Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS49981.roa
File: AS49981.roa (raw, json)
Hash identifier: 8gPm9aL9w0w+myCzd6oOKOmTPlgDnj4GZhACzNHQV5c=
Subject key identifier: 32:C6:EF:4C:66:AA:3E:C9:19:3A:7A:6C:9A:3C:58:10:9A:D6:60:94
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0F8B6F7BD337B7451BD16B84DA1B3C4A702F3737
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS49981.roa
Signing time: Tue 17 Oct 2023 13:00:06 +0000
ROA not before: Tue 17 Oct 2023 12:55:06 +0000
ROA not after: Tue 15 Oct 2024 13:00:06 +0000
asID: 49981
IP address blocks: 185.155.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:8b:6f:7b:d3:37:b7:45:1b:d1:6b:84:da:1b:3c:4a:70:2f:37:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 17 12:55:06 2023 GMT
Not After : Oct 15 13:00:06 2024 GMT
Subject: CN=32C6EF4C66AA3EC9193A7A6C9A3C58109AD66094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:e5:1a:e2:83:c6:1a:94:bd:0b:8a:b2:cd:
c3:a1:4e:17:f1:d3:1c:61:25:61:65:96:36:c1:33:
bc:e6:d4:bc:46:92:c8:1b:bd:52:80:5c:15:42:a1:
66:d1:54:f1:5d:22:88:79:a9:dc:31:50:4c:16:35:
e7:6d:88:7b:bf:89:a0:18:48:a1:bb:57:f3:dd:86:
93:26:f8:50:ae:ec:12:6e:8f:d0:a2:f4:26:bc:4d:
b1:27:7a:4f:d0:99:4e:25:41:a6:b5:65:a0:22:77:
c9:d6:46:d0:69:7c:2b:fa:0a:db:28:7a:7c:cf:fb:
41:56:53:c3:32:db:db:12:07:e6:18:75:59:71:3f:
a9:61:aa:47:4f:9c:e4:0f:4b:92:db:ab:89:12:42:
e8:99:bf:5e:b1:8b:59:bd:d2:1f:e4:e9:ad:26:77:
b5:c0:8d:d4:19:b1:25:b3:1f:6a:72:41:44:df:c6:
57:a8:82:60:c7:6f:5f:a1:00:67:52:68:cb:1a:63:
a9:56:38:f4:92:f1:35:84:81:43:33:ae:b5:70:13:
27:16:73:51:57:cf:f5:32:1d:82:41:71:18:f5:e6:
d6:17:7f:10:4f:56:b9:1a:41:89:79:d0:ae:0b:be:
e1:86:01:36:cb:4e:35:4a:f9:32:b5:57:74:29:9c:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C6:EF:4C:66:AA:3E:C9:19:3A:7A:6C:9A:3C:58:10:9A:D6:60:94
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS49981.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.223.0/24
Signature Algorithm: sha256WithRSAEncryption
26:1d:e5:0a:2a:c9:c2:6f:c4:f4:04:65:7a:66:0a:16:14:5a:
33:47:bc:c5:10:2e:75:19:d1:82:d7:44:68:15:ad:17:75:f8:
9c:2a:32:65:3f:28:35:f5:b2:ab:b0:65:8c:c8:0b:61:59:96:
e6:b5:7a:8a:73:8d:b4:a1:89:f7:54:ae:b4:e9:8c:a4:0b:cf:
c3:ba:c3:0a:18:60:5a:fb:05:ad:fa:e4:f1:b8:c2:a1:fa:d6:
19:48:d1:28:ea:0f:35:df:3a:93:73:ca:83:49:a5:2b:28:06:
26:4a:88:a8:7b:e1:e4:03:2f:ff:62:69:5c:87:66:68:ba:6a:
d9:03:0d:e8:b7:f8:14:41:f2:8e:6a:a0:18:44:c7:62:a9:7e:
51:8e:4a:7e:f4:4a:3c:d4:92:17:0d:0b:b3:67:8c:05:05:d9:
8b:17:c0:28:84:46:aa:b1:be:11:67:54:d1:f1:91:a3:66:56:
b8:b0:56:df:30:df:99:22:bb:1a:aa:74:96:83:91:b1:37:30:
ed:39:b1:6b:5e:53:8b:06:66:8d:83:ce:13:e0:10:57:da:e7:
17:8e:16:49:eb:ba:93:23:f3:5d:ae:7a:81:80:42:3f:56:a3:
46:0d:be:85:4d:93:e0:a2:2b:5f:c9:c8:69:b7:76:50:e4:db:
bc:a1:22:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 02:42:01 2024 by rpki-client on console-ams.rpki-client.org