Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47585.roa
File: AS47585.roa (raw, json)
Hash identifier: 5lMLGaZ66z65EMGjAqcLYp/2ncs53Esh1kRgRlUyBRM=
Subject key identifier: F6:0A:B5:45:4E:67:4C:67:51:45:5F:B3:04:00:53:E2:88:A0:85:59
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2EC771020D270786EEA5622E7A39628CEDB0D7BA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47585.roa
Signing time: Tue 10 Sep 2024 18:48:52 +0000
ROA not before: Tue 10 Sep 2024 18:43:52 +0000
ROA not after: Tue 09 Sep 2025 18:48:52 +0000
asID: 47585
IP address blocks: 140.233.167.0/24 maxlen: 24
140.233.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 00:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c7:71:02:0d:27:07:86:ee:a5:62:2e:7a:39:62:8c:ed:b0:d7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 10 18:43:52 2024 GMT
Not After : Sep 9 18:48:52 2025 GMT
Subject: CN=F60AB5454E674C6751455FB3040053E288A08559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:4f:59:c2:65:0a:39:10:f5:a3:6f:a2:52:
95:6d:a6:02:80:b1:49:79:b6:77:4a:26:a7:b7:32:
f5:99:c5:d2:06:08:98:5e:89:4c:07:1b:1a:42:99:
01:ef:f7:5f:3b:3f:33:69:82:73:2e:be:1c:2b:3e:
29:20:3a:a8:c9:b2:f5:62:5d:f2:7a:bd:88:f0:d1:
ca:5d:5e:53:60:d7:0d:3e:7f:f8:81:6a:77:c7:33:
95:03:ff:f4:ab:db:7b:e2:07:53:9a:f5:5d:bc:87:
89:62:25:73:2a:37:da:51:88:de:f2:81:a0:fe:f6:
68:73:db:37:10:4c:62:93:eb:3f:bb:e1:57:aa:05:
08:d8:cd:0c:a6:e3:54:cb:25:e1:2d:1c:49:c6:99:
14:43:6a:0d:c7:2f:79:00:ec:01:99:9c:30:0e:63:
69:d2:93:58:1c:9d:0b:5b:1b:2f:4f:67:c3:58:6f:
40:d5:05:e5:73:09:64:cd:8c:4a:e2:64:f8:43:7d:
97:87:4c:6f:c0:64:a6:83:33:63:fb:35:05:75:99:
d5:29:9f:08:b2:63:57:5c:ea:66:e2:a9:82:e3:20:
38:4d:40:71:14:f3:c7:2a:af:3f:c6:14:0c:13:b6:
91:d7:63:07:fa:43:0d:e7:27:04:16:06:5a:ec:93:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0A:B5:45:4E:67:4C:67:51:45:5F:B3:04:00:53:E2:88:A0:85:59
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47585.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.167.0/24
140.233.184.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:0d:be:af:ef:68:68:2e:8d:19:be:cf:6a:f2:c6:ac:c5:c7:
0c:92:4f:92:74:7f:71:dd:0a:28:61:31:a2:3d:31:fd:66:3b:
e8:61:93:d5:2a:9c:30:50:99:ff:d2:0f:b8:5c:df:fd:4b:df:
43:f6:d5:a1:13:25:4f:90:6d:99:15:f5:2f:4c:1b:c3:7a:9c:
5c:35:b2:0e:83:04:89:71:e8:99:74:a0:91:ee:49:86:68:35:
3c:e6:1d:61:00:4e:35:e9:fd:0c:38:5e:14:05:bf:c0:d5:19:
dc:07:be:a3:c3:64:46:b0:a6:89:8c:a4:26:da:02:a3:af:9c:
c9:5f:61:d0:11:14:04:d7:cc:a5:c1:86:a6:1f:42:9c:cd:a8:
d2:ce:8a:e8:8c:97:e6:a1:ec:cd:46:06:61:11:d4:70:86:00:
b2:98:a6:ca:f0:ee:3c:2a:8d:3d:79:89:b0:3f:af:66:b4:5f:
62:eb:89:84:ca:5b:fd:e8:b9:bb:a8:d5:a8:54:3f:e8:63:93:
d0:d3:bf:97:a2:44:40:00:ad:f2:9c:e4:09:a6:a9:56:f0:56:
83:41:a4:35:68:5f:13:c8:9d:43:87:8f:04:a4:44:c8:d5:a7:
d9:aa:1a:ea:00:74:ac:bb:a8:55:db:07:08:82:63:6c:04:ee:
20:dd:6e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 02:16:21 2024 by rpki-client on console-fra.rpki-client.org