Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8075.roa
File: AS8075.roa (raw, json)
Hash identifier: Xis7j2MnNdPcq4NVz7ykHWk8Y0upxExPFqXZ9wctsFA=
Subject key identifier: 07:07:F2:42:3E:46:F4:D6:18:24:0F:66:AE:0F:36:74:03:E4:A5:71
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6832E85163FFFB2BDEF5428D19F0B80D0FE33216
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8075.roa
Signing time: Thu 13 Jun 2024 13:30:22 +0000
ROA not before: Thu 13 Jun 2024 13:25:21 +0000
ROA not after: Thu 12 Jun 2025 13:30:21 +0000
asID: 8075
IP address blocks: 147.79.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 03 Jul 2024 03:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:32:e8:51:63:ff:fb:2b:de:f5:42:8d:19:f0:b8:0d:0f:e3:32:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 13 13:25:21 2024 GMT
Not After : Jun 12 13:30:21 2025 GMT
Subject: CN=0707F2423E46F4D618240F66AE0F367403E4A571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:c0:b9:4d:1f:d1:48:ee:e1:5d:c9:86:54:
c2:32:04:13:8d:2e:cf:2b:1a:66:9e:db:66:89:93:
61:6d:d8:f1:36:41:a7:24:fb:2a:10:45:63:a7:ce:
64:13:23:1b:ee:bb:81:1c:84:20:91:6b:9f:bf:bc:
f0:30:9f:9a:9e:fb:06:63:e6:c0:31:04:ae:61:4a:
3e:97:9d:78:af:56:2e:45:00:7b:d4:de:6d:68:ad:
36:b8:3b:1e:35:27:44:4b:fe:f6:31:6b:20:d1:f5:
8f:71:1f:4e:ad:1a:52:a5:6f:37:53:29:e1:b5:d9:
33:89:cc:bb:00:f8:3d:c2:46:38:32:5e:0a:49:a9:
28:31:98:0a:8f:32:4f:e8:e7:db:a0:db:d8:8e:a4:
b4:80:87:8e:d1:00:a5:e1:82:46:db:94:f6:6a:10:
0a:79:4e:c6:c4:04:08:80:91:ca:04:b6:1c:f2:46:
97:b1:47:b6:7b:12:71:ae:4f:d5:49:98:7b:bf:ec:
e1:a7:61:79:46:76:4c:55:2c:e6:cf:84:9b:fb:ef:
97:78:ed:ad:7e:35:62:80:aa:99:4c:42:5f:c1:ea:
bc:81:97:19:a1:25:5a:4d:84:f0:19:da:6f:a6:4b:
ad:18:87:48:6d:11:2e:98:a9:f8:93:c1:fe:81:ce:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:07:F2:42:3E:46:F4:D6:18:24:0F:66:AE:0F:36:74:03:E4:A5:71
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.52.0/22
Signature Algorithm: sha256WithRSAEncryption
59:65:17:01:4f:92:a9:cf:88:c2:2a:50:ce:67:82:c4:18:8d:
0e:16:51:55:e0:c3:cc:01:f1:45:cc:5e:d5:98:38:21:35:d4:
11:6b:3d:fa:df:52:68:ec:d2:7d:6a:07:9a:12:8d:af:e0:f1:
b2:d6:32:0e:42:80:fc:e1:4b:17:e6:c9:e7:f1:0e:14:fb:2c:
b1:77:cc:18:43:2c:a5:b8:e4:bc:e0:ef:be:04:ee:14:ea:71:
2d:e4:35:5a:8c:56:9e:90:95:29:18:82:24:1f:b2:cf:d3:ae:
09:2d:8c:fc:43:3f:b7:9b:a4:a1:43:18:57:ea:2c:04:3d:69:
d9:0f:ef:6d:72:28:bf:9c:41:7c:b4:71:e3:4a:55:1b:76:55:
61:bf:a3:9f:a3:bc:d4:51:c8:dc:7f:18:5d:f6:82:eb:40:1b:
9e:60:b8:c1:67:bb:af:a0:07:28:4a:5d:c7:d7:6f:5e:ae:d3:
dc:de:da:75:15:e4:9c:72:b0:9e:75:71:6e:94:60:13:54:4a:
2b:d7:73:84:8b:3f:b6:97:cd:25:fd:59:73:18:e2:69:f3:93:
ab:cd:7e:1e:6e:be:40:a6:7f:3c:cb:0b:3e:a9:7e:f5:68:e6:
a9:f6:5b:79:9f:79:65:e6:2b:7c:2f:00:1b:2c:2c:85:63:2f:
d0:11:65:b3
-----BEGIN CERTIFICATE-----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Generated at Wed Jul 3 04:44:33 2024 by rpki-client on console-fra.rpki-client.org