Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS47585.roa
File: AS47585.roa (raw, json)
Hash identifier: OxFB3R7zA3u+SnkpsMkhv2VQMSE7L22Rr0EydsH9YFE=
Subject key identifier: 73:93:5E:1F:35:C7:FF:9E:0D:DB:96:74:B6:41:7F:F3:DB:13:3F:D7
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1116BFEF9319B1D405E50D1219F0C29F624D00FC
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS47585.roa
Signing time: Wed 28 Aug 2024 08:07:56 +0000
ROA not before: Wed 28 Aug 2024 08:02:56 +0000
ROA not after: Wed 27 Aug 2025 08:07:56 +0000
asID: 47585
IP address blocks: 45.135.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 00:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:16:bf:ef:93:19:b1:d4:05:e5:0d:12:19:f0:c2:9f:62:4d:00:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 28 08:02:56 2024 GMT
Not After : Aug 27 08:07:56 2025 GMT
Subject: CN=73935E1F35C7FF9E0DDB9674B6417FF3DB133FD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:aa:8f:85:c5:70:ea:42:9d:f2:31:1c:a4:
b3:4c:49:67:e5:8b:6c:1d:08:d6:e8:b0:6c:8d:40:
0d:3d:af:f6:c1:a4:1a:e4:eb:eb:f1:61:9a:b5:96:
25:1b:15:2c:d0:64:75:3d:1f:34:f1:4b:1b:65:ba:
1f:ca:d4:15:6f:06:43:2f:9a:b2:b5:16:cd:f5:cf:
c1:9f:04:a6:da:20:dc:23:a1:b6:eb:ea:43:ef:40:
0e:16:e1:d4:a5:85:62:d4:ed:3a:8c:3a:59:c5:fe:
72:78:5d:f2:b8:51:f1:6c:dd:74:7b:11:63:eb:ac:
50:38:b9:ac:95:f6:a1:2a:b8:5b:4a:9c:31:62:47:
d6:ce:35:d7:b1:e2:28:2d:b6:47:b0:fc:06:af:10:
26:5b:22:50:19:c5:6b:8e:5d:84:b2:b9:fc:0f:33:
72:d7:22:94:05:98:c1:af:64:21:2f:d2:6b:46:39:
a8:d2:1f:d6:5f:b0:c5:ab:91:7f:0b:a8:11:33:6c:
46:4f:71:6d:7b:25:56:66:ea:04:61:34:03:fe:16:
4d:b4:d2:a7:a1:b5:cf:48:50:4b:e7:e2:61:0a:be:
e9:5e:46:18:3d:3b:b2:eb:a8:b3:88:d9:5b:a1:59:
70:56:5b:30:c3:ca:d1:cc:98:0f:b6:66:00:95:97:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:93:5E:1F:35:C7:FF:9E:0D:DB:96:74:B6:41:7F:F3:DB:13:3F:D7
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS47585.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.250.0/24
Signature Algorithm: sha256WithRSAEncryption
84:15:07:1b:2a:49:7b:fe:1e:f7:47:8e:8c:9a:fb:cb:77:b2:
28:f0:a4:c1:54:ee:99:83:6d:d6:d0:88:eb:26:b7:40:06:27:
b6:dd:de:a1:3e:c1:40:cb:d9:b9:73:2d:9d:7f:22:f7:18:d1:
a7:ef:33:1d:c3:24:c7:a0:7f:be:9b:d4:26:a1:68:2f:11:4a:
83:d8:da:26:84:7a:28:2d:83:6d:e0:a6:12:0c:f3:a1:cf:30:
e1:ff:84:2b:d1:93:5c:34:75:24:9f:d0:a7:04:22:d8:12:a0:
09:5a:57:2d:f9:cc:a5:7b:fc:16:97:de:c3:b9:2f:a2:01:07:
a9:f5:f0:05:f3:76:e6:b2:fe:11:aa:88:90:5c:40:69:82:60:
30:1f:e6:6e:fe:eb:10:33:76:86:91:9f:ba:54:f7:50:ae:f9:
a1:0d:76:95:bf:d4:b7:0c:04:d5:ef:a9:85:d0:12:aa:72:ee:
82:4e:38:66:e9:f6:43:f8:94:ef:74:2b:ad:84:4e:62:4b:d9:
18:62:ec:71:dd:ce:86:83:b5:76:38:52:d1:56:40:bb:2b:69:
4b:89:4f:4f:25:96:d7:47:ca:ed:c1:85:c6:a5:50:bc:70:19:
e0:bc:b3:f2:ee:3d:09:7d:6c:fe:61:05:05:4c:fe:8e:d3:3c:
f6:85:86:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 02:16:21 2024 by rpki-client on console-fra.rpki-client.org