Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS35913.roa
File: AS35913.roa (raw, json)
Hash identifier: OHZEXVE0unMPU93E51NLwRkgXskHIPwMDeWI7u7l2P4=
Subject key identifier: C5:25:F1:18:44:68:B5:4B:B3:81:89:EA:8D:6B:C4:DC:43:63:94:77
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 315C30706F419F2DAB63AA499A72B2A343CEE274
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS35913.roa
Signing time: Tue 11 Jul 2023 06:27:18 +0000
ROA not before: Tue 11 Jul 2023 06:22:18 +0000
ROA not after: Tue 09 Jul 2024 06:27:18 +0000
asID: 35913
IP address blocks: 45.151.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5c:30:70:6f:41:9f:2d:ab:63:aa:49:9a:72:b2:a3:43:ce:e2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 11 06:22:18 2023 GMT
Not After : Jul 9 06:27:18 2024 GMT
Subject: CN=C525F1184468B54BB38189EA8D6BC4DC43639477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:e3:e4:9f:a2:e6:cc:d4:4e:e6:78:11:b8:
cc:6c:2e:cc:37:7c:74:b5:88:4b:00:ea:6e:64:f7:
9a:b8:f4:d0:36:ee:26:fb:38:d1:ec:9e:ec:fc:87:
a7:c0:ed:ab:47:91:4f:b6:01:c0:ed:75:d6:34:02:
1b:69:3b:b7:72:26:70:1b:54:53:d3:ac:4f:42:29:
23:dd:7a:cc:32:20:19:ff:f8:30:bd:e9:e6:a6:30:
bd:14:28:07:9b:10:10:04:a3:2b:2e:6b:6b:a5:4d:
08:61:dc:7f:96:41:c1:e1:fc:04:81:be:55:05:aa:
9c:51:bd:da:fc:bd:8b:0f:a9:d1:43:73:1f:65:02:
6b:bd:ad:29:52:5f:ee:55:0c:c7:48:78:4f:5b:99:
10:15:c4:3f:2a:c7:be:07:0e:47:39:b2:e5:8f:dc:
40:1d:c3:ba:b6:66:90:fc:55:36:80:85:79:7f:f7:
bd:55:4d:66:8f:a4:10:da:78:13:2f:44:ec:9a:e3:
de:0d:dc:d1:77:0a:bd:03:aa:da:96:87:c8:6f:68:
b5:08:64:2b:58:b2:2f:53:8e:65:80:73:dc:e8:18:
ae:40:c6:7a:f0:d6:28:67:a5:d8:db:e1:0a:01:9a:
58:bf:be:43:23:ff:46:e9:b6:d4:68:b1:9c:97:20:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:25:F1:18:44:68:B5:4B:B3:81:89:EA:8D:6B:C4:DC:43:63:94:77
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS35913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.45.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:21:6b:67:95:73:bb:ea:fc:a2:22:42:95:69:6c:c5:9b:ea:
d3:92:f0:ac:a2:03:17:82:3c:37:e8:59:3a:70:af:3d:f4:89:
52:49:cf:b4:cc:c0:89:e0:bb:0d:38:fb:a2:7c:c7:a6:32:80:
9f:b1:75:81:25:98:9b:49:d3:02:ac:b6:74:be:76:e3:56:3f:
90:ae:6a:68:c2:c4:46:a2:d5:13:53:58:e0:fb:a4:f3:4b:ae:
a0:d1:fb:6e:f4:1d:54:ce:0d:4a:c2:de:f2:34:6a:33:de:ae:
90:19:20:6c:da:2b:af:2e:2f:93:a6:32:d5:bb:84:a3:7e:3f:
cf:5d:1a:f1:97:bf:b3:b0:7f:26:38:75:ee:2a:67:24:78:44:
6c:bb:e1:85:5a:7c:35:7f:7a:10:93:ec:5c:ef:ff:77:90:02:
f5:58:dd:49:62:fa:9d:f0:2e:80:d0:e0:2a:3c:d7:40:cc:8e:
b1:58:46:e4:12:78:57:6e:3e:20:e3:a3:70:b1:d5:d5:73:8a:
4e:e0:17:cc:c9:03:c7:6e:0d:88:7c:0f:95:dd:b5:f9:e4:92:
08:1a:9d:fb:c6:52:df:2e:72:a2:7f:64:68:76:0b:b6:50:87:
fa:ec:ef:36:f1:f3:f0:da:b0:18:5c:c9:8a:a7:52:8f:c2:02:
5d:cc:c0:44
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 10 15:04:21 2023 by rpki-client on console-fra.rpki-client.org