Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS142519.roa
File: AS142519.roa (raw, json)
Hash identifier: qKgJ5YQNLfiS0gj6U5GM+NSWlf08hgOKRhi9mcDjQH4=
Subject key identifier: F2:FA:B6:6E:4E:C5:C5:A0:8F:18:37:01:F3:5E:AA:D0:B0:3F:5C:C7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 64DC3DAB0F64A97829272195FF4DC0BC81B29452
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS142519.roa
Signing time: Sat 12 Aug 2023 00:00:14 +0000
ROA not before: Fri 11 Aug 2023 23:55:14 +0000
ROA not after: Sat 10 Aug 2024 00:00:14 +0000
asID: 142519
IP address blocks: 179.61.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 12:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:dc:3d:ab:0f:64:a9:78:29:27:21:95:ff:4d:c0:bc:81:b2:94:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 11 23:55:14 2023 GMT
Not After : Aug 10 00:00:14 2024 GMT
Subject: CN=F2FAB66E4EC5C5A08F183701F35EAAD0B03F5CC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:7a:4a:4c:25:30:b8:9f:a6:72:e0:cf:73:
e1:99:93:40:9c:95:25:c6:13:c4:bb:48:f3:d0:d3:
04:10:cb:02:31:c1:ae:1e:a4:b0:33:64:91:37:1f:
0a:e3:72:43:93:8c:ff:33:ac:00:45:b1:8a:83:c0:
c4:31:bf:73:ff:7d:06:f6:37:79:82:7c:6f:4d:97:
63:e5:fe:bb:f5:41:31:39:04:a6:22:91:24:3c:97:
4a:8d:8f:70:cc:bc:1c:c4:eb:fb:2f:83:5c:2d:d9:
44:94:e7:50:81:c0:66:ab:7e:36:7c:bf:aa:06:e2:
ea:90:c1:c0:0b:ba:f6:5d:77:2c:8d:33:31:f2:8e:
22:16:8e:8b:44:13:cb:32:a2:db:38:75:a8:b9:6b:
d3:ec:d8:95:2c:88:ec:f1:bc:7e:2c:ef:2f:3a:c8:
f3:ff:c9:67:b5:39:67:ac:1d:06:c9:11:7d:63:6f:
20:15:e6:65:70:0d:a0:50:9a:ab:b1:0f:80:d2:4f:
f6:7a:e5:2b:2b:e5:d6:26:5b:a3:54:20:0e:2c:e1:
0e:9a:8c:7c:36:86:ca:c7:e7:e3:e3:91:c2:3b:d9:
12:a1:55:07:5b:a2:8a:6b:48:21:85:f3:04:8a:5b:
38:32:ed:59:2e:54:25:a7:1f:14:57:31:b7:d9:e3:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FA:B6:6E:4E:C5:C5:A0:8F:18:37:01:F3:5E:AA:D0:B0:3F:5C:C7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS142519.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.142.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5a:ff:78:2e:e0:dd:08:39:5d:e6:3e:83:56:59:f3:86:7d:
10:99:a1:66:a3:b2:7f:cf:38:78:ff:fe:b4:3c:fc:7d:96:55:
d8:17:3d:b2:03:2f:05:13:c0:3a:62:b0:5d:c8:83:47:9a:62:
28:5d:7a:ef:d5:aa:ee:56:e3:54:c6:49:d2:2a:f9:12:d0:01:
fd:8a:bc:0b:b6:dd:c5:60:ac:f1:dc:47:bd:1f:69:7e:6b:81:
7f:c6:9b:ed:d6:6c:4f:0b:4f:de:03:ba:2a:0e:a0:77:45:00:
56:b1:61:ff:d4:2f:ef:8c:ee:3a:02:f4:72:37:25:92:d8:ce:
7f:22:b9:e6:b7:68:c9:67:5d:8b:e2:7a:6f:8e:46:f1:c0:90:
32:9a:45:d9:5b:82:73:c1:45:33:5e:33:e4:0f:db:10:5e:b6:
b0:cf:d8:34:b5:5a:88:04:04:c5:89:4d:d3:a5:6c:24:3f:cc:
b5:0a:08:f1:93:89:99:80:f7:47:08:be:69:a1:10:28:2e:93:
2f:fc:b8:d6:b0:5c:a5:a5:38:ef:1b:64:45:34:36:2a:45:76:
8f:c7:e6:66:a5:88:17:4b:00:77:7b:2f:6f:6d:20:17:c7:1c:
c1:75:d5:2e:17:c1:19:36:a5:17:9d:0c:62:ab:45:91:bc:0a:
12:e2:5b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:13 2024 by rpki-client on console-fra.rpki-client.org