Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS45887.roa
File: AS45887.roa (raw, json)
Hash identifier: iYomK1vFmbAtmtefI5D/LiuUJja9qNvmBZD7a9iJR5c=
Subject key identifier: 3D:C7:6D:C2:1B:EC:2B:1C:D3:40:72:8B:E1:9D:20:A8:52:2C:54:D4
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2668737CE67091C191AB33FF185D9D70728DB73A
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS45887.roa
Signing time: Wed 07 Jun 2023 04:27:27 +0000
ROA not before: Wed 07 Jun 2023 04:22:27 +0000
ROA not after: Wed 05 Jun 2024 04:27:27 +0000
asID: 45887
IP address blocks: 147.78.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:68:73:7c:e6:70:91:c1:91:ab:33:ff:18:5d:9d:70:72:8d:b7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 7 04:22:27 2023 GMT
Not After : Jun 5 04:27:27 2024 GMT
Subject: CN=3DC76DC21BEC2B1CD340728BE19D20A8522C54D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:fe:e3:7a:35:50:d4:53:9f:77:e7:eb:56:
36:40:45:ca:f7:c8:2f:40:77:b3:e7:d6:5e:f9:a4:
5b:14:69:df:97:62:08:0a:c0:0a:de:12:0e:8a:c8:
69:8e:86:11:4b:6d:29:1f:17:28:57:74:eb:23:6d:
ba:84:2d:16:1b:71:08:bf:fe:fd:67:ec:17:2b:fd:
ea:0d:ca:9a:74:ed:6a:cf:6d:e4:a7:0a:7e:9f:90:
12:a3:87:86:c3:c3:2a:90:aa:48:1d:37:58:a9:c0:
56:20:c3:da:c1:0b:ac:24:82:59:ce:01:12:75:ca:
67:cf:49:78:ed:ec:5e:e7:b1:87:0a:8b:90:21:e4:
12:72:1d:da:09:87:86:24:f4:9c:ab:ca:f3:41:e0:
c6:94:b8:23:44:d4:49:8b:2d:ea:14:cb:7c:7f:88:
ea:9b:b6:90:23:23:2b:92:79:fe:7f:4e:cb:8e:93:
64:74:ac:3b:09:4f:59:5c:e0:72:70:86:50:2e:a7:
4d:fb:b4:6b:36:1d:e2:b8:fa:a9:47:e5:54:bf:4f:
4f:28:4b:60:42:cc:63:70:29:2f:de:8c:a8:d9:57:
ea:85:db:39:67:9b:54:a7:45:a4:90:4a:5c:00:8a:
43:a6:04:ec:c0:2b:bc:e2:c7:a9:4e:5f:55:32:af:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C7:6D:C2:1B:EC:2B:1C:D3:40:72:8B:E1:9D:20:A8:52:2C:54:D4
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS45887.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:27:66:3f:6f:bc:03:51:75:e2:fd:1c:27:56:d7:4e:ff:fb:
76:bb:a5:d9:af:e0:dc:4f:cf:41:9e:39:1e:9f:87:a7:55:1b:
98:95:e4:97:80:05:a0:3a:e3:81:31:e5:68:60:b9:c4:64:53:
d7:ed:18:7d:e3:d8:9a:a3:f2:9a:de:3a:1f:9d:f6:2a:27:29:
fd:ad:82:5b:e6:aa:ef:f7:2e:2c:d3:11:37:9e:35:62:7d:83:
62:a9:66:06:7d:50:5d:4c:f3:e1:3b:b7:a3:24:9b:02:a1:15:
e3:79:76:7a:fd:ac:0a:49:87:d4:c4:29:0b:a9:2b:76:f0:4e:
04:fe:94:f8:54:52:05:3d:ef:c0:6b:06:c6:50:44:f8:7b:bf:
24:c0:f1:6d:e0:4a:fb:d9:aa:57:93:7b:f9:ff:29:63:1f:1e:
a2:0d:1a:e3:7c:b4:a9:c0:5e:37:30:cf:a1:7e:fe:99:1b:67:
09:b0:2d:36:dd:39:af:8e:9b:3e:2c:6a:06:79:ba:a9:15:c8:
eb:45:7b:20:6a:5d:db:cb:a6:68:82:4e:19:0c:cf:96:e5:b3:
3a:f3:1f:5b:57:af:57:f3:b2:26:d6:f6:32:bb:30:2c:00:86:
92:dc:7a:68:f6:6b:c2:2d:ec:ee:0d:09:bd:f7:a6:f5:ef:8f:
f2:d7:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 01:27:02 2024 by rpki-client on console-fra.rpki-client.org