Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: dGJlwfhlYpKIjJGV8JZQWiXCu8EoMBqE4fMcRLeulcw=
Subject key identifier: 9F:0D:D2:DA:34:E1:69:28:79:61:CF:8C:ED:E8:69:41:74:13:08:73
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 196D97A54CF92D01BFF85A97FF152677733A765E
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS3320.roa
Signing time: Tue 21 Nov 2023 22:54:22 +0000
ROA not before: Tue 21 Nov 2023 22:49:22 +0000
ROA not after: Tue 19 Nov 2024 22:54:22 +0000
asID: 3320
IP address blocks: 45.142.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:6d:97:a5:4c:f9:2d:01:bf:f8:5a:97:ff:15:26:77:73:3a:76:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 21 22:49:22 2023 GMT
Not After : Nov 19 22:54:22 2024 GMT
Subject: CN=9F0DD2DA34E169287961CF8CEDE8694174130873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:67:82:90:56:3d:be:db:10:c9:e1:e1:e9:
3a:cb:cd:d1:0b:12:6c:07:76:27:59:2d:c5:de:72:
c8:cd:6e:6a:de:60:f8:49:75:87:19:5e:2c:b2:b5:
55:59:ed:a1:15:14:07:6a:5d:37:06:4c:3e:f3:69:
45:12:75:02:b3:5b:6f:69:ac:cc:7c:44:6f:73:94:
75:ab:10:db:de:fb:95:8a:48:c1:15:5d:ab:72:a8:
65:3d:61:44:08:99:46:fa:c9:02:98:e2:c8:a2:d4:
9e:24:d4:9b:06:d7:d5:19:cf:4f:a1:a8:a0:c9:01:
cc:9a:ab:5e:35:60:a6:b9:28:4d:35:27:4c:eb:85:
18:e5:65:d0:68:91:70:eb:fa:f7:f5:66:21:cc:a7:
30:df:32:77:c6:8e:95:37:c1:0e:ec:a1:91:54:a5:
e6:98:05:f0:9d:57:c0:4c:9a:68:70:e2:f6:08:1b:
0d:d5:ea:78:04:b1:56:4a:03:ba:c4:bf:48:a4:d7:
cc:37:34:e4:b3:01:5d:cb:97:e0:c2:62:88:41:51:
34:ca:4b:2e:a7:d7:ab:57:dc:57:07:e6:0d:8b:48:
35:22:0f:b5:59:e4:bc:13:b9:42:7d:85:0e:f9:8a:
af:3f:a8:ad:a6:0d:17:43:df:36:ec:09:5b:74:ef:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0D:D2:DA:34:E1:69:28:79:61:CF:8C:ED:E8:69:41:74:13:08:73
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/24
Signature Algorithm: sha256WithRSAEncryption
27:6e:26:e6:1f:25:a7:05:3e:9a:e8:d0:64:e9:52:74:6f:4c:
bd:2e:59:55:b1:37:7f:c8:e8:75:d3:35:26:82:57:24:49:1e:
14:70:4d:2a:51:97:54:0c:9a:a4:40:3b:96:fd:ec:58:d0:14:
83:cb:82:7e:ee:d8:ea:e0:3f:a9:3f:02:ad:36:e1:27:e9:03:
10:b1:ee:cd:cc:61:ff:13:08:6e:85:90:32:11:9d:34:e4:fb:
65:fd:9d:27:e6:23:26:5b:68:26:b2:34:1e:73:0f:d1:59:75:
d9:36:4b:e0:6d:f5:7d:6d:0b:55:dc:d0:ec:34:28:ca:07:46:
e8:a9:55:2d:98:2f:85:65:b8:9c:f0:5f:d0:c1:51:03:e3:11:
c4:28:a0:0f:ef:7d:f2:81:1d:66:8b:c3:4e:be:2e:67:48:2a:
8c:f9:b2:a5:4a:76:a8:7c:6c:39:20:6d:6c:b5:cd:e8:a3:65:
39:3a:b6:1e:12:7c:2b:00:a7:f3:d2:3e:75:29:75:56:fd:92:
b4:5a:ec:a4:e9:3d:1a:d4:a0:a7:7d:93:be:8d:6b:61:59:ed:
4b:4e:90:38:71:72:72:d0:36:e3:26:06:a2:8d:61:7f:38:91:
35:53:af:24:0a:3c:ab:bb:38:ca:ad:0c:a7:08:5d:55:98:76:
e4:dc:44:36
-----BEGIN CERTIFICATE-----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Generated at Wed Feb 21 00:56:49 2024 by rpki-client on console-ams.rpki-client.org