Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS12.roa
File: AS12.roa (raw, json)
Hash identifier: yRJIms+VO3zkayHmPBqmutmXHYUi0hL+mZ2nt2VfUDU=
Subject key identifier: 1C:17:CA:4C:C2:A3:8A:5F:16:A7:39:C4:3F:09:10:63:FD:53:BA:0F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7CB782BB550F33F5CCE430958E40EE7BEA30E10A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS12.roa
Signing time: Thu 07 Mar 2024 11:15:34 +0000
ROA not before: Thu 07 Mar 2024 11:10:34 +0000
ROA not after: Thu 06 Mar 2025 11:15:34 +0000
asID: 12
IP address blocks: 181.215.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 08:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b7:82:bb:55:0f:33:f5:cc:e4:30:95:8e:40:ee:7b:ea:30:e1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 7 11:10:34 2024 GMT
Not After : Mar 6 11:15:34 2025 GMT
Subject: CN=1C17CA4CC2A38A5F16A739C43F091063FD53BA0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:ec:d1:d6:18:9f:db:ad:9e:07:cd:9d:98:
be:a4:65:ce:58:ae:f8:f9:8d:9c:f3:31:22:2d:14:
f1:50:69:a0:ab:ef:c2:3c:fc:48:b0:ea:21:37:13:
86:10:0f:8f:f2:65:7e:a4:e4:e1:c2:44:27:81:83:
9a:8f:94:73:95:1e:25:e3:c0:ea:f2:5c:03:71:0b:
be:14:b2:02:2a:48:8d:28:56:e1:b3:96:87:aa:78:
cb:1a:14:f2:a1:33:15:fa:71:bf:74:52:d5:49:83:
0f:0f:b2:bb:33:23:8e:bb:e5:02:9b:2f:da:fd:3c:
15:2b:e3:90:e0:3a:f4:2d:a3:a8:ba:b8:ed:66:52:
80:28:d2:88:d8:d1:e7:38:09:7e:42:01:c6:80:4b:
b2:27:dd:13:ef:25:e6:5f:5d:4a:07:77:16:89:27:
2e:2a:66:05:bd:ff:09:da:d1:84:15:3c:96:3a:6d:
6c:4d:30:06:f2:3f:29:f1:b2:b2:3b:e8:01:a4:42:
3a:69:6e:6d:fe:2a:22:39:70:c4:01:80:ae:a7:d0:
1e:9e:cc:2d:5c:a3:3e:02:b5:30:a7:cc:6c:61:09:
75:1c:04:26:49:ef:93:07:f5:d9:ef:39:9e:24:53:
e2:4e:a3:84:d7:62:e6:98:22:79:ce:14:e7:20:0e:
f2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:17:CA:4C:C2:A3:8A:5F:16:A7:39:C4:3F:09:10:63:FD:53:BA:0F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS12.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:84:a7:c4:29:c1:8d:a1:8d:c8:48:7e:f1:30:72:99:a7:93:
91:6f:ac:4c:94:03:64:e4:da:91:cb:45:6d:f6:d6:93:56:f1:
27:0b:c2:10:2a:67:4e:8d:da:c1:56:3b:26:b4:94:a1:4b:3b:
95:a9:56:ed:7f:25:6f:7d:dd:84:ef:94:f4:45:67:a8:a0:2e:
60:0d:a3:7e:dd:7c:bc:5d:ed:42:fe:3d:b0:d7:83:b6:df:17:
b6:a5:d7:96:0d:5c:28:71:5a:25:bb:49:40:4c:f1:b0:8f:f6:
fa:dc:f9:64:c3:14:29:bc:98:ee:90:33:62:e7:e7:1a:3f:47:
87:da:41:29:fc:80:a6:a4:8f:e3:fc:ed:f8:e4:b6:8b:d8:ee:
95:e7:94:46:3d:fa:b1:2a:d7:d2:08:0c:ab:58:e9:6f:10:f7:
04:6a:00:c2:fd:88:91:1d:58:5b:ac:72:0b:55:ed:c4:ba:7a:
94:4f:a9:b7:3b:f4:ac:00:bf:9e:13:ad:92:25:4b:e6:54:25:
a8:32:67:0a:52:d8:1a:5b:09:d0:1b:69:c2:2f:16:ff:33:2d:
e6:8a:53:ff:dc:57:f6:55:6b:9d:7a:f5:3a:f7:44:ca:86:52:
b4:e7:af:78:4c:9d:14:0d:cb:2d:a7:b7:8b:6f:8d:4c:ef:0b:
3b:a9:18:0e
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUfLeCu1UPM/XM5DCVjkDue+ow4QowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDAzMDcxMTEwMzRaFw0yNTAzMDYxMTE1MzRaMDMxMTAvBgNV
BAMTKDFDMTdDQTRDQzJBMzhBNUYxNkE3MzlDNDNGMDkxMDYzRkQ1M0JBMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb3uzR1hif262eB82dmL6kZc5Y
rvj5jZzzMSItFPFQaaCr78I8/Eiw6iE3E4YQD4/yZX6k5OHCRCeBg5qPlHOVHiXj
wOryXANxC74UsgIqSI0oVuGzloeqeMsaFPKhMxX6cb90UtVJgw8PsrszI4675QKb
L9r9PBUr45DgOvQto6i6uO1mUoAo0ojY0ec4CX5CAcaAS7In3RPvJeZfXUoHdxaJ
Jy4qZgW9/wna0YQVPJY6bWxNMAbyPynxsrI76AGkQjppbm3+KiI5cMQBgK6n0B6e
zC1coz4CtTCnzGxhCXUcBCZJ75MH9dnvOZ4kU+JOo4TXYuaYInnOFOcgDvLlAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQUHBfKTMKjil8WpznEPwkQY/1Tug8wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC11xcwDQYJ
KoZIhvcNAQELBQADggEBAI2Ep8QpwY2hjchIfvEwcpmnk5FvrEyUA2Tk2pHLRW32
1pNW8ScLwhAqZ06N2sFWOya0lKFLO5WpVu1/JW993YTvlPRFZ6igLmANo37dfLxd
7UL+PbDXg7bfF7al15YNXChxWiW7SUBM8bCP9vrc+WTDFCm8mO6QM2Ln5xo/R4fa
QSn8gKakj+P87fjktovY7pXnlEY9+rEq19IIDKtY6W8Q9wRqAML9iJEdWFuscgtV
7cS6epRPqbc79KwAv54TrZIlS+ZUJagyZwpS2BpbCdAbacIvFv8zLeaKU//cV/ZV
a5169Tr3RMqGUrTnr3hMnRQNyy2nt4tvjUzvCzupGA4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:01 2024 by rpki-client on console-ams.rpki-client.org