Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS30823.roa
File: AS30823.roa (raw, json)
Hash identifier: lA/li97NdHcEDdKK7NkI1lylG8OmYx7Z6zr7DD00XL8=
Subject key identifier: 04:89:55:B6:B6:6F:82:32:9A:38:0C:AD:C5:DE:C1:04:B6:A5:BC:ED
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 14C5F4CF7359DBCCB6A052196F41097B9E7B752B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS30823.roa
Signing time: Thu 13 Jun 2024 12:42:07 +0000
ROA not before: Thu 13 Jun 2024 12:37:07 +0000
ROA not after: Thu 12 Jun 2025 12:42:07 +0000
asID: 30823
IP address blocks: 140.233.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 00:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c5:f4:cf:73:59:db:cc:b6:a0:52:19:6f:41:09:7b:9e:7b:75:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 13 12:37:07 2024 GMT
Not After : Jun 12 12:42:07 2025 GMT
Subject: CN=048955B6B66F82329A380CADC5DEC104B6A5BCED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0f:4f:26:c8:c7:d9:44:d2:62:8c:b5:a8:b3:
3c:40:3c:a0:65:e4:1c:19:90:8d:86:96:7a:e4:8d:
2b:69:0a:48:91:bf:8c:f0:01:52:e3:7b:17:bf:dd:
07:66:62:bd:72:88:8d:76:f0:c9:2d:dc:b7:80:62:
ca:b2:d9:74:40:61:e3:43:f0:ef:e5:90:99:1c:4a:
f2:e4:f4:ae:af:1a:f0:b9:b4:2a:8a:cb:c4:a0:93:
d0:91:15:40:6f:3e:45:38:81:d0:c6:da:aa:c1:65:
a5:17:d9:ca:f1:b7:6a:7f:4a:bf:ef:99:06:cf:e8:
a7:8c:9b:cf:e9:fe:24:3b:fa:45:c0:7a:38:33:0e:
0a:a1:28:fa:cd:bd:01:80:d0:82:1e:85:b4:a8:7d:
bd:b5:e5:69:de:3d:9b:8d:a0:69:2f:3c:02:13:ac:
f1:d0:2d:08:80:3f:5f:d3:33:84:7a:9b:ed:4c:1e:
98:08:4f:ce:62:e2:85:79:07:54:1a:f5:7c:27:e2:
0e:2c:c5:fc:8a:ad:b2:fc:68:75:26:cd:0d:f2:21:
eb:c9:8f:be:87:da:75:b7:b0:81:23:d3:71:8e:c8:
ce:5b:1c:11:0c:94:9c:c9:4a:b2:66:38:af:60:da:
77:a6:19:09:3c:86:e5:50:4e:f1:11:1b:fa:86:6c:
6b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:89:55:B6:B6:6F:82:32:9A:38:0C:AD:C5:DE:C1:04:B6:A5:BC:ED
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS30823.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.184.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:44:69:f0:a8:55:ad:fa:7e:bd:6a:e8:70:09:75:b7:40:f5:
a5:dd:8d:f3:ca:cd:2b:b9:08:11:41:9f:1d:d0:b6:03:92:88:
70:b0:f7:4e:ec:c7:9d:d5:3e:f8:b2:e2:9f:ea:da:c9:91:bb:
8b:51:0c:d0:8f:05:1d:49:49:3f:a8:69:20:39:5b:91:6f:a7:
9e:d1:15:a5:c6:a2:cf:18:26:4e:75:60:2f:5d:69:8c:9b:ce:
e0:23:85:3c:ab:b6:d7:01:09:d6:1a:61:ec:0f:d8:9a:d8:24:
26:e5:38:87:90:02:cb:d5:fd:6e:e5:0f:41:18:22:93:68:88:
5e:09:10:db:5b:7a:0c:ce:43:66:a6:03:2d:bc:5b:a2:36:49:
fd:30:4c:fb:37:06:ac:62:71:69:45:0b:4f:95:d1:16:ea:55:
98:82:47:3b:08:d1:91:bf:27:6e:f8:f5:6b:a7:4c:e7:0a:4e:
12:95:ad:a9:e1:af:30:cf:ce:26:1a:3c:9e:52:36:0c:30:a2:
2c:a9:94:0a:47:f8:8a:85:ef:57:46:d9:42:7b:4c:7c:04:44:
db:91:d8:14:9f:fc:36:f7:96:ba:15:9b:c3:e5:4e:3d:9c:d6:
c4:36:df:14:5d:d4:d1:d4:ad:c1:84:7e:7f:19:12:cb:86:94:
1d:c0:a0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:03:27 2024 by rpki-client on console-ams.rpki-client.org