:77:0d:
61:e7:07:e9:72:19:d0:d9:a7:6c:0a:fb:ce:54:a1:
af:46:f8:2b:8b:30:06:ba:94:7d:69:44:2d:01:75:
4e:08:96:f5:fa:27:b3:d2:01:c7:4b:bd:e1:c7:81:
db:b7:12:c7:11:58:c2:c0:2f:56:34:3a:9e:e3:de:
22:4f:5f:2c:a8:36:2b:09:0d:4e:1b:4a:7e:fe:10:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CC:DF:71:26:5D:E5:C7:0B:A6:14:8D:64:54:12:15:EE:71:C6:01
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.100.0/24
45.149.102.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:a5:05:36:20:c5:9d:5f:66:5e:c7:48:0b:92:13:d1:ee:8a:
83:49:15:48:ba:fa:7f:41:40:95:8f:19:df:96:46:58:8a:08:
d8:56:af:f6:02:67:19:20:5b:b1:36:34:0d:a9:50:1b:c5:79:
7f:82:4b:0b:be:91:10:c1:68:d1:d4:9b:e5:1a:6d:7e:51:57:
df:e0:07:76:8a:62:99:a8:a1:87:f8:c7:80:e8:fc:bd:17:26:
99:e4:b7:08:3e:b2:5a:b6:18:e8:e8:c7:8d:fe:cb:91:1b:9c:
d4:96:77:62:de:02:fe:ad:81:6b:c5:4b:ef:54:ea:a1:f7:9a:
a8:5c:62:b8:37:01:20:b1:c5:75:09:60:c2:5b:c6:fe:48:67:
35:22:05:1d:8b:5d:c2:38:ab:d5:de:cf:fc:bd:e0:f8:47:8e:
e9:db:01:55:9f:26:eb:46:7e:98:ce:42:7f:4d:43:8a:a6:3a:
49:27:de:5e:02:46:15:bf:8d:81:5f:23:ae:57:e1:2a:86:32:
f6:13:42:d1:7f:24:6e:a7:f5:52:a8:c7:59:2c:03:52:f4:cd:
e4:93:0c:c2:ce:97:f4:1e:64:5c:4c:99:f6:e1:11:e1:b5:dc:
b6:ba:95:b1:dc:20:2b:bb:e7:9c:39:79:b3:ee:fe:61:f1:af:
49:74:12:be
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 13 08:28:48 2023 by rpki-client on console-ams.rpki-client.org