Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10753.roa
File: AS10753.roa (raw, json)
Hash identifier: afEXKKtrLPdaBNdWOdfv9oDEJi8omSUkpsiQCHhxFhU=
Subject key identifier: B1:5E:E7:3E:44:66:4B:49:E8:31:4F:65:EC:56:A0:F4:DF:D5:89:80
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3BCB309892A473449B720977C5AE24B80AF6B7BD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10753.roa
Signing time: Wed 10 Jul 2024 12:49:53 +0000
ROA not before: Wed 10 Jul 2024 12:44:53 +0000
ROA not after: Wed 09 Jul 2025 12:49:53 +0000
asID: 10753
IP address blocks: 140.233.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 28 Jul 2024 00:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:cb:30:98:92:a4:73:44:9b:72:09:77:c5:ae:24:b8:0a:f6:b7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 10 12:44:53 2024 GMT
Not After : Jul 9 12:49:53 2025 GMT
Subject: CN=B15EE73E44664B49E8314F65EC56A0F4DFD58980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:c4:66:25:ac:ae:ce:9a:aa:76:16:8b:ea:
a5:3c:f4:b3:de:88:65:98:0d:a9:3e:c3:3a:aa:b0:
43:a8:5a:12:2d:c8:94:38:9f:fb:85:db:40:42:c6:
23:0c:df:54:a0:ab:95:44:a4:77:78:4e:ea:62:cf:
8f:0f:75:f4:73:8e:9b:59:0f:8e:76:e0:a1:11:f6:
1e:e9:6f:85:31:17:2d:cc:fa:db:df:9e:de:0b:c9:
64:59:24:45:e7:86:e5:c9:e3:bd:6d:ab:be:c4:29:
ca:56:5e:94:b9:aa:f7:ed:72:c1:85:eb:23:7d:57:
99:27:9f:39:e1:9b:6e:ef:7d:f0:2b:69:b3:f6:20:
d7:32:66:d3:7c:46:9f:e4:6b:27:2f:af:4b:42:8d:
da:c4:51:b1:42:16:15:db:04:da:cd:74:62:b5:c3:
3e:a0:19:3e:df:b2:7a:d3:71:ec:e3:8a:c4:8d:16:
38:b2:86:d9:db:28:99:f4:83:4a:4b:fb:42:aa:60:
68:c3:be:16:3c:4b:f2:6d:dd:62:82:fa:1e:19:07:
0f:2a:19:80:bd:b4:45:1a:e9:59:e0:d6:89:d4:d9:
ce:22:d8:29:30:3d:5f:42:c0:70:44:a7:7b:70:da:
0a:b9:49:9e:28:19:fc:f1:fd:44:52:e6:4d:ba:67:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5E:E7:3E:44:66:4B:49:E8:31:4F:65:EC:56:A0:F4:DF:D5:89:80
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.184.0/22
Signature Algorithm: sha256WithRSAEncryption
03:b3:72:6f:02:1d:06:5c:19:f8:8f:1a:f8:4a:73:e6:66:85:
db:db:d7:b0:40:79:ca:4c:69:11:49:40:bc:44:9f:a7:70:43:
e8:ab:a7:17:d1:a3:cb:2e:80:06:f4:3e:49:df:1f:8c:a5:2a:
c2:e7:3a:8a:0e:03:50:e8:c3:1a:a6:b9:f3:9c:23:ec:09:2a:
b4:8e:72:5e:66:f2:36:cf:b1:05:85:c9:ff:5f:b1:30:42:8e:
f8:37:78:90:9c:34:ea:90:e4:77:0a:59:16:38:31:2d:00:59:
85:29:bd:9c:35:12:50:1d:e2:64:c8:79:c5:49:42:2a:8d:a5:
69:1c:9b:ac:fb:52:9e:f5:99:81:f8:43:6d:ed:f0:ec:84:1b:
19:c3:e7:8d:4c:8a:1b:87:83:12:7a:c3:2d:06:bb:23:11:a2:
57:ef:fe:8e:42:7b:3f:7f:64:a8:de:f4:ea:88:b9:6b:0a:b8:
2e:97:5d:02:93:29:33:e8:1a:6e:5c:4d:56:c1:86:73:c3:a4:
87:28:99:aa:86:94:fc:23:c0:b6:23:c8:17:a1:6d:2c:ca:09:
06:c3:47:59:b1:6b:93:f2:57:cd:ab:e4:60:c6:18:54:07:ec:
43:f8:11:75:c2:7b:d4:ef:52:0f:15:8d:3f:e9:4f:1a:d5:23:
5e:48:2a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:42 2024 by rpki-client on console-fra.rpki-client.org