Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47585.roa
File: AS47585.roa (raw, json)
Hash identifier: pm+b1jrEQTN/N1tugqHEk8wCN48X2rC3NU3QFYFyM/E=
Subject key identifier: D1:FE:2A:73:CC:0D:4B:1F:9E:8F:4A:99:FD:5A:FC:A1:58:E9:4A:F3
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 08BAF813A066B4BA0846E902FF6429A7E28C9EC2
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47585.roa
Signing time: Fri 12 Jul 2024 18:55:16 +0000
ROA not before: Fri 12 Jul 2024 18:50:16 +0000
ROA not after: Fri 11 Jul 2025 18:55:16 +0000
asID: 47585
IP address blocks: 191.96.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 00:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ba:f8:13:a0:66:b4:ba:08:46:e9:02:ff:64:29:a7:e2:8c:9e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 12 18:50:16 2024 GMT
Not After : Jul 11 18:55:16 2025 GMT
Subject: CN=D1FE2A73CC0D4B1F9E8F4A99FD5AFCA158E94AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:22:08:76:1c:47:be:07:83:7a:7c:cb:1f:
0c:3d:02:f6:37:2f:7f:0b:a4:b3:9f:7c:24:a1:4a:
32:ea:86:1d:0a:72:92:cd:57:ca:f1:c9:b9:3a:b3:
05:93:c4:9f:22:77:75:b6:a4:c0:ca:f1:77:31:bb:
78:48:bb:44:26:b7:e0:43:95:3f:7f:90:d5:9f:65:
fa:b2:c1:70:9f:d2:6e:e9:65:dd:5e:31:48:1a:6d:
4d:24:99:25:c8:cc:a0:4e:64:3f:b3:3f:17:db:3e:
a4:01:01:60:cf:aa:94:cc:ed:9a:f6:75:b9:6c:15:
c1:72:ed:a1:5e:f6:28:ed:c6:51:fb:42:13:c7:60:
16:65:5e:82:07:ad:f5:e5:88:f0:35:ad:46:ea:f4:
8b:4b:7a:01:8d:64:00:4c:87:5a:e6:9e:2f:58:f0:
88:2b:c4:82:d5:18:95:69:cf:10:ef:f9:70:e5:5b:
0a:bf:11:54:0b:55:e3:03:b4:56:0c:cb:d5:fc:c7:
2e:e9:5d:2c:34:99:4b:97:23:f3:ba:9b:b5:16:8e:
41:eb:5f:91:f5:da:cd:ef:03:91:2f:64:29:9d:e8:
15:90:22:e1:38:77:03:81:fc:a4:88:4e:6b:2e:55:
e2:20:05:b8:2c:30:ea:dc:3e:e6:b6:66:98:f9:6f:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FE:2A:73:CC:0D:4B:1F:9E:8F:4A:99:FD:5A:FC:A1:58:E9:4A:F3
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47585.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.176.0/24
Signature Algorithm: sha256WithRSAEncryption
39:66:f7:a3:16:10:bd:de:c5:4f:8a:ea:c5:26:34:b9:35:05:
38:00:20:2c:89:d4:99:53:ba:88:7c:c8:fc:a3:eb:11:5c:92:
25:92:cf:9f:f3:f2:58:03:c6:fe:dd:dd:c4:f9:13:4f:e6:a8:
79:84:5f:a7:e3:80:9e:67:61:29:f0:e0:f4:a5:fd:3e:24:34:
5f:a1:65:20:11:26:71:a7:52:a9:96:fe:46:61:db:8f:56:63:
db:c7:69:8d:7c:2f:56:b9:bd:46:67:2f:0e:56:8f:3d:01:4b:
5f:e5:48:f8:18:62:cf:af:4f:86:26:68:50:2f:50:57:05:c4:
27:2a:f6:55:88:6f:69:d4:e4:91:ec:b2:4a:77:34:d8:c8:cb:
95:78:5b:0a:2c:bf:29:51:13:bd:5e:99:e5:9b:32:17:0d:0a:
4e:4f:2b:25:64:b4:cc:93:d9:e2:1f:21:66:d3:88:4b:2b:95:
08:f5:5a:b6:86:f6:36:a6:c2:d3:cd:3c:e4:b7:cc:97:27:ad:
94:09:7b:1b:1b:84:a1:6f:6a:e0:96:b6:35:96:f1:22:46:3e:
e9:a7:0f:75:3e:9c:17:92:e0:4d:61:c8:3a:33:6f:63:b5:ab:
0a:e6:59:e6:94:6d:16:71:0e:f8:16:09:02:26:80:c1:f5:1f:
3c:ea:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:48 2025 by rpki-client