Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60602.roa
File: AS60602.roa (raw, json)
Hash identifier: q562b7BdjkCJIb67GQCFCzyBc/JQoJxG4zIuwOn5V3Y=
Subject key identifier: 2B:EB:DE:A4:6E:D2:5F:47:8C:4F:70:30:8D:8B:0B:E2:E9:7F:3B:38
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6D3D8F5BA3F75DB62574AB578429C7EE21A4FE90
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60602.roa
Signing time: Thu 12 Jan 2023 12:07:42 +0000
ROA not before: Thu 12 Jan 2023 12:02:42 +0000
ROA not after: Thu 11 Jan 2024 12:07:42 +0000
asID: 60602
IP address blocks: 193.151.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:3d:8f:5b:a3:f7:5d:b6:25:74:ab:57:84:29:c7:ee:21:a4:fe:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 12 12:02:42 2023 GMT
Not After : Jan 11 12:07:42 2024 GMT
Subject: CN=2BEBDEA46ED25F478C4F70308D8B0BE2E97F3B38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5a:5c:b5:38:50:fb:9a:70:3e:4c:04:04:20:
64:e1:9f:a5:dc:90:c4:43:15:96:38:89:6e:72:d4:
61:ab:2c:2c:59:4c:0a:b5:94:3e:4c:d8:9f:ba:0a:
b1:04:eb:52:1c:08:70:7f:b8:e3:12:7e:2f:7a:a4:
70:0e:cc:fd:2b:f5:cd:6c:e4:53:24:16:60:a5:e7:
f2:27:f7:99:14:d0:59:74:9c:71:b1:5e:61:b8:cd:
4d:6e:d9:e0:1b:63:a8:82:0d:89:3e:f8:cd:92:2c:
5f:20:f0:d3:19:e1:9b:b9:18:82:b7:71:3a:a0:fd:
39:10:67:d6:c3:1a:66:6a:03:04:a1:bd:57:f1:a2:
f7:03:6f:bf:2a:f7:53:ef:5d:68:85:43:d6:a5:ea:
5e:c6:ea:10:0d:0a:e7:6c:55:e2:a1:54:95:32:76:
63:fd:62:4e:76:0b:cf:ad:64:e3:6d:b3:0c:c2:bb:
55:ea:e0:eb:58:ce:7b:06:6c:96:2f:3e:2a:b7:d2:
5f:27:3f:3f:6a:53:9f:fb:23:ba:2d:07:b4:b9:5c:
c7:fe:ef:d4:34:42:8e:ec:6d:e5:bd:9b:2d:10:ae:
3b:89:18:28:34:5d:dd:de:cc:d7:1d:10:98:d6:33:
1c:9b:8e:97:cb:f3:f1:a9:7c:f3:41:8c:12:52:7f:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EB:DE:A4:6E:D2:5F:47:8C:4F:70:30:8D:8B:0B:E2:E9:7F:3B:38
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60602.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.181.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:ef:a2:36:f6:a6:70:5a:4f:7d:cd:af:be:5c:f6:7d:bf:a7:
21:8c:62:ba:b3:58:ab:97:63:b4:7a:a1:c4:27:77:08:99:21:
71:11:cc:97:8c:9f:a3:5c:2d:b2:ab:22:7c:ec:cc:fb:5a:25:
df:35:c9:0e:cc:0f:a5:42:d6:5c:79:33:bb:67:51:2f:6a:70:
09:16:0f:be:91:74:77:4c:4b:a3:8d:f1:88:8c:83:51:12:e8:
6a:19:d5:89:bd:b6:97:ad:7d:ca:aa:ad:44:57:68:79:f0:f1:
5c:70:4c:1e:17:3e:1e:6c:72:7a:71:c7:86:93:97:51:80:3a:
be:61:88:77:05:e6:70:e4:ee:c6:e2:c2:39:6d:4c:6a:f8:b7:
ba:fd:f8:b8:17:76:9a:c1:dc:2a:c0:e6:8c:f1:d1:ed:a6:f0:
57:9e:29:73:d4:d1:54:13:8a:0e:62:85:90:89:1e:a9:a5:64:
47:ac:a4:c9:92:0b:69:3f:4f:e7:40:67:40:9c:06:80:50:77:
4d:1d:d5:1f:c1:a8:d4:7e:eb:f2:aa:c9:19:bc:1c:4c:bd:69:
59:62:e2:e2:58:80:5d:73:c6:68:db:79:94:4a:bc:cd:fb:e5:
b5:46:ab:1f:ab:92:f7:e5:39:bb:d2:06:6b:2d:b3:37:be:6c:
d4:90:2e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org