Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215861.roa
File: AS215861.roa (raw, json)
Hash identifier: hnTFPRa3EuK0yxeYp06ICh3n/k8BxNrp6K8dBLZ1Xr8=
Subject key identifier: EF:BA:24:F1:AE:8C:BA:75:82:39:EC:30:AA:81:CB:F6:BC:8B:30:AE
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5128209787224B662522208E92D33101E3EBA355
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215861.roa
Signing time: Thu 21 Dec 2023 11:53:37 +0000
ROA not before: Thu 21 Dec 2023 11:48:37 +0000
ROA not after: Thu 19 Dec 2024 11:53:37 +0000
asID: 215861
IP address blocks: 147.78.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:28:20:97:87:22:4b:66:25:22:20:8e:92:d3:31:01:e3:eb:a3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 21 11:48:37 2023 GMT
Not After : Dec 19 11:53:37 2024 GMT
Subject: CN=EFBA24F1AE8CBA758239EC30AA81CBF6BC8B30AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:23:1d:8f:97:c1:6b:1e:15:73:5b:d4:0d:
84:68:0b:7d:b3:2f:e5:d2:d9:d5:28:fb:b0:43:53:
2d:c5:ae:1f:36:12:49:2e:83:54:3b:74:47:f2:48:
e3:d2:d8:c0:9e:c4:16:5c:df:06:41:b4:e7:cf:fe:
43:c8:a4:05:2f:fd:f8:f4:7f:ef:14:ad:ba:ec:d7:
76:c2:b6:1e:00:7a:5c:8f:33:9b:46:6a:71:e7:83:
78:2d:00:5f:d1:6d:21:f3:76:08:f3:ba:26:39:44:
61:33:76:bc:86:17:33:1b:9b:e3:57:91:5b:a1:67:
e4:7b:8f:a2:0b:90:58:f9:93:b7:b0:dc:db:94:13:
3a:8d:c8:d3:f1:bf:0e:72:5d:9d:22:37:2e:b4:b3:
79:fc:54:0e:f4:ec:d1:46:63:f7:54:b1:02:7d:98:
41:50:76:9c:62:3e:1c:18:e5:1e:37:39:91:62:73:
0c:d4:3f:7a:34:48:52:40:d2:ed:d8:a4:dd:3b:fb:
14:e0:f7:e4:57:33:52:b2:09:7d:85:90:7b:dd:16:
c2:19:c3:31:41:06:c7:4b:6e:14:05:7c:b0:60:27:
de:30:44:cb:92:9b:f5:87:81:51:d0:13:c4:4b:19:
04:42:dd:fa:63:bc:e7:7c:a1:ba:6c:45:ce:7d:57:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BA:24:F1:AE:8C:BA:75:82:39:EC:30:AA:81:CB:F6:BC:8B:30:AE
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215861.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:1d:7a:f7:13:16:4f:a5:e8:7b:db:07:e3:70:b1:a2:53:ad:
ed:b1:4a:50:bc:7b:3f:83:94:5f:3d:ea:f1:3f:ce:a4:c7:2a:
46:83:28:c6:44:97:a2:69:07:0f:8c:28:35:4a:de:3e:58:48:
31:84:bf:0d:ea:ff:4b:32:31:e8:65:44:6f:69:7a:00:63:f5:
07:68:23:37:6f:e0:9b:07:1c:35:5b:ec:ac:0e:a8:90:03:f0:
05:32:35:32:06:9f:7a:d0:a4:94:eb:b7:94:60:d0:03:78:da:
98:7d:de:6f:19:b4:f4:1b:72:13:21:59:99:df:d7:f4:8c:24:
59:f1:67:6c:43:0c:b6:26:e0:17:d0:66:41:d0:cb:dd:37:2e:
56:82:14:e4:2f:49:26:7f:e8:b2:96:32:a0:a9:82:09:8f:7c:
83:da:49:f2:2c:ee:b6:47:36:92:40:4b:86:4e:bd:6a:52:78:
03:39:9c:be:83:3d:e5:36:5f:cf:3a:0c:b2:1e:4b:0e:78:8a:
8d:5f:50:62:6b:23:0e:de:f1:41:87:52:cf:67:94:40:8f:e4:
77:1d:fa:f8:21:4c:f7:5c:86:1c:e2:86:f3:2f:31:94:5f:47:
c4:22:29:c1:0a:b9:e7:30:09:21:10:ce:cb:9d:94:d4:95:bb:
ae:09:fe:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 21 04:41:21 2024 by rpki-client on console-fra.rpki-client.org