Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215761.roa
File: AS215761.roa (raw, json)
Hash identifier: 56OUP9Yubm778Tdp6+oVGGjJGX4X9jc7C5ETogwV7GQ=
Subject key identifier: BF:89:02:0A:77:E6:10:80:95:91:40:1A:E8:4F:3A:66:92:29:C4:F6
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0F2296822237D0368E29C10303BAEC33F4B136C1
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215761.roa
Signing time: Fri 12 Jul 2024 20:21:33 +0000
ROA not before: Fri 12 Jul 2024 20:16:33 +0000
ROA not after: Fri 11 Jul 2025 20:21:33 +0000
asID: 215761
IP address blocks: 45.135.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 08:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:22:96:82:22:37:d0:36:8e:29:c1:03:03:ba:ec:33:f4:b1:36:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 12 20:16:33 2024 GMT
Not After : Jul 11 20:21:33 2025 GMT
Subject: CN=BF89020A77E610809591401AE84F3A669229C4F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:1f:46:94:06:83:65:ea:15:73:01:db:2a:
0c:71:16:bc:c6:33:7c:23:24:6c:a1:4e:71:b6:48:
90:77:54:42:fe:68:85:69:d3:bd:33:83:c6:d3:e7:
f1:0b:12:66:83:dc:71:68:75:c9:77:d3:2f:0a:52:
39:16:b8:e4:b4:b6:52:78:b0:50:8e:be:5d:ba:43:
77:dd:4d:ef:0b:f2:c2:66:0a:f8:6e:37:e8:f9:e6:
b1:5d:7a:90:de:66:1c:e6:13:7e:a1:ef:e7:17:bf:
d7:e5:72:21:2d:98:4a:80:87:aa:78:92:f5:34:cf:
05:d1:ed:48:83:1f:0c:0d:77:a5:96:14:d3:59:98:
25:17:8a:09:d9:df:e1:fc:a7:27:0b:6c:45:c2:58:
e5:42:14:28:96:e9:5e:9d:ed:b9:3f:1a:0f:f3:f5:
d9:7b:cf:25:76:f5:b7:78:5e:62:50:1f:59:d8:2e:
5d:1a:33:fb:76:c9:7f:21:87:c6:a5:7d:b0:4f:95:
17:33:3a:0d:18:25:69:82:55:f5:d0:4d:c1:2c:c7:
43:9b:cd:ca:71:60:32:0d:30:0c:c6:45:08:9c:d5:
f2:b3:ee:a8:fb:95:e6:91:50:78:5e:16:e5:ec:2a:
a4:f3:0a:78:14:bb:1a:d4:b6:2c:02:e2:e3:bf:8b:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:89:02:0A:77:E6:10:80:95:91:40:1A:E8:4F:3A:66:92:29:C4:F6
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215761.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2b:96:0f:8b:73:72:75:92:ff:7e:98:c5:34:f3:a6:df:b5:
a2:06:4d:8e:86:e5:00:b7:78:88:e0:63:a1:e1:ff:83:dd:77:
81:44:cd:e9:17:af:db:a3:98:27:f1:fe:b4:f9:ad:6b:20:0c:
b3:4f:07:74:60:2c:f7:c1:75:ee:08:72:75:21:0c:fe:7c:6b:
87:60:a7:3c:b4:f8:1d:6e:03:98:1e:3b:ed:10:68:6a:24:0e:
8d:f3:a8:c4:89:cf:c1:cc:82:67:74:9e:1b:b1:06:49:cf:55:
7c:3b:01:58:d8:0b:92:54:2a:b5:57:26:f0:73:bc:63:cc:7f:
92:21:c4:4d:fe:41:ea:c3:6a:49:48:82:68:a9:8d:7c:21:16:
50:91:46:d6:fd:5b:13:ec:ee:85:9a:90:eb:f7:2f:b7:22:e6:
36:4e:d4:f7:f9:fe:44:e1:65:a9:f5:2c:5c:c4:1b:ec:45:6c:
f7:ab:bb:2d:c9:2b:d5:e1:44:7c:f2:02:cb:7b:11:6f:57:04:
dd:99:c1:2b:e0:cc:ed:11:63:52:b2:3a:d1:65:2d:e0:c5:93:
54:48:5c:d3:da:d4:73:c6:b9:4a:e9:1d:a8:93:f3:89:f3:7f:
e3:94:1b:8c:6e:44:28:d8:31:3f:f6:0f:92:12:fd:c4:48:84:
cb:a1:bd:e7
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 28 09:44:46 2024 by rpki-client on console-fra.rpki-client.org