Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS59432.roa
File: AS59432.roa (raw, json)
Hash identifier: AxjJE23Tw1TBGfbZ2T7g6Do5qGdVy2FA5hWn5KJSNC4=
Subject key identifier: F8:CC:C2:D8:E1:1A:9D:24:F8:53:87:13:78:C7:58:FE:76:9C:9E:B6
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 682E0165D3F738CB8378AE58D1C9F2EA5DD94015
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS59432.roa
Signing time: Sun 08 Jan 2023 00:00:15 +0000
ROA not before: Sat 07 Jan 2023 23:55:15 +0000
ROA not after: Sun 07 Jan 2024 00:00:15 +0000
asID: 59432
IP address blocks: 176.105.226.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:2e:01:65:d3:f7:38:cb:83:78:ae:58:d1:c9:f2:ea:5d:d9:40:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 7 23:55:15 2023 GMT
Not After : Jan 7 00:00:15 2024 GMT
Subject: CN=F8CCC2D8E11A9D24F853871378C758FE769C9EB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:37:eb:f4:21:79:93:85:c3:20:69:90:5c:7b:
e5:9b:c8:a5:64:09:fc:cc:a5:82:d9:f3:14:7b:55:
14:92:e6:4a:d6:5e:4d:5d:ab:93:1f:e1:ea:ae:b3:
d4:89:7f:ae:75:ed:35:05:96:77:a0:c6:2d:61:30:
86:44:09:92:b7:f4:8d:05:0a:1e:83:7c:d0:55:52:
71:80:82:23:79:7c:05:96:6f:5e:83:91:b2:69:35:
3e:93:6e:1a:a6:26:bf:bd:3f:67:0a:ef:8e:8b:35:
90:ab:3b:a4:fc:51:9f:b5:17:91:eb:64:1f:78:d6:
f1:9e:ec:e3:86:fb:8b:cc:01:66:d9:39:d0:b4:4f:
15:ae:8d:df:41:43:b5:11:e2:e2:a1:22:04:85:97:
7e:87:79:1d:18:76:00:ac:75:4c:7e:41:98:ea:17:
da:be:91:9b:24:49:f5:4c:fb:f7:f3:4e:d9:9d:3a:
8e:26:82:c4:db:b4:91:f8:2a:73:fd:42:1e:14:2c:
fb:1f:d6:c2:18:0d:61:84:73:c6:ec:b2:94:f1:2f:
44:65:0f:2e:b8:ff:8a:39:fe:36:02:b6:2c:96:24:
84:76:ef:68:c1:92:45:d3:dd:f6:a1:df:19:1e:f0:
ad:d7:b1:79:ff:86:36:23:7a:49:93:20:65:0d:3b:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CC:C2:D8:E1:1A:9D:24:F8:53:87:13:78:C7:58:FE:76:9C:9E:B6
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS59432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.226.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:92:d0:3f:e7:21:5a:9c:26:93:e7:82:33:c8:83:02:a7:2d:
b4:74:55:5b:5f:6d:bc:13:03:f0:c7:a1:77:50:e8:af:09:76:
6a:bb:eb:c5:fd:e0:d4:a6:f6:6f:c8:e4:d1:2e:46:4e:7e:3a:
88:90:34:09:72:46:84:b5:fe:9a:66:97:bc:f9:d1:99:2e:ae:
7a:f3:ec:fd:52:88:60:f0:91:63:c3:c5:a9:1c:54:6d:1b:40:
c8:76:d5:dc:cf:84:6d:0a:0f:c0:00:20:f7:09:8e:a9:6c:08:
b0:eb:ef:b8:9d:27:15:e4:bf:41:05:49:02:ed:e1:b8:f7:f5:
bc:ee:1f:be:1f:7e:28:6e:72:d3:57:c4:4d:f1:9f:a3:ea:0c:
b6:26:cf:86:c7:e9:af:d3:fe:b6:f9:3e:c0:7f:c8:61:a4:ef:
8c:ed:d6:9e:5a:a2:23:56:06:68:71:ef:ca:e0:ab:bf:6b:13:
ed:0e:59:79:a1:b7:ee:8a:2b:43:6b:8e:4c:97:d0:05:f8:8e:
16:42:5c:56:ce:77:d0:27:4b:cc:c1:ba:54:ed:8d:12:de:6c:
62:c2:b7:b3:4d:ea:23:c9:54:ff:d6:41:2a:ce:6f:4f:eb:93:
9d:f4:c4:50:bf:b5:52:35:95:27:a0:a4:b4:79:2f:84:07:62:
49:39:ae:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org