Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS397569.roa
File: AS397569.roa (raw, json)
Hash identifier: j1nMwoSDeXBtmmxCtZp7OP4DFaUjnFGljYizIfufBsw=
Subject key identifier: A1:9E:E7:61:C3:DF:89:6C:4A:60:EE:55:B5:45:4D:AF:14:7C:7F:39
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5B37E5423D415BA282743F764FABA1CDDC79D55A
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS397569.roa
Signing time: Thu 29 Dec 2022 12:27:02 +0000
ROA not before: Thu 29 Dec 2022 12:22:02 +0000
ROA not after: Thu 28 Dec 2023 12:27:02 +0000
asID: 397569
IP address blocks: 45.149.100.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:37:e5:42:3d:41:5b:a2:82:74:3f:76:4f:ab:a1:cd:dc:79:d5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 29 12:22:02 2022 GMT
Not After : Dec 28 12:27:02 2023 GMT
Subject: CN=A19EE761C3DF896C4A60EE55B5454DAF147C7F39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:25:25:23:50:9f:e8:22:a6:ff:8a:32:b6:
e6:f7:b7:7c:ce:46:2b:3f:52:55:e3:f4:e7:b9:3f:
47:c6:85:ed:5e:f6:79:b5:c1:9a:51:a0:90:04:87:
12:0f:93:58:52:90:b0:e1:cf:cc:30:26:79:e9:64:
4a:59:88:b5:23:71:f2:6f:cb:5b:e3:62:6e:37:ae:
b1:60:ac:bb:7c:4d:2a:66:b0:f4:76:44:ec:26:2d:
01:ad:e3:3a:6d:c4:08:5b:60:98:24:37:fd:b4:28:
01:29:2d:96:ae:3d:f0:77:01:2c:27:f2:1f:13:05:
5a:2e:6b:b6:d8:d5:c9:2d:6c:af:dd:d9:c2:89:12:
47:c0:5a:9a:54:1f:82:2d:29:87:bb:9a:27:f7:d1:
47:65:5f:f6:6a:20:9e:00:77:7d:8d:0a:40:a2:ac:
3f:99:2f:02:55:6c:eb:17:91:a8:8a:0f:28:e2:55:
37:10:17:9f:41:cf:e5:f6:05:18:04:e5:ad:be:5f:
4c:b3:ba:e6:34:5d:3e:fc:2c:05:4a:6d:b4:b1:d6:
e2:2f:3d:55:05:05:47:77:7c:52:6e:0f:3a:96:6d:
02:d4:ff:44:b2:f7:d0:0c:61:62:0b:64:ed:b7:6b:
20:73:8f:d7:bf:43:47:01:15:6b:5a:41:cb:ae:0f:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9E:E7:61:C3:DF:89:6C:4A:60:EE:55:B5:45:4D:AF:14:7C:7F:39
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS397569.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.100.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:b3:ca:8e:77:6d:1f:ad:58:09:ab:57:4c:22:71:92:a7:5d:
47:c1:9a:af:8c:34:62:3e:e2:02:eb:22:ff:9c:53:a0:cc:9d:
be:37:b2:7a:4f:3e:77:d0:8d:fe:6a:cb:5f:fc:73:50:a0:55:
65:1c:53:09:5a:72:15:39:1e:88:eb:a0:98:d4:bc:dd:86:70:
83:ed:5a:fd:7e:3d:4b:32:a4:71:62:37:97:59:f4:79:a0:16:
ae:da:97:10:8c:49:a1:7c:a8:f7:ec:fa:2e:16:d0:52:f1:73:
31:7a:28:51:56:64:33:7e:b0:1b:6e:51:d3:60:0c:f0:ef:bc:
1a:8c:a4:b7:db:35:19:8b:53:c7:e1:a2:18:8a:2c:8c:1b:ab:
41:55:4f:44:7d:d2:38:6a:88:c6:6f:e5:7a:d3:57:2f:ad:cc:
92:b2:96:cb:c3:e4:4d:e7:ca:d0:80:e0:50:8e:4f:77:21:8f:
d9:32:df:79:e2:44:ff:6e:96:b6:47:8b:2a:4d:88:a4:66:76:
f7:7b:dd:f3:31:64:ec:2d:da:10:27:a5:1c:c8:a3:26:c1:4f:
22:d3:24:76:aa:98:a4:87:6a:89:9c:93:b4:0f:c5:32:be:d8:
8d:99:fc:63:2e:5e:6c:2d:b2:45:73:1b:69:00:e7:7e:57:c6:
dd:bf:6a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org