Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63023.roa
File: AS63023.roa (raw, json)
Hash identifier: tFWj3uZd6anoPJ1JpK1NB4JBT1cDmIwh0O0APp/C/Dk=
Subject key identifier: 2F:A0:27:AA:D3:0F:C5:74:5D:E3:0A:90:BB:AF:A9:B2:00:1D:2B:A8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 06AA7C6910D9E07216DE710387C8EEA2F5398A66
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63023.roa
Signing time: Sat 06 Apr 2024 11:09:30 +0000
ROA not before: Sat 06 Apr 2024 11:04:30 +0000
ROA not after: Sat 05 Apr 2025 11:09:30 +0000
asID: 63023
IP address blocks: 147.79.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 May 2024 21:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:aa:7c:69:10:d9:e0:72:16:de:71:03:87:c8:ee:a2:f5:39:8a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 6 11:04:30 2024 GMT
Not After : Apr 5 11:09:30 2025 GMT
Subject: CN=2FA027AAD30FC5745DE30A90BBAFA9B2001D2BA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:ac:f2:76:67:1a:78:69:2e:da:11:52:83:
98:41:c5:97:90:05:2e:39:61:c2:9b:96:82:87:11:
2f:e9:b0:61:f1:42:e6:68:4e:15:e3:2b:be:2a:9d:
b0:fb:05:c7:ca:4a:e5:0d:77:c0:1b:fc:6b:4e:9b:
8d:0f:4b:d2:ad:01:aa:cc:64:76:b3:b4:3b:e1:37:
9e:6e:51:9f:5d:dd:6a:b4:5d:54:f4:72:f1:c7:fc:
77:9b:fd:10:d7:1d:ad:29:25:a1:7d:ff:3f:a3:4e:
2c:ce:ab:55:e7:45:fd:9c:55:f9:0a:ce:d9:1c:11:
1e:71:8f:b2:bc:c9:95:ca:bd:98:8f:cc:95:43:27:
0e:92:2c:fd:2c:3f:e6:92:0d:68:18:46:f2:ae:96:
b8:9d:23:1a:c0:e1:00:3a:98:80:f6:17:f7:a7:ec:
8e:e9:f7:d2:ff:77:f5:e9:b6:2b:1c:78:fd:2f:ab:
c2:cf:07:65:21:89:f9:c3:37:7d:cd:9e:28:cf:f3:
a8:e9:c4:26:8f:8c:7e:85:3d:46:0f:08:46:ee:93:
18:12:81:06:54:d0:66:f5:50:ae:ec:b8:22:87:23:
b2:e5:ac:0d:7d:e8:0c:27:2e:8d:a2:88:71:3e:0c:
69:4d:18:36:47:e9:b6:22:52:57:83:c9:43:8d:61:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A0:27:AA:D3:0F:C5:74:5D:E3:0A:90:BB:AF:A9:B2:00:1D:2B:A8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.59.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:80:c6:7d:12:8f:72:21:92:3b:78:52:1e:d9:7a:e1:c3:e8:
28:d0:fc:e3:e9:db:de:fd:da:c8:92:3d:1a:b3:7c:e0:fd:02:
0c:e6:47:b3:d3:00:4a:95:43:30:8a:26:24:09:13:ff:d9:8a:
bb:62:55:0b:6a:50:bf:c2:32:70:ad:ad:85:ec:99:8a:25:95:
97:19:20:d6:cf:19:3e:47:b6:83:e4:34:cb:89:09:e8:77:06:
6c:dc:ef:a6:b3:de:29:a4:de:fc:ca:a6:6d:9d:10:15:93:6a:
2c:fd:13:38:f9:5e:3e:36:fc:29:cf:70:39:33:df:c0:d4:3b:
3a:c0:22:be:0d:1f:b1:79:ce:5c:83:76:21:48:6d:f1:af:c4:
e2:93:8c:28:77:9d:03:7d:54:fc:2e:26:c2:13:c0:c4:c6:11:
62:93:1d:ba:c8:81:51:f4:3f:1d:02:7d:3a:b4:6c:96:45:34:
e4:d0:65:5b:b9:14:07:3c:6e:25:0f:d6:54:d7:9b:e1:54:e0:
66:51:b5:14:10:36:fb:53:6c:2d:f6:ce:fa:78:9a:f1:f7:0d:
97:f1:72:62:f6:1e:14:a7:d0:0a:32:20:28:c2:29:4e:88:f9:
e3:37:7b:81:b5:d5:69:9d:d9:26:54:6e:f0:e0:26:d2:ff:c5:
da:9f:b6:d3
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUBqp8aRDZ4HIW3nEDh8juovU5imYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDA0MDYxMTA0MzBaFw0yNTA0MDUxMTA5MzBaMDMxMTAvBgNV
BAMTKDJGQTAyN0FBRDMwRkM1NzQ1REUzMEE5MEJCQUZBOUIyMDAxRDJCQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKTKzydmcaeGku2hFSg5hBxZeQ
BS45YcKbloKHES/psGHxQuZoThXjK74qnbD7BcfKSuUNd8Ab/GtOm40PS9KtAarM
ZHaztDvhN55uUZ9d3Wq0XVT0cvHH/Heb/RDXHa0pJaF9/z+jTizOq1XnRf2cVfkK
ztkcER5xj7K8yZXKvZiPzJVDJw6SLP0sP+aSDWgYRvKulridIxrA4QA6mID2F/en
7I7p99L/d/XptisceP0vq8LPB2UhifnDN33NnijP86jpxCaPjH6FPUYPCEbukxgS
gQZU0Gb1UK7suCKHI7LlrA196AwnLo2iiHE+DGlNGDZH6bYiUleDyUONYR0bAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUL6AnqtMPxXRd4wqQu6+psgAdK6gwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNjMwMjMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTTzsw
DQYJKoZIhvcNAQELBQADggEBAEyAxn0Sj3Ihkjt4Uh7ZeuHD6CjQ/OPp29792siS
PRqzfOD9AgzmR7PTAEqVQzCKJiQJE//ZirtiVQtqUL/CMnCtrYXsmYollZcZINbP
GT5HtoPkNMuJCeh3Bmzc76az3imk3vzKpm2dEBWTaiz9Ezj5Xj42/CnPcDkz38DU
OzrAIr4NH7F5zlyDdiFIbfGvxOKTjCh3nQN9VPwuJsITwMTGEWKTHbrIgVH0Px0C
fTq0bJZFNOTQZVu5FAc8biUP1lTXm+FU4GZRtRQQNvtTbC32zvp4mvH3DZfxcmL2
HhSn0AoyICjCKU6I+eM3e4G11Wmd2SZUbvDgJtL/xdqfttM=
Generated at Sun May 5 00:40:54 2024 by rpki-client on console-fra.rpki-client.org