Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS141968.roa
File: AS141968.roa (raw, json)
Hash identifier: PQiW7U/aCzykp+t6WDioMHRcWmYr1I5fphfzNay4PA0=
Subject key identifier: D0:08:A3:88:94:28:6E:47:9D:16:D6:36:9A:63:98:91:3A:49:37:7C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3D3FA2302603799E399CB19236BE315619ABDA47
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS141968.roa
Signing time: Wed 16 Aug 2023 00:00:12 +0000
ROA not before: Tue 15 Aug 2023 23:55:12 +0000
ROA not after: Wed 14 Aug 2024 00:00:12 +0000
asID: 141968
IP address blocks: 181.214.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 08:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:3f:a2:30:26:03:79:9e:39:9c:b1:92:36:be:31:56:19:ab:da:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 15 23:55:12 2023 GMT
Not After : Aug 14 00:00:12 2024 GMT
Subject: CN=D008A38894286E479D16D6369A6398913A49377C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:4a:c1:7e:40:fd:3a:2e:0f:5e:44:19:d9:
a0:e7:c3:c4:2b:f6:4b:c7:56:c4:4a:4c:74:e5:87:
b1:cb:a3:81:ab:59:fd:77:d5:87:d1:a4:e6:fe:01:
c0:ad:c6:cc:76:8e:61:e1:ee:8d:13:83:b9:5e:53:
8e:78:51:77:0e:6c:cc:43:36:d1:87:cb:d9:dc:9c:
08:43:d5:e5:42:71:f7:ff:09:bd:b8:41:84:2a:97:
e4:74:b4:18:c7:bb:47:92:94:cf:05:32:52:df:5f:
38:ce:af:c5:7a:db:48:32:5a:59:36:b9:ed:f5:24:
5c:53:5b:72:28:31:fe:00:4d:80:93:b7:48:53:63:
58:6d:58:56:d7:eb:bb:8e:88:dc:23:aa:7e:82:d4:
04:6f:01:f6:21:74:f6:e6:05:a4:2a:48:04:c4:c8:
bd:4e:fa:39:b4:56:e1:bf:21:da:1a:7b:06:03:55:
1f:10:62:28:47:57:b2:d9:91:01:0c:c4:b8:73:40:
65:d6:f4:84:e5:4c:5b:3e:cf:fe:11:b1:7a:eb:6b:
05:f7:b9:fd:a5:59:7a:47:55:33:23:a5:59:f2:1e:
77:a5:af:02:80:03:59:a9:43:8a:d5:ee:24:7a:74:
16:66:15:82:fc:ec:f5:c7:03:f1:45:e3:8d:c3:c9:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:08:A3:88:94:28:6E:47:9D:16:D6:36:9A:63:98:91:3A:49:37:7C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS141968.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:84:b7:c7:85:8e:01:b3:5d:b2:50:9b:11:dc:1b:43:38:93:
f8:64:89:2b:89:20:51:20:67:55:21:d4:0d:24:7e:3f:e7:77:
bb:84:f8:19:a7:50:fb:fc:1b:17:69:01:c3:56:d2:67:19:f9:
82:4b:e1:ce:81:c1:45:71:aa:45:af:53:e0:d6:6d:fd:2c:d8:
f3:df:b7:a7:2d:8b:7b:42:51:14:83:58:44:60:af:0a:b2:29:
be:28:9c:69:37:ab:47:d8:a6:08:09:41:31:82:6a:b1:55:7f:
53:5a:e0:16:b5:ae:be:51:e3:59:e8:75:c4:87:91:54:27:2d:
1a:77:84:c0:8e:20:9c:89:d8:3b:e4:10:77:fb:00:49:d3:13:
ec:13:75:26:4c:bf:1c:cd:c1:c7:1b:7f:ac:a9:31:78:74:88:
2f:d6:ca:41:f7:5f:ae:dc:d2:39:c7:43:29:b7:56:db:6e:cc:
7a:bc:bf:a3:a6:f5:a0:1c:ce:95:da:9e:e6:72:72:77:db:40:
32:68:a9:dc:24:1d:69:36:e9:51:52:8a:57:db:8b:70:2b:1f:
86:d9:44:a9:d1:21:c5:f7:27:e0:ce:bc:65:d0:7d:69:ab:69:
ae:78:6e:45:fb:27:a3:b3:9e:91:d2:f0:6b:8b:4a:43:ae:bb:
9f:43:65:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:13 2024 by rpki-client on console-fra.rpki-client.org