Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213060.roa
File: AS213060.roa (raw, json)
Hash identifier: nexcVtXxVnTr2fdAbKn60HZgBbGNlgvrVzExGYqVSfI=
Subject key identifier: 21:26:19:35:B1:1C:23:0F:8F:BF:B8:FB:3F:8F:8A:9F:7E:1D:6A:98
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7BDF3447ACEBBB56B6C0D569C364599D86BDDCED
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213060.roa
Signing time: Mon 23 Jun 2025 08:08:18 +0000
ROA not before: Mon 23 Jun 2025 08:03:18 +0000
ROA not after: Mon 22 Jun 2026 08:08:18 +0000
asID: 213060
IP address blocks: 45.231.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jun 2025 05:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:df:34:47:ac:eb:bb:56:b6:c0:d5:69:c3:64:59:9d:86:bd:dc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 23 08:03:18 2025 GMT
Not After : Jun 22 08:08:18 2026 GMT
Subject: CN=21261935B11C230F8FBFB8FB3F8F8A9F7E1D6A98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:68:74:b7:0c:7b:79:a6:2d:7c:05:fc:92:
3a:1a:8f:e2:28:45:8e:63:21:44:02:a1:af:b0:69:
48:7a:33:dd:9b:5a:fb:d2:aa:73:6f:69:fc:f9:e1:
72:72:e5:a9:29:3f:6d:c6:76:7b:0e:f9:fb:fc:2f:
76:b3:3d:ba:b2:2a:cf:69:67:a3:86:5b:6d:28:e3:
0e:47:88:c4:36:02:e4:7f:ae:f4:dc:0b:22:39:34:
e4:2e:09:66:34:01:95:54:19:e7:19:1b:f1:08:54:
db:7d:ea:b5:7c:7f:3f:9d:5b:b3:4f:3f:47:6c:1d:
a7:c8:31:df:53:07:8f:c3:d2:fb:5e:e2:0d:ac:b0:
f9:79:e1:e5:65:1b:77:be:13:93:c9:0e:15:f5:a1:
44:83:7b:3e:63:a5:67:60:c2:13:ba:f0:33:fb:1a:
94:7e:b3:18:ba:46:77:4c:0b:d6:d5:ee:02:cc:10:
3f:11:ff:cd:8f:61:79:20:db:0c:81:01:e5:f5:0c:
81:52:00:89:21:c3:d3:db:47:a4:a3:af:cd:05:c1:
3f:01:e1:12:54:e9:60:2b:03:f9:ba:96:65:42:10:
31:3e:7e:e0:4a:2f:72:05:08:12:cf:c2:42:2c:ea:
81:04:7e:de:c1:b1:a5:fc:ab:6f:16:64:b1:73:e1:
fa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:26:19:35:B1:1C:23:0F:8F:BF:B8:FB:3F:8F:8A:9F:7E:1D:6A:98
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213060.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.206.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d0:b0:be:56:d9:37:01:24:05:ae:dc:58:59:39:10:29:fc:
e4:e7:1b:b5:1b:da:2e:25:05:d7:cf:ce:19:9e:2f:ec:0f:3d:
c0:f8:8f:5e:91:7c:4c:18:06:36:b8:71:16:ab:28:cb:c0:a9:
f9:ec:a0:09:ad:0f:54:34:2f:7b:f3:08:55:10:2c:33:17:e7:
bb:95:ab:49:50:22:b8:06:90:91:bf:19:4d:85:b4:f2:28:b5:
ef:79:a4:45:fc:54:05:f1:47:41:49:b2:58:c9:fa:2e:ca:bf:
d9:a9:06:21:18:af:91:cf:eb:5b:ae:f5:76:f4:a5:62:38:1e:
50:5a:3e:5f:a6:3b:da:72:7e:ef:0e:3c:00:6c:62:c9:ce:ca:
5e:dc:fd:af:e9:d0:db:46:50:df:1b:d9:da:5e:ed:dd:c6:0a:
55:87:32:87:8f:fc:e0:ff:32:0f:7f:0a:bf:9f:9d:5c:f4:61:
5d:bb:18:8d:97:d6:f4:57:c0:7f:38:f9:e5:5e:6c:88:f1:3b:
1a:55:5e:86:9a:f4:05:69:68:d0:f7:51:78:d4:9a:cd:0d:3a:
df:0d:78:f0:41:21:7c:56:5a:e1:c7:57:f6:88:23:04:3e:4c:
98:24:51:c6:5a:15:c9:ba:b7:e2:a4:23:76:29:08:4e:38:2b:
3e:a0:2a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:08:40 2025 by rpki-client