Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS47679.roa
File: AS47679.roa (raw, json)
Hash identifier: kf3LCyRCDf+YAnz/m0GW81sPiA2Jo3S3mRYl+XWfWdk=
Subject key identifier: 45:BD:43:62:BB:00:42:21:8F:91:37:FC:71:CC:92:BA:51:21:83:3B
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0BF630A34981393BD063A0983EF67C48C5F47A2F
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS47679.roa
Signing time: Thu 11 Jul 2024 13:23:15 +0000
ROA not before: Thu 11 Jul 2024 13:18:15 +0000
ROA not after: Thu 10 Jul 2025 13:23:15 +0000
asID: 47679
IP address blocks: 141.11.74.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 10 Nov 2024 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f6:30:a3:49:81:39:3b:d0:63:a0:98:3e:f6:7c:48:c5:f4:7a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 11 13:18:15 2024 GMT
Not After : Jul 10 13:23:15 2025 GMT
Subject: CN=45BD4362BB0042218F9137FC71CC92BA5121833B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:96:28:93:cb:c8:0c:15:0a:80:65:ce:9f:87:
21:70:ac:6c:b0:69:08:1e:26:97:c5:1f:b8:44:01:
0e:7e:f2:a1:a2:12:f5:67:83:03:9b:36:0c:87:33:
e6:e0:7c:e1:2a:74:c8:a2:ed:36:17:63:5f:0d:a1:
52:59:98:6b:11:b4:0e:ed:b5:f0:54:36:27:91:3e:
7f:e9:b1:9b:0c:d1:81:66:28:10:d9:30:09:02:e3:
bf:4b:1a:b5:72:9b:0a:80:0d:9c:eb:b0:bb:f2:ac:
c9:49:cf:9d:da:32:19:26:d6:3f:29:5e:f7:0c:cf:
60:31:0d:eb:d6:17:eb:7c:d9:13:dd:10:30:26:96:
8e:79:aa:b2:53:b2:d5:0b:ca:34:0d:c4:8b:a4:fd:
9c:dd:07:d3:c3:c4:06:1a:5c:e6:48:eb:b6:fb:a3:
40:90:3b:86:53:84:af:a4:17:c6:3e:bf:43:ff:40:
77:22:72:70:7a:11:0f:30:41:1b:36:7f:18:81:5b:
07:be:84:c0:f8:1b:80:29:93:c4:23:68:a0:e1:75:
62:4e:ee:a1:96:1d:eb:b7:56:5a:3c:a9:b1:90:c5:
45:6e:3c:34:51:cf:70:56:61:41:27:ee:9d:51:83:
1e:5c:5c:9d:34:f3:b0:f3:68:1d:7e:15:1c:c6:43:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BD:43:62:BB:00:42:21:8F:91:37:FC:71:CC:92:BA:51:21:83:3B
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS47679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.74.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:dd:f6:50:5f:b5:4b:0a:f4:35:65:67:c2:64:03:2a:71:f6:
16:d0:1d:7d:80:8b:01:df:ee:f2:d6:91:37:70:96:3e:b6:7b:
1f:e6:ed:42:94:8b:d2:4b:d8:eb:69:71:d4:f1:de:09:7a:a1:
68:64:82:6d:cb:a8:e3:c8:c0:17:84:f5:c9:84:75:74:a8:7d:
c7:dd:a2:4e:e5:ba:4d:98:15:1e:9f:d3:c8:38:4a:3b:73:31:
1f:ce:1b:cc:dd:67:e9:7a:b3:7d:b6:f1:48:8e:58:61:96:c8:
94:fd:9b:a4:9e:29:03:5b:d4:5b:e9:9e:f7:81:a7:4e:d5:64:
ca:29:eb:ad:59:6c:a7:66:92:2c:ad:86:0e:e1:94:ce:4f:f3:
00:3c:dc:1e:bc:32:2a:12:14:07:e4:31:88:4c:76:aa:ec:19:
90:c1:70:35:d1:d6:ef:15:24:60:de:63:7a:00:c0:32:dd:7a:
22:32:75:ce:dc:f4:ee:13:1a:31:cc:a8:b0:a8:d7:40:8a:7b:
5f:77:6b:e2:c2:d0:f4:15:23:35:7e:15:e4:fd:46:5f:d9:6e:
ca:b4:90:8b:23:f1:bd:3a:5f:cc:c1:f0:76:86:1e:f7:37:cc:
31:88:51:62:3e:24:84:6e:b0:84:13:d9:40:7d:cf:71:a9:d9:
56:8a:a4:eb
-----BEGIN CERTIFICATE-----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Generated at Sun Nov 10 03:39:46 2024 by rpki-client on console-ams.rpki-client.org