Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS43072.roa
File: AS43072.roa (raw, json)
Hash identifier: CvOtFqHBnYY92hmsiTn2iNNjq5A53xV6EpZFIIvjR2w=
Subject key identifier: F9:0C:05:E9:D6:97:D4:5A:D8:8F:D8:97:4D:CD:8E:C5:2F:51:F4:19
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0E96349A0310152C7DCEEBB065B06223DB2974AA
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS43072.roa
Signing time: Wed 03 May 2023 14:52:13 +0000
ROA not before: Wed 03 May 2023 14:47:13 +0000
ROA not after: Wed 01 May 2024 14:52:13 +0000
asID: 43072
IP address blocks: 185.155.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:96:34:9a:03:10:15:2c:7d:ce:eb:b0:65:b0:62:23:db:29:74:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 3 14:47:13 2023 GMT
Not After : May 1 14:52:13 2024 GMT
Subject: CN=F90C05E9D697D45AD88FD8974DCD8EC52F51F419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:cb:a8:9d:52:eb:cd:d7:f5:2d:3c:99:ac:
4f:3a:eb:27:c4:ee:20:b9:92:58:60:07:36:7d:4e:
31:4f:d1:1f:8e:1c:46:21:12:5f:1e:64:13:20:56:
57:c5:fa:15:cb:72:f2:6c:6f:1f:46:e3:bf:42:40:
5a:8f:3a:4e:fd:92:0a:ee:ca:af:55:13:0a:43:70:
86:73:0d:e2:a6:4f:51:47:14:46:5f:b4:98:64:97:
c8:80:57:a0:0d:88:0a:b8:41:e2:54:91:54:34:b9:
06:e3:31:8a:7d:ad:f7:a4:54:2a:46:20:13:39:b6:
92:36:6a:53:56:3b:81:3e:e2:e6:39:3b:03:10:b0:
35:d0:fd:d6:6c:0e:50:ab:ee:7c:92:91:bb:b4:f3:
34:af:60:a9:cf:b4:bd:8d:84:0f:12:fb:23:d4:a2:
67:2a:36:90:ac:1d:5e:26:08:07:e9:b5:0c:cd:e7:
16:e9:de:88:64:cf:90:47:58:11:0d:8d:fa:b6:59:
75:7a:35:f1:4b:84:ce:91:9f:d2:43:ab:52:c7:62:
6f:cf:b6:9f:54:70:2d:93:b2:a0:72:09:a2:de:74:
24:7b:4f:c3:61:de:45:48:d8:a6:c7:69:ba:60:32:
3c:ae:69:4c:a7:bf:52:e2:37:a9:ac:29:0a:64:c0:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0C:05:E9:D6:97:D4:5A:D8:8F:D8:97:4D:CD:8E:C5:2F:51:F4:19
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS43072.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ae:cc:0f:54:4e:fd:55:00:ca:6d:ee:fd:60:c0:fc:03:c6:
1c:a7:99:f0:6c:9c:2a:3e:f8:df:ff:c1:c1:93:d6:dd:84:fd:
a0:98:07:ae:e6:06:d0:8b:17:62:93:f1:c9:80:07:c0:63:fb:
00:61:7a:9c:04:66:24:f4:b6:6f:8a:8b:e8:5c:7b:74:03:ea:
60:a9:30:cc:ec:00:50:1c:53:91:0a:73:99:8d:17:eb:7c:18:
16:3d:a8:34:f4:61:29:a0:7a:1d:82:40:a7:33:a1:db:d6:81:
b6:6c:1d:24:27:34:5a:36:f8:a4:10:f3:b9:d3:06:55:ea:26:
b0:46:d3:25:98:42:18:64:50:a4:0a:b4:24:5b:71:06:af:33:
df:a7:0b:7a:00:6f:a3:0a:7a:9a:b5:64:84:4d:90:3c:d4:58:
04:8b:73:c6:12:fa:f8:ae:ae:59:b7:1f:f4:d2:55:60:31:56:
af:4a:4a:82:51:58:46:5e:7d:72:cc:4c:ae:32:ab:5f:e6:71:
c1:78:26:22:11:24:97:df:1f:bc:d5:bb:ae:99:f3:88:b0:cd:
61:d7:cd:03:94:64:b8:7d:1e:b8:36:a6:31:f2:49:e9:3e:ba:
3e:2d:4b:80:50:20:eb:29:05:9e:8b:de:cd:96:ee:62:32:89:
2a:c3:c9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org