Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS49981.roa
File: AS49981.roa (raw, json)
Hash identifier: kdmaiZWd39goOTFdcRCytq9M6H6hmCPsmgkvBDD+CpU=
Subject key identifier: 72:D6:97:16:32:FE:72:82:35:34:C4:38:65:4D:46:37:CD:D5:01:FE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 35CFBFDFD125AAA269D73E746443DD31095478AB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS49981.roa
Signing time: Wed 17 Jul 2024 12:04:46 +0000
ROA not before: Wed 17 Jul 2024 11:59:46 +0000
ROA not after: Wed 16 Jul 2025 12:04:46 +0000
asID: 49981
IP address blocks: 146.103.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jul 2024 14:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:cf:bf:df:d1:25:aa:a2:69:d7:3e:74:64:43:dd:31:09:54:78:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 17 11:59:46 2024 GMT
Not After : Jul 16 12:04:46 2025 GMT
Subject: CN=72D6971632FE72823534C438654D4637CDD501FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ec:96:02:9e:be:9a:ad:46:37:4f:fd:36:5c:
ac:ce:8b:86:9f:fe:85:32:ff:95:d0:f9:84:f8:d2:
a0:05:d4:e4:46:5d:f7:97:da:c9:29:26:62:96:a8:
8d:69:d6:47:d3:ea:88:8c:3d:d0:76:3b:6b:b4:ea:
38:de:63:7b:d0:aa:f2:97:75:7b:87:ff:8d:3f:17:
43:99:0f:65:94:10:b7:1f:c9:02:f3:46:ef:24:cf:
37:1f:a1:d6:fc:fb:e3:a7:d7:a1:62:3a:6f:9f:bd:
93:1b:c9:ca:91:fb:ba:b4:26:02:55:4d:c4:ba:18:
52:61:cd:bd:cc:dd:99:6e:bf:27:b7:50:fd:3c:3d:
52:0c:15:92:4d:79:78:cb:f8:29:aa:1a:ac:48:9d:
ed:63:ae:36:74:20:b4:ec:f1:64:cf:23:f5:ae:19:
1c:da:1c:70:43:5f:a5:67:35:9f:bb:3e:49:ed:93:
9b:11:42:79:04:f4:e7:b2:ce:3a:5d:74:6a:64:1d:
c5:ab:3b:23:8d:1f:0e:8c:db:fb:22:e6:dd:34:e7:
a5:51:2a:85:5e:b0:c3:74:f8:9d:bd:ef:69:a8:bb:
35:1e:99:90:bc:5b:c1:c5:c4:8f:bf:51:20:cd:f6:
b1:bf:bb:e4:f6:d4:3e:2d:d0:2f:ff:f3:cf:6a:f5:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D6:97:16:32:FE:72:82:35:34:C4:38:65:4D:46:37:CD:D5:01:FE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS49981.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.6.0/24
Signature Algorithm: sha256WithRSAEncryption
10:20:57:6f:79:10:9e:e9:b7:be:67:5a:6d:a1:70:95:6b:0c:
cb:d3:f3:34:b6:a7:d4:83:ea:2a:98:0b:02:dc:d9:eb:2e:93:
eb:14:48:bb:cb:f1:94:a7:39:59:13:a2:d9:48:1a:95:fd:ea:
95:a5:3a:df:e4:c0:c8:e1:d0:c8:85:dd:3b:ef:44:0e:ee:eb:
23:22:be:96:b5:27:66:20:81:17:07:32:5c:71:19:0d:0e:e7:
71:2c:44:a2:56:90:e7:25:2c:5d:01:6b:1b:21:13:f2:25:0e:
dc:67:96:08:86:4a:45:93:b3:4a:de:17:17:ba:9c:cd:9c:02:
70:f7:68:50:68:bb:3e:7f:e5:86:63:3b:ec:f9:22:0b:dc:f8:
32:22:d7:97:b1:ca:a2:2d:49:46:aa:34:41:c8:1b:04:14:bd:
2e:f5:1c:b8:9a:3b:70:ba:90:6e:84:3b:d4:86:49:18:8f:50:
0a:16:f8:ae:05:5c:6f:3a:19:27:56:48:df:fe:92:2a:11:8e:
30:cb:85:68:f1:7b:66:b0:bb:bb:29:1b:bf:00:62:7d:b8:58:
84:ad:72:ca:f4:2b:4e:cb:e5:d8:e1:c0:c6:f6:4d:a7:ae:8b:
29:fc:fb:d5:4a:45:9b:6a:56:df:e0:10:10:aa:4b:0c:bb:e5:
4d:9f:d6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 16:37:41 2024 by rpki-client on console-fra.rpki-client.org