Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS49770.roa
File: AS49770.roa (raw, json)
Hash identifier: QgLlNzTTdR/7DZ74xCnUqUqE4pl6hBux0r4Qot3WdUs=
Subject key identifier: 71:9C:5F:E6:AF:A3:9F:FD:C9:52:91:B8:D2:46:02:CD:D2:45:74:EC
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 256259973CCDBF6623A2FCD0226F93B70C193A5C
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS49770.roa
Signing time: Fri 24 Mar 2023 10:49:56 +0000
ROA not before: Fri 24 Mar 2023 10:44:56 +0000
ROA not after: Fri 22 Mar 2024 10:49:56 +0000
asID: 49770
IP address blocks: 45.155.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:62:59:97:3c:cd:bf:66:23:a2:fc:d0:22:6f:93:b7:0c:19:3a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 24 10:44:56 2023 GMT
Not After : Mar 22 10:49:56 2024 GMT
Subject: CN=719C5FE6AFA39FFDC95291B8D24602CDD24574EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:0a:33:b4:85:5d:8c:3d:8a:db:8d:e2:52:
53:b6:35:4a:51:d5:b2:dc:9c:b0:0a:40:57:90:e2:
54:6a:16:fd:73:8f:79:61:b0:87:5a:4d:53:a9:de:
25:b6:d4:e8:4c:51:0f:a5:00:f5:48:97:d5:a9:04:
ad:5f:80:c5:03:c9:7f:b1:e7:22:72:79:e0:c5:05:
be:1a:0f:70:fd:27:7a:b6:7d:b2:73:17:0a:97:ab:
b6:be:17:bd:75:d2:d3:2d:0e:da:e9:c1:3b:9d:84:
29:de:fa:2f:7f:a1:69:1a:26:ef:b0:c6:41:b1:bc:
df:c1:cf:74:e5:7b:da:38:2b:a2:38:0d:87:b8:b7:
ee:43:a1:93:a1:76:cd:2c:3b:73:c3:e5:72:68:ee:
b9:f1:db:29:dd:3c:63:50:d8:68:76:95:2d:bd:1b:
98:73:3e:9e:eb:c3:64:96:95:30:4b:4e:87:4b:51:
b1:35:0e:84:fd:eb:7b:4f:ea:2a:8d:a3:9e:49:b8:
b6:3e:53:44:f7:30:5c:c5:99:95:48:f2:95:66:fd:
c6:b8:22:f3:9a:a5:1f:42:4b:2d:d9:4e:ec:0f:a0:
9e:6c:78:ee:07:ef:0c:34:95:21:b8:ab:ef:a4:e2:
e3:81:08:1b:93:96:bb:c3:aa:b7:39:1b:b8:90:e6:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9C:5F:E6:AF:A3:9F:FD:C9:52:91:B8:D2:46:02:CD:D2:45:74:EC
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS49770.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.16.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:aa:e6:25:e5:1d:db:78:0c:35:1c:6f:be:33:c2:55:1f:2c:
5f:b3:5d:84:00:31:72:5f:a9:8c:26:61:d9:42:e0:94:ee:0f:
56:60:55:56:bd:bf:8f:db:c7:e1:c0:ff:c7:2c:ca:07:7a:3c:
93:70:9e:76:e1:d8:92:d1:b8:60:3f:16:46:31:cb:32:cb:b7:
6b:44:0f:a7:f3:83:89:0c:d4:ec:3f:19:39:f5:ce:72:3a:33:
13:d6:9e:e8:08:f9:15:7e:c2:59:8b:82:e0:87:8f:94:7a:bb:
2c:08:64:d6:db:2c:b7:5e:0a:8b:f1:9d:1b:08:c5:32:d4:9e:
76:fd:21:8c:64:10:7c:c2:05:40:60:ba:62:8f:f6:89:0c:b1:
81:38:9f:32:92:bc:71:65:b4:db:4c:35:c7:28:c3:25:55:59:
15:f0:7c:2e:90:8a:37:34:7c:db:57:e5:d0:60:eb:74:b0:8e:
dd:d2:37:97:60:79:43:ab:3a:ce:7e:de:b7:62:0b:6e:26:66:
19:ae:16:63:ce:c2:07:80:ee:d1:f6:16:18:e4:2b:67:b9:7d:
17:8e:47:c3:18:17:f1:8f:da:4e:01:9a:04:b9:b3:1b:13:73:
fc:b4:73:a7:23:ef:35:05:63:ac:f6:df:35:62:49:41:5d:ae:
61:29:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org