Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS393427.roa
File: AS393427.roa (raw, json)
Hash identifier: hhuS+6zmYostlI2Qw21zaxh5xi0yrbTYhsY7g4pMOL8=
Subject key identifier: 66:35:6D:DF:2E:86:F0:A7:77:03:81:92:EE:FC:F1:0E:F8:E2:EE:89
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6038E6A43C5578075CD37B7AD868D7860AECD569
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS393427.roa
Signing time: Fri 10 Mar 2023 16:33:25 +0000
ROA not before: Fri 10 Mar 2023 16:28:25 +0000
ROA not after: Fri 08 Mar 2024 16:33:25 +0000
asID: 393427
IP address blocks: 45.151.45.0/24 maxlen: 24
45.151.46.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:38:e6:a4:3c:55:78:07:5c:d3:7b:7a:d8:68:d7:86:0a:ec:d5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 10 16:28:25 2023 GMT
Not After : Mar 8 16:33:25 2024 GMT
Subject: CN=66356DDF2E86F0A777038192EEFCF10EF8E2EE89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:4d:65:a7:29:70:94:89:0c:d7:3f:c2:a2:
5f:f4:ce:33:20:c2:a2:c4:69:78:f4:d2:b2:68:da:
38:fe:6c:b8:59:7e:a2:1e:00:59:ed:20:20:6b:b9:
7c:39:b4:b6:15:fb:e9:10:8b:ca:5d:b5:6a:49:10:
ee:e7:bb:5e:d4:e6:e1:c2:f3:ac:5f:c7:6e:28:10:
aa:84:3c:ba:af:c5:a4:be:d0:19:a1:9e:80:d6:cc:
5e:e4:4b:11:26:4c:de:1c:11:28:10:33:73:8b:e4:
a5:45:75:01:61:be:9a:69:9c:6f:cd:1c:b8:b9:ee:
0b:42:f0:47:66:6a:d8:06:e2:cc:63:b8:95:1c:3f:
a1:ea:26:51:f1:1d:54:dc:bd:58:cc:6a:36:7a:4b:
ac:c9:61:90:6a:a1:71:37:27:93:63:87:da:32:8c:
da:a0:e0:45:6b:67:cf:af:bc:28:22:0d:e8:7a:26:
04:a4:d8:fd:c8:80:bd:e5:3c:92:b6:c0:a3:b0:69:
25:a0:e6:82:f2:e0:c1:3b:b6:a9:f9:b7:e0:03:5f:
41:6a:c4:40:5f:a9:85:8b:d9:6f:7d:4d:56:13:95:
16:99:cd:0c:48:07:d4:bb:ee:b7:58:c5:3a:30:bd:
8f:15:70:75:7f:36:f8:34:c4:c1:03:7f:0e:4c:5f:
7e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:35:6D:DF:2E:86:F0:A7:77:03:81:92:EE:FC:F1:0E:F8:E2:EE:89
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS393427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.45.0-45.151.47.255
Signature Algorithm: sha256WithRSAEncryption
19:4b:d4:81:23:61:b7:a5:34:8c:94:67:f8:12:d7:ac:2c:ff:
fd:5f:4e:d0:44:e0:1d:39:3e:59:45:f9:7c:fc:46:68:26:01:
3d:2b:3f:ba:55:45:b3:71:d1:31:c4:80:55:73:3f:d4:f0:af:
8d:b6:50:f8:d4:98:cb:a6:6b:05:6a:0e:d7:96:29:fa:02:0c:
74:70:6a:4d:41:65:65:c7:c6:ca:45:e4:7b:5f:ea:1b:cd:7e:
7a:fa:ac:29:12:c8:48:92:17:57:31:44:62:93:f7:86:cf:f1:
5a:90:1b:df:cb:df:c4:9a:65:5c:4e:cf:14:2e:b4:41:ef:dd:
5c:6a:3c:11:46:9c:d6:90:a6:b2:ed:8e:5c:46:7e:03:0f:1f:
a4:a5:24:02:ab:1c:27:4f:7d:d7:0c:d9:34:19:17:d5:ae:10:
24:d5:c1:c7:f7:a6:19:bd:39:ca:11:ff:10:a8:a3:e6:af:2a:
e1:db:56:62:2a:08:08:c5:20:af:c0:62:71:19:e9:bd:4a:89:
0b:20:dc:2e:c1:c6:75:9c:6e:8f:25:49:08:0b:a3:da:b6:78:
e4:0b:99:24:03:9a:1c:1b:ff:9d:41:c8:88:b4:2e:a0:a1:e2:
2a:32:c5:8f:9d:68:9a:cd:6c:5a:35:d2:8d:e1:94:f4:5b:90:
38:cd:3c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org