Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS140208.roa
File: AS140208.roa (raw, json)
Hash identifier: DwI1plcNBmW213XAlL4gcd1nI5YYQ5CZAQZKuXjpsss=
Subject key identifier: 71:5E:DB:09:07:0D:64:77:0E:E1:39:73:47:51:28:95:B7:DD:4E:FF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 43D2B7CC8304D7D655C71A8F8A5528A3DB707D74
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS140208.roa
Signing time: Wed 08 May 2024 12:25:14 +0000
ROA not before: Wed 08 May 2024 12:20:14 +0000
ROA not after: Wed 07 May 2025 12:25:14 +0000
asID: 140208
IP address blocks: 147.79.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 15:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d2:b7:cc:83:04:d7:d6:55:c7:1a:8f:8a:55:28:a3:db:70:7d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 8 12:20:14 2024 GMT
Not After : May 7 12:25:14 2025 GMT
Subject: CN=715EDB09070D64770EE1397347512895B7DD4EFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:69:f2:6c:55:63:ea:99:59:e1:13:5c:d4:
26:01:ae:d1:21:27:f7:2d:35:3a:8e:2a:63:11:d5:
29:cf:e7:60:d8:df:09:4f:a7:4a:43:15:38:ea:e7:
32:8c:7f:3b:83:69:d3:f3:41:63:e0:23:5d:33:b4:
bc:92:52:78:dd:ef:f4:9f:b7:52:ec:1f:4b:a2:d5:
73:9b:5b:f0:04:1b:8f:3f:7e:72:4d:ff:fe:b5:a4:
b5:fc:bd:70:50:48:80:68:b4:66:d9:cd:d8:e6:6a:
9d:b4:dc:b4:aa:05:27:c2:12:f6:10:e7:87:1f:bf:
06:25:62:9b:68:09:47:02:eb:0a:6a:1e:d4:58:6f:
8f:72:05:11:db:44:a1:bc:7f:aa:d1:a7:55:7c:1a:
b3:1b:e1:f4:1d:91:4a:0d:94:45:1c:bd:1a:a1:c6:
17:9e:23:68:6c:3c:3e:c1:bd:ae:20:f8:3a:dd:91:
07:27:1f:57:ed:82:01:a4:e0:a8:97:97:08:b4:e9:
c4:01:3b:0c:ec:35:91:b3:ad:01:62:a1:b7:53:b0:
4a:e9:0f:c2:f0:7b:68:cb:21:11:d4:75:c1:4c:3d:
03:67:12:06:9f:90:91:5a:ba:19:df:c2:41:b5:19:
41:eb:e0:89:ea:c8:72:b2:5b:f5:f0:a5:a8:f5:84:
7f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5E:DB:09:07:0D:64:77:0E:E1:39:73:47:51:28:95:B7:DD:4E:FF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS140208.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.56.0/24
Signature Algorithm: sha256WithRSAEncryption
59:10:bc:54:69:87:bf:d0:30:62:b4:94:79:3b:b8:4b:1b:54:
43:a5:2d:af:04:32:e9:fa:ad:92:ac:54:4e:8c:8d:b6:f1:63:
4f:7a:69:b0:e4:02:a5:6f:68:c7:87:2b:03:6b:f9:79:e6:63:
3e:e9:15:5b:4e:3d:46:93:9a:cd:3a:56:e8:81:0f:23:d8:60:
4f:e4:c4:b8:29:96:1b:95:f6:b6:4c:96:9e:78:5a:13:d5:f5:
64:ed:0a:d7:a9:07:f0:05:a2:7e:0b:d0:6d:80:08:51:13:2e:
38:60:26:ab:c0:7d:96:70:a0:56:69:24:b8:c2:aa:a6:39:00:
28:7d:f4:f8:b6:8c:a4:42:8e:8d:41:5f:37:e6:3b:d1:a8:c8:
b9:db:80:fb:a4:fe:8e:49:2e:95:49:59:47:1f:5f:3e:e5:ab:
28:4b:01:70:fa:93:4a:e9:73:6d:ff:17:ca:33:15:f2:c7:22:
3c:f0:e4:dd:a5:cf:2a:d3:ce:14:60:23:c5:e3:af:0f:2a:7c:
cc:88:db:7e:f4:db:e8:af:12:3c:ca:21:93:49:c4:33:f1:da:
00:c0:13:a1:58:67:c0:91:0f:62:23:c6:e0:d4:a4:26:fe:c9:
50:0a:ed:06:8d:65:b3:df:26:47:4a:80:90:38:48:95:0f:16:
31:c9:b1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org