Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60949.roa
File: AS60949.roa (raw, json)
Hash identifier: /KNTXQT0V70knscKVXTQ43LDAobRLNE8GvYEI1bo1YQ=
Subject key identifier: 73:BE:B4:F5:F1:C0:77:13:79:32:C6:89:02:81:34:12:72:54:8D:CD
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 53E13ECE87E6346D617126FED3935E4DB5C5BB29
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60949.roa
Signing time: Mon 23 Oct 2023 15:52:50 +0000
ROA not before: Mon 23 Oct 2023 15:47:50 +0000
ROA not after: Mon 21 Oct 2024 15:52:50 +0000
asID: 60949
IP address blocks: 45.153.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:e1:3e:ce:87:e6:34:6d:61:71:26:fe:d3:93:5e:4d:b5:c5:bb:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 23 15:47:50 2023 GMT
Not After : Oct 21 15:52:50 2024 GMT
Subject: CN=73BEB4F5F1C077137932C6890281341272548DCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:36:2b:33:26:b9:43:16:2f:bf:d5:5c:ea:
ef:1f:53:bf:91:d8:dd:16:19:fb:7b:1e:e5:94:a5:
5c:7c:ed:80:1f:8a:71:b5:37:3c:a1:dc:68:75:25:
fa:de:3c:88:d0:90:a2:01:64:1e:ec:66:26:61:e7:
81:9b:5d:da:00:2a:76:8b:26:97:a4:95:b9:df:2e:
6b:c2:99:cc:15:eb:c3:60:92:3c:52:b7:a5:d8:bb:
54:58:c1:cd:ed:da:9d:52:ba:69:93:68:a8:a3:45:
32:63:5b:76:63:14:7e:aa:60:51:1c:27:c8:62:c5:
94:db:21:d5:36:c0:f6:ce:85:ae:f9:59:72:e7:0d:
34:f2:b4:3e:66:e1:a3:4a:bc:e2:f0:08:4d:da:57:
a5:b3:fe:b6:c8:66:26:e2:8a:c1:76:f3:cd:57:59:
12:16:25:ac:44:19:06:9f:89:50:0a:dc:8f:a0:4c:
89:4c:58:30:00:c0:38:fa:e9:7e:5b:3a:4e:d7:97:
04:d5:40:9a:d7:ea:8d:91:6d:b7:b5:23:1f:e3:c1:
ff:ff:93:81:29:5d:70:25:fa:dd:8d:4d:1e:6d:79:
36:f5:43:09:36:95:b5:86:7b:2e:db:3d:0f:d1:05:
08:b0:5c:67:cc:81:dd:9e:bc:a4:2e:e1:30:95:9c:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BE:B4:F5:F1:C0:77:13:79:32:C6:89:02:81:34:12:72:54:8D:CD
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.7.0/24
Signature Algorithm: sha256WithRSAEncryption
67:56:de:fc:f2:be:48:94:22:13:b4:93:a6:a7:69:5e:0b:b0:
66:f5:c8:9f:f9:f4:0f:f2:d6:9b:af:42:f9:58:fd:c6:ad:44:
07:22:0f:10:d2:a9:b4:42:b5:b1:8a:e4:ba:28:ad:93:06:85:
a9:aa:ad:02:2b:f3:fc:d8:b8:4d:fa:d1:b5:34:b8:8a:a2:62:
a6:a2:f2:cd:40:d3:41:22:40:50:3e:1a:28:b4:bf:f8:f7:35:
a7:ed:5b:1b:4e:f2:66:79:97:9c:d2:6b:a3:28:0d:04:4e:8d:
61:61:37:57:1f:2d:b7:48:b0:3c:9e:d8:bb:6c:b6:f5:df:95:
cd:a1:e8:ad:d9:0b:9e:19:d6:d1:a2:df:6f:6a:30:90:05:1c:
83:49:f5:b3:c1:ad:b0:e9:3b:09:28:0a:7a:a0:d3:a6:1f:8f:
25:c5:11:f5:ad:0b:7c:f1:cb:b9:0c:4b:02:69:13:75:3f:aa:
e3:ad:af:06:e6:cd:68:bc:30:6b:8a:d5:6b:bd:fd:ce:3d:f2:
ef:b0:7c:35:8c:eb:8b:cb:78:b2:ea:ee:b9:2f:8d:de:cc:42:
d2:b7:94:96:a9:7d:89:33:6a:07:98:c4:68:16:55:35:e7:15:
f8:23:39:9e:88:76:46:4e:58:e4:98:48:94:e2:80:9c:32:4b:
a1:37:9b:b4
-----BEGIN CERTIFICATE-----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Generated at Sat Dec 23 00:39:06 2023 by rpki-client on console-ams.rpki-client.org