Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60240.roa
File: AS60240.roa (raw, json)
Hash identifier: FS64n/mUXXHhKxqTFmNjQtYb9uLeBpSaE94KaUCBO0o=
Subject key identifier: 45:C2:9B:64:D8:F5:E8:2F:65:55:5B:14:19:0D:64:FF:57:42:35:F4
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 399A601B56C8DD9491F58800575F8AE0EE6C63F6
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60240.roa
Signing time: Thu 29 Dec 2022 12:26:20 +0000
ROA not before: Thu 29 Dec 2022 12:21:20 +0000
ROA not after: Thu 28 Dec 2023 12:26:20 +0000
asID: 60240
IP address blocks: 45.149.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:9a:60:1b:56:c8:dd:94:91:f5:88:00:57:5f:8a:e0:ee:6c:63:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 29 12:21:20 2022 GMT
Not After : Dec 28 12:26:20 2023 GMT
Subject: CN=45C29B64D8F5E82F65555B14190D64FF574235F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:de:a1:d0:6c:88:8d:d5:13:00:39:a0:8c:
9b:25:9d:10:6b:64:6d:15:85:b3:98:3c:e8:22:5d:
cf:e1:c7:b4:67:c4:f0:3e:f6:ef:86:63:f1:85:c2:
a5:a7:15:e3:97:2a:f3:6c:b1:23:fc:f7:40:19:23:
f2:e5:d9:2d:2c:dc:4f:98:ed:0c:c4:65:11:4e:63:
91:59:57:88:b6:93:16:2c:fe:40:06:d9:86:68:2f:
82:4a:e8:36:7a:9e:6a:08:81:8f:2a:be:ea:9f:7c:
6f:b5:bd:96:21:97:f2:a5:ea:fd:b4:c1:18:7c:06:
01:58:31:f4:dc:50:fa:78:a1:0f:e6:fe:7a:c0:e6:
ad:ec:5b:1f:ef:ae:2f:41:90:3a:c9:f6:ab:46:db:
80:63:b9:f1:24:d7:68:9e:6b:c8:f4:e6:a0:cf:05:
2a:87:fb:be:7f:cd:57:12:48:e1:7e:58:84:94:52:
fd:21:c7:6b:86:2c:4c:b3:be:e0:39:64:89:91:73:
a0:8d:92:9f:33:70:e7:31:df:80:ee:f9:df:39:3e:
7b:a5:56:c6:37:c6:7e:e2:f6:48:67:1a:c6:6a:a1:
30:a8:9c:6d:f5:d5:77:c7:1a:14:1c:df:f0:e3:cc:
fa:4c:3a:da:c3:bc:02:d9:72:20:b8:b7:31:07:ab:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C2:9B:64:D8:F5:E8:2F:65:55:5B:14:19:0D:64:FF:57:42:35:F4
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.185.0/24
Signature Algorithm: sha256WithRSAEncryption
46:9b:e2:95:d3:1d:73:31:c8:34:15:15:5c:cb:f7:ab:f6:b3:
71:87:79:f4:82:57:d6:0b:56:e6:07:4c:f1:bc:ec:fd:f3:c7:
54:7a:d3:20:a4:cb:f8:21:bf:d4:13:a7:ea:45:b8:12:f8:79:
88:ac:57:39:cf:bd:b7:ad:17:7b:ea:84:7e:a3:3e:0d:3d:59:
1c:0e:41:33:06:13:8d:fd:91:f1:39:a6:d8:26:9c:4e:3d:d7:
c6:c0:e2:ee:48:03:a7:3c:58:0b:d7:25:af:be:72:3d:2f:7a:
56:df:52:2d:ba:d7:c5:31:4d:71:ff:1b:db:2d:d1:14:d6:2f:
0f:25:a2:8d:97:76:44:73:d7:74:98:09:6d:9d:b1:f1:f6:a3:
ef:d9:0e:a9:bc:ed:b2:15:d8:d7:12:08:df:e8:c2:b9:43:4d:
60:c8:b3:d7:96:9e:a2:54:22:3e:03:73:e0:ab:93:5d:7f:7e:
20:43:a7:f5:f7:a6:25:48:3f:92:4a:ff:30:2e:10:23:68:a9:
5c:c9:be:d2:fe:b1:b1:67:46:ed:59:0d:70:d6:8c:ca:7a:73:
5a:27:82:85:35:9e:94:77:a5:62:ec:09:ad:9d:0d:a6:d3:1e:
56:e2:84:b2:31:85:98:74:7d:32:18:1a:b0:16:99:53:7c:71:
6f:d7:04:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org