Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137509.roa
File: AS137509.roa (raw, json)
Hash identifier: h3jKHYVPj7brzkzX1ctOLb9Y1MVXEqQcrrPzrLWfK9M=
Subject key identifier: 47:72:12:7F:A5:6D:F9:4C:C6:92:FE:10:A2:9E:C3:86:39:72:28:37
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 365B5CA4B9371314813C0C57E780AF0514BCEA40
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137509.roa
Signing time: Sat 27 Apr 2024 13:43:55 +0000
ROA not before: Sat 27 Apr 2024 13:38:55 +0000
ROA not after: Sat 26 Apr 2025 13:43:55 +0000
asID: 137509
IP address blocks: 147.79.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jul 2024 10:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:5b:5c:a4:b9:37:13:14:81:3c:0c:57:e7:80:af:05:14:bc:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 27 13:38:55 2024 GMT
Not After : Apr 26 13:43:55 2025 GMT
Subject: CN=4772127FA56DF94CC692FE10A29EC38639722837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:dc:e1:8e:c4:3e:7a:c4:3b:84:12:30:2c:
d0:36:f5:6a:88:6f:04:6e:6f:78:0b:79:91:ef:de:
c8:6a:62:4a:5a:a7:ed:ef:31:fe:55:02:d3:01:1b:
29:db:23:67:76:dd:6f:fb:24:44:9a:24:bf:22:ee:
9b:b2:96:88:e3:c9:24:bf:3b:93:f3:43:15:cd:38:
41:4f:c1:85:8c:2e:7f:b1:eb:83:f2:c7:0a:11:02:
df:78:04:fb:b8:3e:35:09:55:9c:e1:f6:c0:cb:c7:
d5:35:be:6e:ea:69:44:55:18:c2:a2:7f:4e:eb:dc:
d1:8b:b2:2c:87:ef:be:7b:40:e3:58:4f:75:47:1a:
f5:80:ee:f5:02:3b:53:88:f6:d9:01:4b:12:d3:87:
82:f8:bc:28:cc:4e:3f:ae:41:b8:da:29:92:3a:95:
59:aa:d4:5f:3b:a7:15:19:87:3b:37:17:88:61:7b:
37:ef:5a:3f:f5:29:6d:bf:87:e2:c6:ef:a7:3a:a5:
bc:27:f4:94:10:b9:52:54:90:18:90:2c:01:a5:84:
5f:e3:f0:10:8a:2f:89:1d:56:8d:87:f1:6f:73:ac:
4b:a7:7a:3b:ba:bc:04:22:63:ae:17:bb:86:8e:3e:
22:24:48:44:73:17:d2:32:bd:7b:47:3a:6a:04:e8:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:72:12:7F:A5:6D:F9:4C:C6:92:FE:10:A2:9E:C3:86:39:72:28:37
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.58.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ab:48:49:79:15:5b:b9:46:ed:38:39:c1:66:42:70:37:3a:
34:04:3c:be:5e:0e:58:59:07:76:dd:20:c4:f1:14:7e:d8:55:
63:89:cd:64:b2:97:16:c8:ca:6c:e1:b3:d7:16:9b:a6:af:f4:
55:61:47:dd:ca:e1:91:83:47:40:32:e9:c0:9a:3a:9f:b1:27:
d7:7d:af:36:bc:37:11:ff:36:7a:d2:f3:9c:06:e4:c0:79:d7:
42:2e:1f:f2:1b:29:6a:bb:f0:bd:f8:87:ea:5a:d9:c0:72:24:
74:a2:9a:f7:4a:8e:e8:80:d8:5e:03:10:70:a2:3a:02:53:cd:
6d:a3:27:c6:6b:b9:b9:b0:9e:6e:bf:d7:47:fc:53:9d:16:d6:
3b:ba:8b:aa:52:14:e7:54:57:55:7d:72:74:8e:8e:bd:9e:14:
d7:a0:89:8f:4f:19:50:54:a6:e1:0f:35:b9:39:61:63:71:16:
01:da:21:3c:59:bf:30:6f:9a:f6:37:b5:26:86:76:3e:f0:e3:
77:93:13:a3:3c:8d:5e:4e:9d:57:b5:42:df:0f:a8:95:26:d8:
4c:00:36:fe:42:56:d8:0a:cf:0a:97:44:68:5c:b0:68:dc:23:
18:6d:04:7c:8f:79:67:c6:c5:26:19:9c:0a:48:f4:d5:dd:85:
6d:0d:fa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 11:42:07 2024 by rpki-client on console-fra.rpki-client.org