Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47629.roa
File: AS47629.roa (raw, json)
Hash identifier: 2me1pwTIsSLIs8B7XhzADFvdfPcFEH5UNRt+gJDshVg=
Subject key identifier: 89:DA:B8:E7:F6:33:DD:AE:F8:85:5E:1C:4C:FA:B8:EE:B9:B1:9B:9A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 73A64CE291C10E56F39158C7D4555A8550B6EE04
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47629.roa
Signing time: Thu 07 Mar 2024 00:00:14 +0000
ROA not before: Wed 06 Mar 2024 23:55:14 +0000
ROA not after: Thu 06 Mar 2025 00:00:14 +0000
asID: 47629
IP address blocks: 181.215.29.0/24 maxlen: 24
181.215.41.0/24 maxlen: 24
191.96.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:a6:4c:e2:91:c1:0e:56:f3:91:58:c7:d4:55:5a:85:50:b6:ee:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 6 23:55:14 2024 GMT
Not After : Mar 6 00:00:14 2025 GMT
Subject: CN=89DAB8E7F633DDAEF8855E1C4CFAB8EEB9B19B9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8b:24:1a:65:73:4b:49:3a:b2:b6:f7:04:02:
c7:81:79:5a:71:a9:33:68:19:cd:40:59:92:86:25:
4e:ee:5e:84:7c:de:66:98:02:fe:f7:8d:3b:b7:2f:
a3:f2:23:6f:73:7b:b1:aa:ba:30:11:8f:69:5e:3d:
7d:70:bd:18:bf:9c:94:91:60:bb:11:2c:e1:45:8e:
b3:c3:33:17:f9:c9:bc:7a:1a:b8:8c:94:af:50:cb:
2c:f6:6f:8f:cb:80:eb:42:3b:42:70:32:4d:60:57:
a8:74:e6:6a:76:1e:ca:14:24:9b:de:ec:1e:e2:dc:
67:ec:f2:eb:cd:71:c7:09:a4:8f:49:2c:cc:23:fa:
df:15:a5:fc:ab:c8:bc:e3:26:03:eb:67:97:5e:90:
3a:08:79:de:ea:f8:50:55:a9:49:08:53:97:ee:6c:
c5:5a:63:19:27:79:f2:20:83:41:1a:d9:cd:4d:f7:
43:56:44:2f:fd:6e:f9:80:4c:08:d5:7b:f8:ef:fc:
fe:37:ae:db:4b:16:91:9c:88:34:c8:c4:80:ad:f3:
e1:5c:58:7c:30:e4:1f:d4:66:7b:9d:88:a0:9e:9c:
2c:33:6e:6d:52:9a:61:f5:18:56:fd:69:c7:d7:91:
6e:06:e7:3e:ee:e0:44:19:94:94:0a:a8:22:fd:3e:
9a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DA:B8:E7:F6:33:DD:AE:F8:85:5E:1C:4C:FA:B8:EE:B9:B1:9B:9A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47629.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.29.0/24
181.215.41.0/24
191.96.117.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:74:72:61:0e:75:0c:14:45:6a:16:28:a9:1d:16:10:f3:72:
e0:4b:25:91:d3:89:b8:9c:be:95:eb:e6:e9:81:90:56:58:b9:
db:1d:46:23:59:06:0d:fb:03:39:93:6c:2d:4b:60:db:40:05:
5a:27:5e:52:19:77:44:17:bb:59:b9:84:90:02:1a:61:c3:d2:
27:96:d6:ce:d0:1b:cd:4a:19:76:9f:f4:6d:19:8f:f3:bd:31:
3d:7c:45:4d:44:95:0b:a6:ff:f4:d5:ee:d3:b5:9d:a9:86:77:
18:33:1c:d1:14:24:03:72:24:7f:0f:fa:72:03:47:8f:f7:91:
5f:23:f9:9b:32:93:44:af:bc:d1:8d:77:c0:6e:20:5d:82:53:
13:a9:df:b6:25:c4:d2:d5:96:89:d7:d0:bb:de:45:5a:f7:8a:
cf:6d:58:de:53:85:0d:2b:43:be:21:7f:bb:74:e2:33:e9:3e:
1c:1b:e2:ce:fd:7b:00:4d:96:47:46:57:c7:33:75:46:b0:1a:
4e:ca:72:8d:7d:3f:e9:a6:37:9a:47:25:4c:a2:b9:8d:a2:e6:
c9:33:2a:03:38:65:bc:be:56:4c:2c:e3:e9:4b:7c:c7:71:c7:
30:54:fd:ea:58:8b:82:96:0f:17:e6:56:53:16:76:be:04:e6:
b1:7e:89:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:14 2025 by rpki-client