Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8772.roa
File: AS8772.roa (raw, json)
Hash identifier: aGZOC0Qdxq1pXnEzAC/3lzGm3xd/sakzmkROR8wZPWM=
Subject key identifier: 2A:50:32:CF:99:47:8C:04:DB:AB:70:1C:97:FD:D2:D9:20:19:94:2B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 20C571CF91827158A1986976C42EA051C43A8F6A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8772.roa
Signing time: Tue 01 Oct 2024 00:19:52 +0000
ROA not before: Tue 01 Oct 2024 00:14:52 +0000
ROA not after: Tue 30 Sep 2025 00:19:52 +0000
asID: 8772
IP address blocks: 140.233.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c5:71:cf:91:82:71:58:a1:98:69:76:c4:2e:a0:51:c4:3a:8f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 1 00:14:52 2024 GMT
Not After : Sep 30 00:19:52 2025 GMT
Subject: CN=2A5032CF99478C04DBAB701C97FDD2D92019942B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:47:be:b5:43:34:e8:2b:44:d5:ff:09:b5:a7:
a2:8b:72:a1:06:18:9a:43:e6:0f:76:2a:df:db:37:
d7:f5:1e:9f:aa:97:b4:22:80:3d:3a:47:47:df:01:
4d:7c:5e:b3:93:75:cc:95:9d:32:0e:0a:13:d2:a2:
a0:f1:2a:52:bd:8f:7d:db:80:80:e9:45:cd:81:36:
ac:c2:d5:06:65:fb:b3:4d:31:34:35:02:45:54:bc:
ed:49:b7:10:77:c8:e8:95:7b:9f:cc:4d:db:7a:c2:
d5:5e:ab:53:c1:65:84:98:35:83:bd:ae:45:45:71:
69:7c:09:7d:52:f1:70:4c:2f:11:26:53:26:b2:d2:
00:88:cc:92:92:d7:8a:29:21:5a:4f:a9:0b:b8:60:
71:a4:20:f0:b5:67:25:53:2e:51:37:b9:e1:9a:05:
ca:33:0d:1e:ab:00:21:05:3c:b3:1d:df:80:66:14:
57:d2:92:81:a2:4e:79:01:7b:d4:7f:45:d3:72:e6:
17:aa:e9:02:1a:83:64:39:5b:db:67:6d:5a:18:4c:
76:dd:c0:6b:7a:f5:d3:8b:a1:c2:51:2a:b5:c8:ed:
57:8f:12:41:2b:a6:f9:40:87:4a:a3:71:94:48:33:
b3:3e:56:d1:a7:5a:67:f0:0a:ee:b1:e9:9d:4d:7f:
6f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:50:32:CF:99:47:8C:04:DB:AB:70:1C:97:FD:D2:D9:20:19:94:2B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8772.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.166.0/24
Signature Algorithm: sha256WithRSAEncryption
61:82:93:cf:ff:49:8c:03:54:5e:0c:39:b8:09:65:1c:49:73:
22:d3:75:cc:49:00:dc:1b:a3:55:8e:28:fd:44:af:71:8f:f4:
51:45:ea:b6:cb:6a:36:55:b9:28:9d:11:f9:9b:f7:68:16:30:
c2:c1:4e:d7:7f:bf:7e:80:06:87:0d:ed:68:40:90:23:4f:b5:
9d:3c:8b:e8:cf:40:f6:6d:09:33:7b:a0:82:b6:2c:7d:9d:6a:
2c:e6:40:54:16:1d:ef:85:3c:af:48:16:62:37:4b:f9:38:3d:
bc:29:b2:2a:d3:ba:af:96:15:c7:c0:aa:c0:2c:e7:91:ea:5f:
51:d1:60:61:99:73:58:dd:91:67:77:9c:e4:8e:19:9f:17:a6:
32:c0:a6:86:03:84:2a:d8:8f:95:0b:d0:ca:01:4a:24:6f:6b:
1c:58:9e:70:4a:3c:9e:08:52:27:12:81:07:d8:0c:de:63:74:
32:6b:c3:c6:25:75:05:67:1d:01:ba:4e:45:69:85:de:05:ad:
d4:30:1e:5b:71:3e:75:76:5a:f2:66:ff:54:83:45:72:04:8b:
50:02:ba:12:e2:0a:82:33:e5:27:f8:88:c3:ba:44:46:c4:77:
5d:19:66:5a:42:61:75:89:aa:ba:8b:cb:15:76:7e:b1:a8:5e:
07:22:7a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 02:55:15 2024 by rpki-client on console-fra.rpki-client.org