Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS15689.roa
File: AS15689.roa (raw, json)
Hash identifier: JqC2StXW+Bjzj1J/lcCTu/84QhHlnp3Yg1YK0BRU4PE=
Subject key identifier: 18:FB:0C:B2:83:00:89:A6:C7:88:37:D6:50:AE:78:6D:80:58:58:D2
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 37AEDEE32B7E289C8EB5683C363102C9A4A8212D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS15689.roa
Signing time: Wed 06 Nov 2024 13:36:45 +0000
ROA not before: Wed 06 Nov 2024 13:31:45 +0000
ROA not after: Wed 05 Nov 2025 13:36:45 +0000
asID: 15689
IP address blocks: 46.202.84.0/22 maxlen: 24
46.202.208.0/21 maxlen: 24
46.203.160.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 11:14:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ae:de:e3:2b:7e:28:9c:8e:b5:68:3c:36:31:02:c9:a4:a8:21:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 6 13:31:45 2024 GMT
Not After : Nov 5 13:36:45 2025 GMT
Subject: CN=18FB0CB2830089A6C78837D650AE786D805858D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:75:d2:f9:91:79:4b:d5:7e:e3:b2:b4:76:
50:fe:69:42:49:1e:1f:86:37:aa:03:d4:14:2e:4d:
4f:94:21:ac:16:c7:39:92:08:64:f5:d5:b0:b7:4f:
d2:a8:b9:5f:17:8f:57:0c:a6:56:16:71:2c:74:45:
3c:71:2a:70:5e:f1:92:f1:99:ad:a0:bf:46:e5:e9:
2d:67:19:2a:c9:61:4a:6e:f6:06:07:e0:42:4f:f5:
e0:eb:0c:a3:94:3c:32:2f:76:f6:de:d9:f7:f3:ac:
30:b8:32:d6:11:e7:1b:99:fe:6f:1a:08:99:e3:59:
b5:8e:77:10:f0:03:0e:4c:fe:a8:4b:78:24:d2:dd:
5f:05:3a:a3:be:7a:70:7c:d5:0d:90:25:b6:73:a8:
95:af:f1:c9:69:92:2a:34:ef:e5:0a:09:5c:a9:33:
c0:c4:e3:4e:10:66:84:48:70:e8:19:dd:b5:bc:dd:
12:48:1b:70:99:a0:81:af:9c:1c:37:a3:2a:5d:85:
1c:90:80:18:01:35:4a:a2:0a:55:b4:d2:53:bf:6c:
72:e0:ff:36:90:bd:c2:c5:c5:90:c5:5f:c8:55:74:
85:8d:49:d8:15:5f:b8:5b:fb:37:29:9e:e7:d9:d0:
9e:90:6d:73:91:04:fb:fa:a6:dd:4c:76:bb:3b:0a:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FB:0C:B2:83:00:89:A6:C7:88:37:D6:50:AE:78:6D:80:58:58:D2
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS15689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.84.0/22
46.202.208.0/21
46.203.160.0/20
Signature Algorithm: sha256WithRSAEncryption
05:b7:c4:98:27:51:1e:bc:3a:d2:1b:a2:ba:63:bb:22:00:56:
4d:6a:ec:23:00:e8:9f:6d:b5:b4:bc:90:66:70:07:d4:39:7f:
8f:f5:52:13:b4:17:e8:f9:51:d8:d3:0e:40:01:60:dc:75:26:
b4:50:3b:62:fd:db:94:9a:e8:cb:62:a5:39:09:21:52:03:c9:
44:9f:14:5b:7d:fd:72:fb:38:94:9a:08:01:5b:bc:26:10:6a:
37:e3:92:2f:09:41:6e:7b:73:d6:d6:3d:65:ee:da:b2:c5:c6:
d4:7b:5f:fb:01:b0:4d:59:58:65:75:37:6c:14:1c:47:d0:08:
39:1b:e6:9c:a8:ea:37:d9:d9:3f:e2:ea:78:ad:f6:0b:0a:b9:
90:5a:38:2a:00:bc:3d:27:7d:78:df:66:e8:f5:aa:9d:0d:37:
86:f2:70:63:ac:39:09:75:29:8d:41:56:55:6e:bc:ca:72:87:
cf:c8:4c:53:50:44:4b:d3:e6:a1:99:1f:7e:49:87:53:28:75:
a3:da:f5:f4:66:61:e3:64:53:8c:0f:05:99:13:3a:db:92:54:
b8:ca:16:c1:c8:f9:53:9b:0f:93:f5:9d:a8:ce:53:56:da:8c:
fb:8a:61:0f:d5:57:63:3d:78:d2:ae:7a:5b:a9:ce:04:90:04:
ca:33:d9:99
-----BEGIN CERTIFICATE-----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=
Generated at Thu Nov 7 14:04:44 2024 by rpki-client on console-ams.rpki-client.org