Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151872.roa
File: AS151872.roa (raw, json)
Hash identifier: dweXNHoRiECC3PPz2y+UUnCu5qtIwcPsswTJ9GkSnvE=
Subject key identifier: 6B:02:5E:39:E8:78:17:E5:8A:97:6C:B8:DE:37:91:B3:57:1F:61:05
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7942C39B8A328032860B5DD2A2F4D155ED508652
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151872.roa
Signing time: Tue 30 Apr 2024 14:43:50 +0000
ROA not before: Tue 30 Apr 2024 14:38:50 +0000
ROA not after: Tue 29 Apr 2025 14:43:50 +0000
asID: 151872
IP address blocks: 146.103.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:42:c3:9b:8a:32:80:32:86:0b:5d:d2:a2:f4:d1:55:ed:50:86:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 30 14:38:50 2024 GMT
Not After : Apr 29 14:43:50 2025 GMT
Subject: CN=6B025E39E87817E58A976CB8DE3791B3571F6105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:63:a2:63:16:0f:57:78:15:ca:ad:e0:db:a2:
9c:9e:ac:37:5d:70:37:bf:12:bb:e5:bc:1d:25:8d:
e7:2c:83:ba:e9:50:98:59:88:45:9b:8c:ff:6e:41:
86:80:91:72:77:24:f9:e9:7f:72:33:94:85:26:ed:
6c:e3:d0:40:76:b9:40:c1:62:8c:c7:21:45:96:9c:
a2:e6:27:f8:e3:e9:52:60:37:e1:bc:7c:5c:f2:37:
c2:1a:ac:d3:79:67:fd:1a:c1:83:0a:73:87:8d:74:
9a:ec:62:8f:9c:8c:7c:59:ac:f3:ef:bd:6d:55:30:
b0:59:a4:ff:31:d6:fe:cd:8a:da:a9:83:cc:52:34:
58:fb:c5:c7:f0:ea:97:3e:54:95:c4:af:93:30:7a:
eb:61:09:b6:b9:06:ca:31:67:fa:a4:3b:7c:41:76:
94:a9:ce:63:a5:33:8b:56:db:56:c4:fd:2e:6d:af:
2f:c3:91:7c:9e:a1:2e:4c:06:8f:de:07:c0:2f:9b:
92:ec:4d:3e:a0:78:6f:a2:90:50:2e:e2:be:67:bb:
dc:d7:61:e4:8f:a0:15:b5:5b:e7:85:79:99:19:c6:
5a:ad:68:d6:85:01:bd:9b:e9:e6:57:cc:8c:8a:c1:
2b:c0:82:3c:2f:c5:3e:b3:4c:88:d2:f4:7d:db:2a:
f5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:02:5E:39:E8:78:17:E5:8A:97:6C:B8:DE:37:91:B3:57:1F:61:05
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151872.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.23.0/24
Signature Algorithm: sha256WithRSAEncryption
03:7c:09:66:f1:18:13:f0:6e:90:5b:ee:af:70:5f:de:af:46:
2a:93:5a:a9:10:d7:39:eb:29:fe:13:3c:5c:90:4b:9f:28:de:
89:09:e8:e0:4a:07:1a:f6:2c:09:88:6b:a4:b6:7a:34:99:da:
7c:9d:86:ed:50:cf:5d:af:fc:4b:3b:29:88:1d:eb:bb:e2:e2:
77:40:74:cf:b5:dd:a7:d2:7c:02:a0:be:28:a2:e4:44:e5:86:
b4:ce:8c:9e:e2:20:64:26:15:6a:09:26:83:c3:95:d5:9f:08:
b9:07:68:54:46:cf:10:df:2c:7f:66:15:1f:65:6a:3e:87:a7:
f4:fc:f3:7b:20:ae:79:eb:a9:57:a5:eb:ac:d2:42:23:41:78:
07:07:eb:cd:97:5f:ba:81:84:03:79:31:53:8a:63:71:1c:eb:
3b:2b:c5:fc:a1:aa:52:76:be:86:84:6c:70:5b:87:93:e7:6f:
f3:b3:94:12:e1:51:1a:e4:ac:12:9b:b0:16:18:02:23:5d:b3:
20:53:67:98:91:09:e5:d9:d6:56:0a:a3:ea:08:f4:ab:91:c6:
e6:f7:5d:b6:bf:65:c8:f4:1e:b7:fd:17:d8:de:e3:73:50:8b:
95:ea:a5:b3:b2:af:bb:52:ba:0b:19:fb:21:bc:34:a5:8d:25:
f2:99:0a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:50 2024 by rpki-client on console-ams.rpki-client.org