Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS39120.roa
File: AS39120.roa (raw, json)
Hash identifier: xWqWIiGHp4TzFmQkrsyjSkDcxfMJImHznM4mO8Yr8sc=
Subject key identifier: 51:5C:05:27:27:54:8A:80:24:C6:83:29:4F:86:E1:19:F3:5D:EB:09
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2F11FA8C80FC06BAD250C2BD05CC6C36FC931381
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS39120.roa
Signing time: Tue 16 May 2023 13:29:35 +0000
ROA not before: Tue 16 May 2023 13:24:35 +0000
ROA not after: Tue 14 May 2024 13:29:35 +0000
asID: 39120
IP address blocks: 193.161.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:11:fa:8c:80:fc:06:ba:d2:50:c2:bd:05:cc:6c:36:fc:93:13:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 16 13:24:35 2023 GMT
Not After : May 14 13:29:35 2024 GMT
Subject: CN=515C052727548A8024C683294F86E119F35DEB09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:eb:78:26:c4:f2:fc:2c:30:5c:e7:ac:1b:
9d:fa:2f:c9:4c:99:79:1c:d2:da:44:12:36:96:2a:
c0:a6:96:f1:10:3c:ad:82:f3:70:c2:32:49:99:fa:
af:0f:2c:3c:ee:14:4b:bd:a9:04:17:05:10:c3:c4:
94:36:ed:ad:5f:e6:b6:14:a3:f8:15:bf:2e:86:b4:
16:cc:7c:03:c9:ba:32:8d:72:e6:a7:d0:65:3f:27:
d7:ce:a6:fc:85:48:4f:57:75:eb:ef:77:b0:aa:e4:
32:4e:b5:a4:34:7f:67:a8:64:5b:37:04:9e:d0:33:
b9:2e:07:63:54:71:8c:7f:00:dc:89:d7:b4:34:73:
36:e4:91:0e:7b:31:b0:1e:89:46:8a:09:59:d1:b9:
8d:c9:df:9b:3b:5e:58:76:76:73:bc:03:34:51:5a:
64:a7:00:6c:05:c6:47:69:3a:24:29:37:0c:11:ae:
79:96:97:f9:98:80:50:0b:7d:7d:85:3f:45:13:4a:
25:e1:c4:41:30:33:95:d7:12:e8:43:d8:f8:fc:65:
f6:a4:64:aa:21:6c:05:b5:4c:1e:d5:6a:0a:bc:c8:
86:46:48:0f:8f:ea:36:c2:51:e8:56:5d:93:79:2c:
54:2b:57:da:67:48:83:11:56:e9:fd:28:05:b6:fa:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5C:05:27:27:54:8A:80:24:C6:83:29:4F:86:E1:19:F3:5D:EB:09
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS39120.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.245.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:6f:f2:da:29:2a:57:b1:23:81:98:03:3e:6c:ff:63:04:94:
7d:98:a7:e4:01:00:2e:36:7f:c7:15:e6:fe:bb:65:65:44:d3:
ee:49:29:50:c2:56:ba:5e:00:1b:71:88:8d:f9:df:e7:fc:4f:
4a:d6:e0:07:ed:fc:c6:f5:6b:fd:90:03:46:8d:15:6f:e3:d3:
9e:bd:00:23:cf:a7:21:d2:bc:85:c7:74:80:9c:52:de:6a:37:
13:bd:97:6f:0b:c2:8a:ea:e3:ca:75:30:eb:ae:66:5a:67:50:
45:4f:67:ab:38:82:18:14:73:3a:93:6d:c9:d5:72:da:bf:42:
eb:2f:a2:0b:45:b6:77:9e:1b:5e:0b:a0:37:5a:73:d5:4e:d2:
ba:b8:3c:e9:f9:60:76:01:b3:76:53:d3:17:d9:9e:71:4c:eb:
b4:ab:ce:d9:1f:43:3a:3c:1a:54:21:a0:87:6f:d3:60:da:57:
0c:97:09:40:16:26:3f:a1:27:8a:f9:69:26:f3:d1:f0:02:3e:
c6:44:43:f9:bd:a6:df:a5:90:df:bf:30:7c:8c:9c:a8:c9:f3:
03:31:f9:71:02:ab:eb:9a:73:0b:32:7e:df:a4:37:4e:28:96:
f1:dc:35:74:b9:ac:a4:32:ca:4e:b3:4e:57:c2:ba:99:99:cc:
db:ef:7e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 00:32:27 2023 by rpki-client on console-ams.rpki-client.org