Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215355.roa
File: AS215355.roa (raw, json)
Hash identifier: FiXHZF2+EyMQOpqdh6Hh/sKce9M6LghqNjqp0UCLwFc=
Subject key identifier: EB:74:D4:C3:FC:07:F7:18:30:DA:7C:F6:46:FE:45:B3:E9:24:4E:F1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6362C3FCAA2DA299067428F98747CD25538F83E6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215355.roa
Signing time: Thu 25 Apr 2024 08:47:05 +0000
ROA not before: Thu 25 Apr 2024 08:42:05 +0000
ROA not after: Thu 24 Apr 2025 08:47:05 +0000
asID: 215355
IP address blocks: 147.79.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 May 2024 19:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:62:c3:fc:aa:2d:a2:99:06:74:28:f9:87:47:cd:25:53:8f:83:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 25 08:42:05 2024 GMT
Not After : Apr 24 08:47:05 2025 GMT
Subject: CN=EB74D4C3FC07F71830DA7CF646FE45B3E9244EF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a7:1d:07:68:38:d9:cb:3c:cc:23:7b:2a:32:
48:02:bb:7d:db:77:5b:bf:2a:59:56:7a:20:6c:35:
f4:be:29:29:be:84:ac:df:e1:41:9a:0a:69:31:8f:
3f:b2:62:af:ac:78:73:8f:cb:0b:a7:8e:20:3f:b3:
62:43:14:3f:f9:07:48:b4:a1:89:e7:31:90:0c:8e:
c5:e7:eb:40:00:01:00:fc:34:8d:42:bc:62:cb:5d:
fb:bb:f5:11:85:90:07:bc:89:cc:f2:ea:5d:ca:0a:
bd:ab:22:73:e2:f4:ae:2c:0f:3c:98:04:6b:36:a6:
16:c5:c8:d7:27:37:79:94:ef:2a:f3:d8:8d:61:54:
69:06:e9:05:61:b3:0c:a4:1b:34:4d:83:df:8a:48:
7e:f9:4a:cb:a4:1d:59:d6:10:8f:9d:0a:71:e1:8d:
37:93:98:7f:bc:22:0a:23:89:1f:51:13:80:d6:dd:
40:a7:99:42:b6:94:36:6b:34:32:7f:d0:ba:49:a3:
93:8b:61:0d:c9:c3:92:6d:ac:b1:16:5a:2c:5a:b9:
a7:51:8e:3c:47:fd:fd:18:60:96:39:b7:bd:a6:75:
4c:ce:1f:fd:45:55:65:91:38:76:c2:d4:69:e3:3e:
c5:0f:59:4c:97:16:af:42:61:a0:ce:8a:4d:91:70:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:74:D4:C3:FC:07:F7:18:30:DA:7C:F6:46:FE:45:B3:E9:24:4E:F1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215355.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.20.0/24
Signature Algorithm: sha256WithRSAEncryption
85:17:4a:28:4e:c6:ea:c8:b5:ed:e8:67:3b:1e:a0:2d:41:5b:
b6:18:6b:91:a0:ae:21:3a:20:f0:09:ac:7d:fc:1e:ed:97:cf:
73:67:12:5d:32:b7:96:8e:1b:c2:ec:0f:1f:f1:7b:25:56:94:
62:9f:7d:96:f1:ac:1d:8e:a1:54:da:44:fc:59:a3:09:28:76:
91:24:de:bb:68:ca:bc:6c:63:56:f9:2f:f5:91:69:ac:2c:c7:
4a:f5:81:7d:75:66:a5:88:e6:81:60:33:82:c5:95:28:d2:bc:
20:86:06:3e:cf:1d:fc:2f:5a:7a:4e:94:4e:95:b1:b0:49:02:
32:a0:b8:4e:c9:94:54:a9:31:bd:c0:32:98:2c:89:13:e2:9d:
0d:53:a8:4e:a6:43:b9:89:5c:d6:15:02:77:85:0c:74:b8:b5:
27:c2:29:e0:17:7a:b2:08:72:2d:50:a8:7a:38:9b:a2:70:18:
ec:30:71:ba:3a:8a:b8:cc:6c:47:38:77:87:1f:57:18:e5:67:
47:be:70:73:93:b2:60:fb:12:19:af:18:62:e0:b7:3f:5e:22:
f3:79:57:e3:f2:e0:02:c4:22:a2:bb:e5:72:48:1f:ec:2b:a3:
f3:7a:eb:40:21:ad:68:30:bf:d5:fd:bd:af:99:8f:5b:13:55:
29:ab:7e:e3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUY2LD/KotopkGdCj5h0fNJVOPg+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDA0MjUwODQyMDVaFw0yNTA0MjQwODQ3MDVaMDMxMTAvBgNV
BAMTKEVCNzRENEMzRkMwN0Y3MTgzMERBN0NGNjQ2RkU0NUIzRTkyNDRFRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQpx0HaDjZyzzMI3sqMkgCu33b
d1u/KllWeiBsNfS+KSm+hKzf4UGaCmkxjz+yYq+seHOPywunjiA/s2JDFD/5B0i0
oYnnMZAMjsXn60AAAQD8NI1CvGLLXfu79RGFkAe8iczy6l3KCr2rInPi9K4sDzyY
BGs2phbFyNcnN3mU7yrz2I1hVGkG6QVhswykGzRNg9+KSH75SsukHVnWEI+dCnHh
jTeTmH+8IgojiR9RE4DW3UCnmUK2lDZrNDJ/0LpJo5OLYQ3Jw5JtrLEWWixauadR
jjxH/f0YYJY5t72mdUzOH/1FVWWROHbC1GnjPsUPWUyXFq9CYaDOik2RcFNRAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU63TUw/wH9xgw2nz2Rv5Fs+kkTvEwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE1MzU1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk08U
MA0GCSqGSIb3DQEBCwUAA4IBAQCFF0ooTsbqyLXt6Gc7HqAtQVu2GGuRoK4hOiDw
Cax9/B7tl89zZxJdMreWjhvC7A8f8XslVpRin32W8awdjqFU2kT8WaMJKHaRJN67
aMq8bGNW+S/1kWmsLMdK9YF9dWaliOaBYDOCxZUo0rwghgY+zx38L1p6TpROlbGw
SQIyoLhOyZRUqTG9wDKYLIkT4p0NU6hOpkO5iVzWFQJ3hQx0uLUnwingF3qyCHIt
UKh6OJuicBjsMHG6Ooq4zGxHOHeHH1cY5WdHvnBzk7Jg+xIZrxhi4Lc/XiLzeVfj
8uACxCKiu+VySB/sK6PzeutAIa1oML/V/b2vmY9bE1Upq37j
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org