Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60068.roa
File: AS60068.roa (raw, json)
Hash identifier: 06vYOpUXGNPwS0LwOQ7fKZ0pHn9rVMCBjslhRRNPm/A=
Subject key identifier: B4:0A:83:56:88:67:6C:26:37:B8:AB:72:DE:E8:D3:71:1D:63:0C:EF
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5EF2AA2B4EE4B9968046668851811EA4D932548E
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60068.roa
Signing time: Wed 20 Sep 2023 11:38:26 +0000
ROA not before: Wed 20 Sep 2023 11:33:26 +0000
ROA not after: Wed 18 Sep 2024 11:38:26 +0000
asID: 60068
IP address blocks: 193.142.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f2:aa:2b:4e:e4:b9:96:80:46:66:88:51:81:1e:a4:d9:32:54:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 20 11:33:26 2023 GMT
Not After : Sep 18 11:38:26 2024 GMT
Subject: CN=B40A835688676C2637B8AB72DEE8D3711D630CEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:f3:ae:fc:db:93:b3:37:fd:45:1e:cd:fd:
9d:ab:b3:72:d6:d7:02:46:c1:e4:83:28:74:5c:ee:
0f:78:9a:6e:c2:37:aa:e8:f7:32:1d:59:be:55:01:
09:91:c6:82:03:6b:ff:00:fb:c5:8b:1a:2a:0b:49:
f5:10:a1:10:5e:5c:78:3e:06:54:3f:98:d7:43:49:
98:18:72:23:96:3c:2c:22:23:a8:62:bb:b0:d3:c7:
ac:70:0f:42:9a:23:45:e4:90:c0:9d:3b:a0:fe:7c:
0c:2e:67:84:a7:1c:ba:4a:f4:c1:d5:f5:a0:a8:d6:
46:52:4e:f2:5a:f0:8d:f5:00:cc:c8:da:67:2c:79:
66:66:64:be:59:e5:1f:b7:ec:c0:7f:61:8f:ea:e9:
77:21:24:a8:37:3b:86:85:10:0d:be:b4:89:54:08:
5f:52:76:f6:97:4e:08:ee:13:09:67:f9:ac:da:4f:
ed:1e:f4:db:24:81:4b:41:47:14:0a:7d:cb:0f:04:
d1:47:28:95:2d:76:ae:ad:c0:80:34:f1:86:83:d3:
4f:f2:9f:bd:ec:de:68:c0:12:31:52:e9:19:82:f1:
5b:4a:93:04:75:85:ec:1a:57:dd:b7:57:14:05:6c:
31:56:b3:3b:76:c4:a0:89:2a:68:d6:4a:ef:1b:24:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0A:83:56:88:67:6C:26:37:B8:AB:72:DE:E8:D3:71:1D:63:0C:EF
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.22.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:4d:b8:aa:d1:d1:15:e3:06:74:03:d8:d1:b9:5a:57:09:5e:
bc:24:63:c8:48:b7:ba:a4:3f:22:30:7c:3a:58:da:fe:8f:c0:
28:5f:87:3e:87:0e:58:62:90:9b:b5:d2:47:35:50:11:93:3d:
f4:43:6e:3a:76:a1:85:12:34:92:d8:e6:c9:c3:19:b3:93:6e:
00:6b:76:ce:82:35:ff:18:4e:30:f4:73:93:96:de:9c:63:fc:
83:1b:ef:86:47:1c:20:83:14:f3:dd:33:6e:17:9d:86:a3:b3:
bf:98:40:13:df:d2:e5:fd:4d:8b:6d:3b:5b:8f:43:90:12:57:
41:5e:fd:2b:ed:55:3c:9c:4c:12:18:9e:e1:2a:5a:ac:cb:dc:
64:c3:27:0d:e8:81:51:0e:b7:bc:df:87:f4:49:2d:e0:13:f3:
f5:50:38:6e:4d:3d:cd:39:a3:4f:6f:0e:30:ca:52:ce:07:96:
4e:49:12:13:24:97:e3:fa:11:27:88:fc:a4:df:f0:e9:cb:ed:
b1:ca:ac:2a:d9:f5:63:83:e9:d3:ce:3a:d8:91:a4:91:ac:44:
6f:dc:7a:40:62:a6:93:e0:68:e2:37:bc:7a:04:cd:6d:48:64:
62:22:50:bb:06:6c:79:9c:8f:fb:8f:02:3c:c5:78:38:ee:8f:
f0:3c:f6:6f
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 21 09:57:54 2023 by rpki-client on console-fra.rpki-client.org