Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS15353.roa
File: AS15353.roa (raw, json)
Hash identifier: ou+r4FLgBYrUvh5DEarcZ+LP6drYrnKkJNgXzttC908=
Subject key identifier: 42:05:B4:0E:E5:27:30:07:9A:11:2A:F2:7F:56:41:16:22:8D:88:5B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 75E1BECC27230348804CCF30EDA386C2E48FE53B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS15353.roa
Signing time: Wed 10 Jul 2024 00:10:51 +0000
ROA not before: Wed 10 Jul 2024 00:05:51 +0000
ROA not after: Wed 09 Jul 2025 00:10:51 +0000
asID: 15353
IP address blocks: 146.103.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Aug 2024 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e1:be:cc:27:23:03:48:80:4c:cf:30:ed:a3:86:c2:e4:8f:e5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 10 00:05:51 2024 GMT
Not After : Jul 9 00:10:51 2025 GMT
Subject: CN=4205B40EE52730079A112AF27F564116228D885B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:26:94:5c:2b:54:f8:56:1b:97:bd:a1:6e:
84:35:aa:48:36:90:5e:64:69:f0:f5:aa:3e:2c:a9:
12:ee:08:86:cd:45:23:4a:17:f5:d8:a0:58:b5:22:
c8:21:02:4f:88:98:60:2d:26:6d:6d:50:96:8e:89:
41:de:85:f5:1e:8a:a2:e1:21:0c:2d:d2:e6:20:d4:
b2:e8:82:c5:f7:6e:62:2f:b0:c6:92:32:d0:f9:1d:
59:90:a5:30:dc:f9:42:b9:a1:e2:f3:2b:d5:1f:d6:
44:0c:8d:1c:b6:66:c4:dc:e5:1c:de:a0:d9:be:ce:
3c:4e:e1:b8:ea:76:96:fb:00:5c:f3:9e:b8:ff:cc:
a8:0f:84:15:3c:89:a2:8d:0c:1b:ea:76:af:e4:6e:
b3:ba:aa:ab:ca:9a:53:ef:20:14:ba:c7:ec:c2:79:
a2:e8:76:de:09:8a:6e:44:d6:c2:b8:d4:f1:aa:19:
85:2e:c8:26:02:f0:74:b9:09:3c:80:81:fc:62:17:
7a:5d:bb:0a:1c:cf:b7:f2:86:3e:21:34:b0:b7:65:
da:21:41:7b:11:42:f9:82:4f:7c:ee:b5:c6:d8:c7:
ce:c2:e9:70:79:2b:3f:5c:ae:6d:ad:ff:83:6f:bd:
7c:8c:f5:87:55:81:02:d3:73:b7:00:e7:af:7a:81:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:05:B4:0E:E5:27:30:07:9A:11:2A:F2:7F:56:41:16:22:8D:88:5B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS15353.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.55.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:45:1b:e5:07:0d:f0:43:10:a6:64:20:23:d0:0f:cd:a4:88:
7c:3c:dc:b2:18:d7:50:76:cc:09:02:0b:c3:78:a2:96:7d:3f:
a6:92:bb:22:f9:57:4e:5a:7a:12:c9:b4:6e:3d:28:b8:90:8e:
e3:b2:a7:f6:8b:fc:11:d6:f6:15:63:c9:49:51:dc:d1:48:a1:
e1:6f:fa:fb:73:47:48:6a:80:e2:cb:ab:45:2c:42:e5:7e:37:
5e:34:87:43:9d:37:55:81:11:dd:41:49:a1:17:85:e7:ce:87:
39:69:b0:8d:a2:56:10:3c:2c:d7:0e:17:ed:3d:b4:4a:e2:d6:
b4:6d:b0:ff:26:9c:01:6b:35:ea:43:43:4c:43:28:27:8b:f6:
f4:63:fd:a3:7e:70:96:79:c8:2b:fc:07:60:fe:42:6d:d2:08:
d7:7a:68:52:de:67:ba:08:d4:d1:91:fe:18:dc:e6:2e:df:a4:
fe:ad:ef:ba:45:4a:f2:92:95:29:e1:b1:eb:74:43:6c:46:a0:
eb:df:8e:00:a0:a0:57:26:bf:f1:75:c3:33:67:84:08:fe:3d:
91:75:3b:20:e6:8c:23:d8:e9:59:40:cd:96:29:3f:bd:45:e1:
34:23:c9:5f:39:9d:77:96:13:e2:a3:6e:57:5c:ea:16:9b:32:
f8:a0:30:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 02:42:52 2024 by rpki-client on console-ams.rpki-client.org