Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS43260.roa
File: AS43260.roa (raw, json)
Hash identifier: Zjb6Xixyss2B2RGS7nMqVCW3Y/59v9LwVeZEYxnJBNc=
Subject key identifier: B4:4F:1F:A4:C9:8E:4A:95:BF:01:1F:2F:D5:CD:9E:91:B5:93:8A:45
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6627E7A399423932405218D919C738F283DE0254
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS43260.roa
Signing time: Thu 07 Mar 2024 17:49:05 +0000
ROA not before: Thu 07 Mar 2024 17:44:05 +0000
ROA not after: Thu 06 Mar 2025 17:49:05 +0000
asID: 43260
IP address blocks: 194.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 11:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:27:e7:a3:99:42:39:32:40:52:18:d9:19:c7:38:f2:83:de:02:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 7 17:44:05 2024 GMT
Not After : Mar 6 17:49:05 2025 GMT
Subject: CN=B44F1FA4C98E4A95BF011F2FD5CD9E91B5938A45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:50:de:f0:1a:69:6f:2b:db:30:b2:bf:a7:
34:c3:7f:4c:ce:ea:4d:51:b0:dc:41:bb:a0:4d:bd:
c8:1b:44:67:a2:67:2d:d7:41:0e:ab:9c:48:e1:43:
f3:97:1e:69:d0:ab:39:54:06:16:2c:c8:93:fd:f2:
53:87:91:15:5e:56:c3:c2:b1:46:a1:45:09:e2:7f:
48:47:02:62:c9:dd:b9:df:9a:23:1d:74:ea:fc:53:
21:29:91:4b:9a:52:d0:83:90:37:dd:3d:48:2a:a1:
a5:1a:d7:c5:68:df:20:96:ee:23:cd:25:9f:86:2d:
f0:5b:a1:a0:ef:c9:7c:9d:6d:c6:68:cf:49:e1:d8:
f9:5d:b3:18:fd:e3:6c:a0:c7:12:2a:b0:c1:15:58:
d0:7d:95:fb:1e:54:d3:b8:ce:f7:22:1a:0b:0f:54:
08:f7:2c:25:fb:88:d9:92:a3:f9:51:1e:25:92:4f:
11:88:1d:a7:5a:d3:ca:a1:54:35:9f:b3:d3:33:03:
1d:53:37:c1:ab:d5:a6:4a:db:cc:1d:d9:ff:72:22:
a3:55:49:46:6d:82:b9:0a:ca:23:47:1c:c1:ff:82:
06:e2:e5:4f:7f:73:85:ec:a1:ef:b2:d3:2d:ed:cb:
0f:10:ce:b2:f2:60:5d:ef:47:f9:9b:22:36:51:48:
cc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4F:1F:A4:C9:8E:4A:95:BF:01:1F:2F:D5:CD:9E:91:B5:93:8A:45
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS43260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:3b:b7:9b:f8:43:8f:06:4f:94:60:55:55:60:4c:5b:f2:36:
35:c7:97:45:78:28:15:9e:c6:ea:62:81:ee:5d:dc:3c:bd:98:
87:22:49:8c:de:8f:77:b1:0f:2b:ab:9e:6e:a5:43:88:b4:ba:
9b:a8:a9:1f:80:75:5e:77:c5:3b:c6:22:e4:00:fc:bf:ff:4f:
e3:e3:60:e4:48:aa:12:52:c8:5d:0b:f3:25:bf:08:73:8c:58:
84:77:ce:31:d0:1c:53:2c:ae:e7:71:fe:2a:ef:84:63:b9:12:
3c:92:e5:dc:74:90:0f:16:70:8c:06:a9:97:fb:b8:2e:b9:34:
6d:7d:a4:25:65:80:2e:d5:56:9f:d1:a6:df:ec:cc:55:c5:ad:
c0:fd:c4:ed:89:fe:db:f3:66:ad:4e:1e:e2:25:74:82:75:3e:
00:7c:9d:44:e5:eb:6b:e0:ff:97:65:2e:87:8f:82:0e:af:2a:
94:da:85:a8:86:87:89:61:60:25:61:14:70:57:5c:89:af:db:
88:d9:52:60:1d:11:c8:39:bf:49:e5:6b:66:33:d9:be:af:20:
e4:7a:5c:23:00:55:c3:eb:a9:35:e4:b1:3d:03:93:56:83:aa:
dd:57:dc:bb:d9:ac:db:84:46:3d:50:6d:3e:ec:75:63:a4:b2:
1f:ec:5f:28
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUZifno5lCOTJAUhjZGcc48oPeAlQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNDAzMDcxNzQ0MDVaFw0yNTAzMDYxNzQ5MDVaMDMxMTAvBgNV
BAMTKEI0NEYxRkE0Qzk4RTRBOTVCRjAxMUYyRkQ1Q0Q5RTkxQjU5MzhBNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChT1De8BppbyvbMLK/pzTDf0zO
6k1RsNxBu6BNvcgbRGeiZy3XQQ6rnEjhQ/OXHmnQqzlUBhYsyJP98lOHkRVeVsPC
sUahRQnif0hHAmLJ3bnfmiMddOr8UyEpkUuaUtCDkDfdPUgqoaUa18Vo3yCW7iPN
JZ+GLfBboaDvyXydbcZoz0nh2Pldsxj942ygxxIqsMEVWNB9lfseVNO4zvciGgsP
VAj3LCX7iNmSo/lRHiWSTxGIHada08qhVDWfs9MzAx1TN8Gr1aZK28wd2f9yIqNV
SUZtgrkKyiNHHMH/ggbi5U9/c4Xsoe+y0y3tyw8QzrLyYF3vR/mbIjZRSMxxAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUtE8fpMmOSpW/AR8v1c2ekbWTikUwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNDMyNjAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCaQUw
DQYJKoZIhvcNAQELBQADggEBALA7t5v4Q48GT5RgVVVgTFvyNjXHl0V4KBWexupi
ge5d3Dy9mIciSYzej3exDyurnm6lQ4i0upuoqR+AdV53xTvGIuQA/L//T+PjYORI
qhJSyF0L8yW/CHOMWIR3zjHQHFMsrudx/irvhGO5EjyS5dx0kA8WcIwGqZf7uC65
NG19pCVlgC7VVp/Rpt/szFXFrcD9xO2J/tvzZq1OHuIldIJ1PgB8nUTl62vg/5dl
LoePgg6vKpTahaiGh4lhYCVhFHBXXImv24jZUmAdEcg5v0nla2Yz2b6vIOR6XCMA
VcPrqTXksT0Dk1aDqt1X3LvZrNuERj1QbT7sdWOksh/sXyg=
-----END CERTIFICATE-----
Generated at Fri Apr 5 15:50:54 2024 by rpki-client on console-ams.rpki-client.org