Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS5065.roa
File: AS5065.roa (raw, json)
Hash identifier: 9lfe8q1gFO6Kla57G1zb8kmp1Werrh1oK0zrx9oMx84=
Subject key identifier: DC:02:9A:BD:55:CC:B2:0E:B2:91:FB:12:A9:AD:6C:93:4B:D2:FE:47
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 25EAD12C673664FE16790C95FBF444C854745C75
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS5065.roa
Signing time: Sat 15 Jun 2024 07:24:15 +0000
ROA not before: Sat 15 Jun 2024 07:19:15 +0000
ROA not after: Sat 14 Jun 2025 07:24:15 +0000
asID: 5065
IP address blocks: 147.78.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jul 2024 14:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ea:d1:2c:67:36:64:fe:16:79:0c:95:fb:f4:44:c8:54:74:5c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 15 07:19:15 2024 GMT
Not After : Jun 14 07:24:15 2025 GMT
Subject: CN=DC029ABD55CCB20EB291FB12A9AD6C934BD2FE47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:a9:a6:11:f1:0f:15:84:ee:17:95:63:a7:
c4:0c:f5:88:ce:36:fb:78:56:78:09:38:20:c5:e7:
68:f0:27:ef:42:8e:79:22:94:17:83:b3:de:9d:91:
01:e5:42:91:e5:12:e9:05:3a:8e:47:f3:04:c3:fc:
cd:70:bd:bc:85:5d:33:ef:1d:8e:b6:70:ba:16:4c:
54:fb:e4:ed:00:c1:10:1c:5f:53:87:9a:04:b9:b4:
ad:4e:ec:a1:85:eb:1e:ba:2d:7c:53:fe:25:60:23:
7a:a1:67:01:46:dd:14:48:21:be:f2:db:85:da:db:
04:6e:83:a1:4f:58:9a:a9:e2:a9:f8:e7:c0:06:a6:
6b:79:5e:42:cc:6b:d3:d6:b8:c8:d1:00:f2:48:14:
64:ea:26:3a:6a:6c:72:89:f2:00:26:7a:9c:38:ae:
a6:9c:a5:8f:e0:05:36:8e:aa:a8:8e:ec:37:77:59:
be:20:4c:5b:e5:6f:9d:27:7b:2f:ec:6f:e7:3d:95:
14:d3:33:1a:b8:ba:e9:13:02:6c:5d:77:c4:d8:d5:
90:ae:dd:f3:5a:af:98:28:71:50:d2:02:5a:20:72:
6d:57:51:ad:12:32:74:02:d9:b5:4e:46:96:3f:10:
7e:26:e8:3b:bb:d8:b6:47:bd:1b:d6:d2:9c:28:9a:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:02:9A:BD:55:CC:B2:0E:B2:91:FB:12:A9:AD:6C:93:4B:D2:FE:47
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS5065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.123.0/24
Signature Algorithm: sha256WithRSAEncryption
26:4e:ff:fa:03:5c:88:00:cd:44:bd:56:7f:ee:38:83:2d:22:
a6:53:17:4a:b2:30:cc:6c:e8:c7:74:4d:8b:e9:21:ab:3a:df:
29:e9:1c:32:7a:dd:2a:a7:ce:b3:0b:a0:63:de:f5:82:ae:1c:
b3:b5:7b:75:45:4e:a5:47:5f:cf:6c:44:62:57:82:74:7e:68:
e7:a0:52:b3:1b:02:cb:46:89:4c:29:70:34:3c:02:31:e0:b8:
57:b3:64:8f:ad:01:1c:ca:d8:08:e6:db:62:5e:19:a2:82:e7:
48:12:54:85:47:50:37:25:ef:f8:86:bb:f0:a1:2b:6f:f5:4d:
32:df:d6:6d:8d:2a:e9:79:d0:ca:0c:3b:76:3f:25:fe:66:ba:
34:44:20:f7:cb:1b:dc:fb:e7:63:8d:93:ae:ed:d0:0f:9a:31:
76:de:42:84:8b:7d:c6:6e:8d:3e:e9:dd:d1:4c:5c:af:cf:8a:
a4:ab:69:87:93:2b:ad:39:8a:2f:58:54:b2:83:b4:ee:1b:7c:
92:0d:f6:1b:24:b1:2d:4c:b9:37:6a:87:3c:d5:5a:84:be:a6:
35:91:f4:22:73:7d:63:83:62:20:f2:2b:b2:44:2e:01:0b:1f:
04:1c:e9:75:a8:1d:1a:67:d6:3c:f1:bd:e0:7a:51:ea:d3:14:
3c:01:da:a6
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 18 18:50:15 2024 by rpki-client on console-fra.rpki-client.org