Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS47157.roa
File: AS47157.roa (raw, json)
Hash identifier: szJOvvNy4bAZVK7HqgqOMY7O6Wb8C5aB/1TfNY9arJs=
Subject key identifier: 3A:C5:2A:7B:E5:19:7D:74:5F:44:D9:AC:BD:D4:A8:55:6F:D6:0F:03
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 51CC63F0F19C22DE0B9BEC76B8E1C9A211321B5B
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS47157.roa
Signing time: Thu 29 Aug 2024 03:41:16 +0000
ROA not before: Thu 29 Aug 2024 03:36:16 +0000
ROA not after: Thu 28 Aug 2025 03:41:16 +0000
asID: 47157
IP address blocks: 2a0a:6044:b600::/40 maxlen: 40
Validation: Failed, certificate revoked on Sat 28 Sep 2024 21:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:cc:63:f0:f1:9c:22:de:0b:9b:ec:76:b8:e1:c9:a2:11:32:1b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 29 03:36:16 2024 GMT
Not After : Aug 28 03:41:16 2025 GMT
Subject: CN=3AC52A7BE5197D745F44D9ACBDD4A8556FD60F03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:e6:e6:91:ab:bf:1d:5e:19:a1:21:7f:c1:
de:a5:b9:e6:6d:22:cc:35:d4:ef:99:39:b4:99:94:
82:a9:8a:de:68:5c:7c:78:b4:a7:d0:dd:74:ae:69:
d2:b8:b6:79:fe:66:ef:9f:87:a4:55:e5:a6:01:17:
76:db:ee:ad:51:65:3e:5a:db:eb:f8:2f:5f:6d:af:
f6:8e:32:a4:cb:4d:3b:1a:cf:fa:7a:40:12:23:aa:
8c:1e:01:35:0a:ca:51:f5:d6:2b:94:e3:d9:43:63:
e8:6f:88:78:dd:6d:1b:b6:db:2d:9b:b4:db:91:94:
ca:35:70:36:c5:43:cb:0d:60:9f:88:25:0a:55:70:
fa:d5:09:f2:48:bd:b5:3f:1a:fa:cf:49:73:da:ce:
99:7b:75:ac:4c:a3:31:f8:9e:b7:bb:2c:bf:e0:57:
d2:e6:18:f1:66:83:33:7f:83:a1:3a:22:42:1b:45:
21:1f:00:4d:7e:8e:29:85:2f:53:31:7b:d6:92:8e:
f8:06:8e:e7:db:b3:8d:6b:eb:80:73:ea:dc:f5:0a:
20:4e:b9:84:ba:bd:fd:1f:ec:62:c7:f0:23:8e:17:
f2:19:bc:07:6f:d6:91:62:84:a9:67:59:d7:9d:8c:
20:f2:19:ab:1f:7d:c1:62:92:12:59:bb:a1:a0:a5:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:2A:7B:E5:19:7D:74:5F:44:D9:AC:BD:D4:A8:55:6F:D6:0F:03
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS47157.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b600::/40
Signature Algorithm: sha256WithRSAEncryption
09:bb:7b:e9:0d:bf:ab:3b:9a:ee:a4:a9:27:0c:57:c9:fa:aa:
0d:25:8f:55:a6:80:0b:f0:c5:3e:7f:9e:9d:5d:b5:b1:10:eb:
19:55:63:24:1a:a5:ad:fe:03:f4:31:c3:41:8a:9a:11:54:23:
99:a6:e6:68:e0:c8:39:53:c6:c6:e6:b3:33:56:76:8e:3c:a6:
b7:ab:33:85:5d:b7:3b:ac:8c:5f:f5:31:2a:8b:eb:19:61:d7:
c1:91:cb:31:b4:fa:80:a3:3c:12:9f:31:c5:74:b9:5f:d0:2b:
67:89:43:bb:3d:89:ed:5d:93:47:15:96:16:bd:3a:64:27:df:
73:b6:b9:d2:f5:9b:c4:da:fc:bc:c3:e1:dd:e3:8a:a7:fd:91:
a0:6e:36:7f:82:74:a8:74:7c:82:6d:d5:c3:30:42:05:c6:47:
e1:f2:08:67:0e:39:5d:6a:0e:ec:11:67:d9:41:21:e3:42:d6:
21:28:1f:ec:7f:0a:e9:8a:c2:e5:e5:2c:eb:8d:a6:2f:b0:7d:
2a:ac:34:cd:62:e0:c2:a1:57:f5:b2:42:b3:63:1b:ca:24:2b:
3c:e1:2a:b8:04:27:e7:bf:52:3f:f4:bf:74:66:87:f1:20:92:
07:b9:ca:f3:22:9f:0b:77:9f:6a:65:62:fd:33:28:27:26:50:
61:97:82:99
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUUcxj8PGcIt4Lm+x2uOHJohEyG1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA4MjkwMzM2MTZaFw0yNTA4MjgwMzQxMTZaMDMxMTAvBgNV
BAMTKDNBQzUyQTdCRTUxOTdENzQ1RjQ0RDlBQ0JERDRBODU1NkZENjBGMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNubmkau/HV4ZoSF/wd6lueZt
Isw11O+ZObSZlIKpit5oXHx4tKfQ3XSuadK4tnn+Zu+fh6RV5aYBF3bb7q1RZT5a
2+v4L19tr/aOMqTLTTsaz/p6QBIjqoweATUKylH11iuU49lDY+hviHjdbRu22y2b
tNuRlMo1cDbFQ8sNYJ+IJQpVcPrVCfJIvbU/GvrPSXPazpl7daxMozH4nre7LL/g
V9LmGPFmgzN/g6E6IkIbRSEfAE1+jimFL1Mxe9aSjvgGjufbs41r64Bz6tz1CiBO
uYS6vf0f7GLH8COOF/IZvAdv1pFihKlnWdedjCDyGasffcFikhJZu6GgpYqzAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUOsUqe+UZfXRfRNmsvdSoVW/WDwMwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt
NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTNDcxNTcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBE
tjANBgkqhkiG9w0BAQsFAAOCAQEACbt76Q2/qzua7qSpJwxXyfqqDSWPVaaAC/DF
Pn+enV21sRDrGVVjJBqlrf4D9DHDQYqaEVQjmabmaODIOVPGxuazM1Z2jjymt6sz
hV23O6yMX/UxKovrGWHXwZHLMbT6gKM8Ep8xxXS5X9ArZ4lDuz2J7V2TRxWWFr06
ZCffc7a50vWbxNr8vMPh3eOKp/2RoG42f4J0qHR8gm3VwzBCBcZH4fIIZw45XWoO
7BFn2UEh40LWISgf7H8K6YrC5eUs642mL7B9Kqw0zWLgwqFX9bJCs2MbyiQrPOEq
uAQn579SP/S/dGaH8SCSB7nK8yKfC3efamVi/TMoJyZQYZeCmQ==
Generated at Sat Sep 28 23:09:30 2024 by rpki-client on console-fra.rpki-client.org