Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS24768.roa
File: AS24768.roa (raw, json)
Hash identifier: 5CYvNM0vd3KKYziUC1hFwnrAX2B+mTJYfpJW/oEWC5s=
Subject key identifier: 7C:59:9A:01:30:10:D7:B0:45:30:B5:9D:89:EE:1E:BE:10:FB:69:48
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 55ADCDA1D27267E5E78FF9860D91CA3D363B7182
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS24768.roa
Signing time: Tue 16 Jan 2024 14:48:13 +0000
ROA not before: Tue 16 Jan 2024 14:43:13 +0000
ROA not after: Tue 14 Jan 2025 14:48:13 +0000
asID: 24768
IP address blocks: 45.151.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ad:cd:a1:d2:72:67:e5:e7:8f:f9:86:0d:91:ca:3d:36:3b:71:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 16 14:43:13 2024 GMT
Not After : Jan 14 14:48:13 2025 GMT
Subject: CN=7C599A013010D7B04530B59D89EE1EBE10FB6948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:b3:55:e5:f3:c4:b4:ad:3c:02:fd:ed:88:
e9:34:92:f3:19:10:5c:59:4b:57:10:49:7f:d5:67:
1c:77:da:2c:34:20:36:6c:73:81:72:92:79:c6:45:
34:63:28:aa:3f:5f:89:5e:0d:5d:08:9f:31:27:ef:
23:7c:7b:bc:65:ab:a9:1a:65:76:23:da:3f:65:b0:
0b:62:63:9a:19:fa:a0:8b:de:54:b3:b5:4f:25:48:
83:c2:0f:e6:2d:8f:29:96:c9:a6:d8:2a:ac:92:b5:
83:b5:0b:8a:27:9b:e0:65:17:e3:f3:a0:52:ed:b3:
b3:a3:5e:85:90:77:b5:a3:12:1d:5b:db:4e:f9:6d:
a8:94:4b:80:41:b2:e8:39:c4:0b:c2:f2:21:5e:f2:
a3:56:8e:44:b3:0d:f6:ca:85:28:ac:2d:e5:c7:5a:
fa:f6:06:43:be:10:6d:86:30:e2:2b:83:28:14:d7:
84:51:93:7b:a6:14:c0:bf:af:51:0d:91:8d:b7:14:
1e:c0:5c:7d:7d:32:55:6f:30:f7:40:d6:f0:9a:47:
55:f6:81:48:b0:06:6d:56:87:e8:96:b1:cd:69:67:
49:a9:86:38:b8:be:ee:1d:b9:7e:a2:11:f3:58:ae:
18:0a:1e:3e:6e:0e:e4:49:90:79:5d:2c:23:de:68:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:59:9A:01:30:10:D7:B0:45:30:B5:9D:89:EE:1E:BE:10:FB:69:48
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS24768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.45.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:bb:22:56:7d:f1:07:b0:91:ee:1c:06:59:e7:19:c9:c1:c9:
23:85:20:16:ed:b9:e1:ba:5d:58:0c:d3:48:f7:7a:11:66:e7:
b6:12:ed:1b:2b:21:ad:3d:64:25:14:3c:67:a0:c3:f0:17:aa:
bb:a4:46:1c:f2:cd:45:46:e3:39:7d:0a:41:c3:9b:46:11:e5:
dd:af:07:9a:74:7b:3a:6f:0b:e6:e8:12:73:0f:e9:2d:0a:37:
d9:0f:e7:45:c0:88:18:84:5f:35:6f:35:33:f4:82:95:f4:fc:
aa:f9:93:da:e9:47:17:ef:39:36:f8:1d:d7:26:94:ef:59:65:
b1:6b:77:4b:11:a7:6e:53:20:8f:6f:73:8d:b1:69:0e:0d:c0:
97:ed:30:07:16:ad:3b:06:34:e8:13:22:53:35:04:24:a8:37:
c7:de:79:26:e4:3a:f5:8e:c0:12:b9:f5:e2:aa:33:1b:bd:bf:
55:03:20:80:f0:f3:e4:03:cd:a1:f4:4b:cb:e1:86:66:0c:60:
69:be:3f:99:9f:c0:c6:fc:e6:4c:2f:e3:6e:9b:f0:23:50:aa:
be:b5:d0:b0:ce:cd:d6:67:b7:ba:b9:8b:f4:6c:34:2b:38:2a:
51:3c:03:a4:c3:28:c9:fa:d6:1b:1b:05:11:ae:8e:00:06:1a:
a0:a8:eb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 03:35:55 2024 by rpki-client on console-fra.rpki-client.org