Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS269749.roa
File: AS269749.roa (raw, json)
Hash identifier: a6U69JD4kMO2SU/mVz8qJvh7ShQ+Q8kzYPsPYHNRFfM=
Subject key identifier: 96:DA:69:C6:10:0B:74:8F:EE:59:23:8F:A3:4B:0C:6E:F2:84:35:0C
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 7032B66D78CFFEE99680F003459D697729AF6A52
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS269749.roa
Signing time: Thu 29 Dec 2022 12:26:55 +0000
ROA not before: Thu 29 Dec 2022 12:21:55 +0000
ROA not after: Thu 28 Dec 2023 12:26:55 +0000
asID: 269749
IP address blocks: 45.158.170.0/24 maxlen: 24
45.158.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:32:b6:6d:78:cf:fe:e9:96:80:f0:03:45:9d:69:77:29:af:6a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 29 12:21:55 2022 GMT
Not After : Dec 28 12:26:55 2023 GMT
Subject: CN=96DA69C6100B748FEE59238FA34B0C6EF284350C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:73:2f:ff:e2:04:53:60:1a:ca:90:ac:52:
3a:48:33:0b:17:83:22:ec:6c:40:25:dc:c2:74:db:
cf:c9:59:7e:57:f3:f7:31:13:95:62:39:33:c9:d1:
49:75:bd:8c:ed:f2:01:49:36:67:2d:47:d3:28:75:
39:99:53:26:df:b6:0b:63:8c:c9:80:d0:cb:14:16:
5a:2a:b1:9e:b1:15:64:7a:f5:e3:b4:a2:a6:26:0d:
b3:92:06:d0:9c:eb:01:aa:d9:08:d1:30:c3:68:03:
f8:38:89:f4:ec:0e:4a:eb:8b:2e:d9:55:63:2b:83:
67:7f:06:2e:fa:ac:81:e1:6e:7b:a7:15:42:b2:56:
5e:67:aa:62:c2:a6:4e:ba:23:12:40:53:d7:5d:04:
08:36:5a:e0:0e:55:a3:9a:2e:0a:f2:01:27:ee:c0:
b2:d3:c1:c2:60:83:c9:78:5a:0e:a1:07:97:a2:ba:
4f:3b:72:1b:62:e4:6f:e5:21:90:c6:00:9b:bf:ab:
e3:12:8f:73:e1:65:82:78:56:e6:fe:31:80:41:a8:
a7:92:7b:da:e8:fa:3d:70:96:b7:6c:6a:b2:2e:30:
d8:10:3c:83:eb:12:12:3f:11:fa:f4:31:54:3d:c8:
2b:5b:3c:40:4a:f4:21:ff:ef:2c:01:87:8d:f0:a4:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DA:69:C6:10:0B:74:8F:EE:59:23:8F:A3:4B:0C:6E:F2:84:35:0C
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS269749.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.170.0/23
Signature Algorithm: sha256WithRSAEncryption
36:ce:c4:c7:3c:d8:89:fd:3f:2e:06:ab:2e:c7:26:bd:56:0f:
0d:2a:ab:a9:66:3d:f7:65:27:c5:0a:d2:f8:3a:62:f9:ad:1e:
0b:79:8d:b3:f3:10:54:c5:47:af:c4:16:87:1e:3c:0a:76:b0:
1d:ab:1f:4f:0e:51:d7:69:82:47:c0:75:11:16:b1:53:76:57:
08:ad:47:3e:fe:a5:19:2d:85:44:f5:ce:51:0b:c3:6f:de:31:
ce:c8:a2:53:b3:09:95:1d:78:88:1d:f1:ab:82:20:1c:e0:93:
ea:41:cf:d0:87:91:72:1f:52:40:ee:32:68:5e:71:56:40:83:
08:75:ab:de:c7:d8:13:a9:94:10:e6:e3:ed:b1:77:91:c8:e3:
f9:3a:1d:63:17:9f:ac:0a:21:0d:ae:a1:63:2c:72:f2:41:a2:
8e:d9:4e:10:43:1a:47:eb:3e:59:9e:71:a1:e2:4b:fb:3b:71:
83:00:fc:81:2b:9e:eb:94:1e:ba:ba:6e:68:f1:62:e2:a6:dc:
b0:c8:fe:ee:02:bf:fd:a0:95:dc:f3:47:52:a9:80:06:c6:59:
34:c3:a2:67:0a:91:e6:74:2e:1a:d5:70:47:12:d8:a0:f5:38:
53:7e:6e:97:53:35:84:a5:de:ef:12:4c:1b:fe:5a:3e:69:17:
5f:51:1a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 00:39:03 2023 by rpki-client on console-fra.rpki-client.org