Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS44547.roa
File: AS44547.roa (raw, json)
Hash identifier: zssvItZaFNbWidW1x6Z1R2E/BEsVzwT5fMw2AgPOdmI=
Subject key identifier: 52:08:FE:64:2C:B7:96:F1:C2:FB:F6:8C:A2:0F:93:95:E9:E0:E8:C7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 071D1624738210E3F0AF59989DB2B646EF962801
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS44547.roa
Signing time: Wed 02 Aug 2023 14:44:32 +0000
ROA not before: Wed 02 Aug 2023 14:39:32 +0000
ROA not after: Wed 31 Jul 2024 14:44:32 +0000
asID: 44547
IP address blocks: 181.215.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Oct 2023 00:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:1d:16:24:73:82:10:e3:f0:af:59:98:9d:b2:b6:46:ef:96:28:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 2 14:39:32 2023 GMT
Not After : Jul 31 14:44:32 2024 GMT
Subject: CN=5208FE642CB796F1C2FBF68CA20F9395E9E0E8C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:9b:b9:69:5c:49:2c:dd:a2:01:1b:76:34:
db:8f:1e:cb:56:1e:8e:b1:d7:18:bb:e7:88:f1:9d:
5c:16:d0:04:fa:bb:20:48:a5:2b:d7:05:ef:77:9d:
d5:29:08:1e:28:b1:1f:67:7a:b5:cd:76:24:ac:85:
4e:fd:23:99:88:76:7c:43:f9:61:4d:e6:b9:fd:45:
f3:32:30:1b:0b:4d:a8:91:b3:c9:27:8b:69:8b:30:
e1:3e:b6:57:02:ca:6b:f3:19:41:77:84:ee:4a:28:
3f:f1:d7:40:d4:75:47:c7:e8:f8:c9:e2:d2:f1:38:
e1:36:c2:66:12:25:e5:52:d5:33:1a:2b:c1:33:90:
6b:2c:54:a2:9e:3a:30:30:36:f7:97:c6:5d:01:74:
b5:f9:0a:8e:6b:d4:64:34:55:81:09:a1:d0:7e:ea:
94:fa:c0:de:57:56:c2:58:f1:ac:59:23:d5:78:b9:
6c:9e:5e:ae:32:f9:56:85:5c:3b:26:df:92:7e:7b:
fa:4c:f5:f0:ae:c6:18:10:56:4d:22:04:f0:7f:ed:
10:51:61:12:ea:41:cd:1f:06:7e:74:71:0a:03:a6:
26:33:64:95:ac:78:74:c3:b7:b9:64:e8:1c:be:8d:
9e:b3:12:e5:c6:c2:b1:5b:d9:f1:23:51:44:8f:1c:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:08:FE:64:2C:B7:96:F1:C2:FB:F6:8C:A2:0F:93:95:E9:E0:E8:C7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS44547.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.159.0/24
Signature Algorithm: sha256WithRSAEncryption
74:de:02:0e:c1:da:ba:40:f1:f0:13:56:65:58:12:1f:05:60:
7e:9c:ae:aa:48:69:81:a6:91:d1:ec:6b:88:3a:b5:99:bf:2a:
03:7a:ac:c9:eb:c4:9d:b1:f4:c3:14:81:86:29:d0:ef:dc:db:
04:f7:14:6d:15:8e:37:3b:77:7a:6f:a3:9f:b9:c1:cf:48:2b:
5f:16:26:b1:8e:30:a0:9a:49:81:82:c4:63:b4:4e:fa:d3:cb:
6e:4b:88:60:6b:02:c2:4e:4e:c3:b9:b1:4e:40:54:70:7b:c9:
db:6f:02:8c:26:68:a4:26:e5:be:d7:bc:1d:5c:ed:b1:9f:b4:
c2:c6:60:73:12:ac:e8:24:39:2e:9f:f9:b7:6d:57:c3:c0:71:
c7:4e:35:e9:35:6e:35:9f:5a:ff:69:5c:1f:7c:04:f3:03:0f:
0a:23:99:68:17:d5:b5:73:f5:ba:46:6c:98:e1:1f:aa:e4:a1:
bf:46:cb:d6:c4:52:0a:7c:97:cd:ab:4e:0e:91:8c:99:aa:04:
37:2a:be:48:36:1e:b8:b7:5d:0e:23:a1:53:4d:b5:de:f2:f4:
75:b2:4f:33:74:3b:38:a3:03:1d:54:c6:af:cb:bd:88:54:1a:
71:6e:d3:0c:b8:c7:7a:27:3d:fe:fa:c3:e6:51:5b:d0:cc:9b:
47:79:8d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:15 2024 by rpki-client on console-fra.rpki-client.org