Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60318.roa
File: AS60318.roa (raw, json)
Hash identifier: sudkq+E8H8tI2vnBdAA9WMUXI0roZTSflU8vR19agto=
Subject key identifier: BF:10:39:D0:34:20:F6:C6:D6:57:00:4B:C0:2E:6C:1B:89:54:3D:97
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 12C9557E6E643DFAA7701F11480BAA04C37180CC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60318.roa
Signing time: Sat 06 Apr 2024 11:09:30 +0000
ROA not before: Sat 06 Apr 2024 11:04:30 +0000
ROA not after: Sat 05 Apr 2025 11:09:30 +0000
asID: 60318
IP address blocks: 147.79.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 10:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c9:55:7e:6e:64:3d:fa:a7:70:1f:11:48:0b:aa:04:c3:71:80:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 6 11:04:30 2024 GMT
Not After : Apr 5 11:09:30 2025 GMT
Subject: CN=BF1039D03420F6C6D657004BC02E6C1B89543D97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:ba:7d:6e:1f:b3:c5:3a:1f:69:69:d1:93:
dc:f3:af:58:4d:ad:b1:42:d5:12:0f:ac:59:b1:67:
74:88:25:b9:ba:2d:32:95:ab:ac:83:88:48:c5:9d:
d6:3e:3a:87:89:10:71:9a:b0:af:ef:51:66:fc:9a:
37:c4:bf:a8:4d:62:b3:b1:cf:17:da:a8:7f:b7:7a:
3c:33:1e:e5:8c:a2:b9:65:d8:aa:57:de:2c:77:29:
a8:5b:e4:10:a2:f7:86:34:1f:55:5d:a3:a7:07:bf:
ee:6b:e9:f2:12:c6:b1:53:99:6d:1e:06:5c:0c:53:
72:a3:7f:a1:b5:eb:fc:5a:95:8b:26:f3:eb:15:90:
d5:bf:0d:7c:31:37:e6:cf:a4:98:0d:fc:7c:52:8d:
34:41:cd:80:22:7d:f0:9d:e9:f5:7a:39:b0:39:97:
5c:3c:2e:8d:1d:96:3c:c3:e4:f0:72:79:16:09:bb:
66:38:de:16:e5:d8:c8:9e:2b:fd:b2:ba:45:12:20:
b8:47:b4:cd:a4:26:54:52:d5:fc:30:94:45:a1:2d:
0e:b9:55:d8:ed:9a:12:45:d7:f0:c6:73:f3:0c:54:
4d:ac:cb:38:2f:67:7d:d1:2d:53:0b:9f:94:d1:4e:
52:7b:62:4f:fc:58:08:af:b2:51:82:0e:23:ab:c9:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:10:39:D0:34:20:F6:C6:D6:57:00:4B:C0:2E:6C:1B:89:54:3D:97
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:55:ee:76:b9:e2:b3:4b:e2:fe:af:10:8d:7f:7b:a1:6c:24:
be:0c:30:03:f8:88:c0:d2:2d:a6:bc:e1:09:ac:e3:98:d7:fe:
d4:88:44:f4:8a:5f:57:ac:76:9c:07:18:fb:d5:1d:a8:d8:1a:
98:83:2c:bf:70:f5:10:9e:51:bc:62:d0:86:2c:a2:fa:b8:b6:
de:d4:58:a9:88:a8:a4:41:37:90:3b:14:42:e0:b5:97:1e:65:
f5:33:c3:22:4e:8e:07:b6:73:92:5b:a4:85:5d:8c:a7:66:06:
a1:da:fb:5d:0f:bd:af:c8:5a:1e:b8:a9:34:4d:52:7d:30:b1:
76:1b:97:51:a3:f5:5e:a3:bf:db:ce:f3:22:dc:75:e4:e9:83:
8b:a8:f7:b0:cd:60:d3:01:13:d5:9f:cd:47:23:31:ae:55:a8:
af:3c:73:63:b7:ac:73:95:f8:9d:98:67:ba:b1:24:eb:0e:bb:
ec:f1:cf:ed:df:b9:f5:39:fa:e0:4a:47:99:f6:c4:dc:35:35:
70:5e:c7:c6:7f:6e:12:3d:a3:0a:fd:9a:10:c4:27:b3:fc:22:
37:b7:b5:e3:c4:7a:92:6e:62:87:b5:c1:3e:04:9b:6b:4d:55:
ff:18:3b:f6:39:6c:7f:8c:89:91:04:16:cc:06:03:07:5a:e7:
ec:f5:48:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org