Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS146943.roa
File: AS146943.roa (raw, json)
Hash identifier: o/ksDJIHRHotbaPnlJMynp0WN2QqP2nCVLhuVK0pvaY=
Subject key identifier: FD:05:A9:15:28:AC:99:8D:92:C9:29:1E:FD:54:B7:56:23:C5:A6:9F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4522BFF2E1A783A1B288337A7821B13604EC6C84
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS146943.roa
Signing time: Thu 15 Jun 2023 09:44:09 +0000
ROA not before: Thu 15 Jun 2023 09:39:09 +0000
ROA not after: Thu 13 Jun 2024 09:44:09 +0000
asID: 146943
IP address blocks: 181.215.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Aug 2023 13:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:22:bf:f2:e1:a7:83:a1:b2:88:33:7a:78:21:b1:36:04:ec:6c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 15 09:39:09 2023 GMT
Not After : Jun 13 09:44:09 2024 GMT
Subject: CN=FD05A91528AC998D92C9291EFD54B75623C5A69F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:67:55:44:22:ae:d4:e6:e2:a3:e9:2d:fe:22:
89:3c:5b:67:f1:05:86:67:ab:24:da:33:5b:a7:19:
15:bc:01:61:55:39:3b:d6:36:e1:f6:47:ad:c3:14:
cf:71:3b:45:16:7a:8a:51:2f:9f:b0:c3:a0:0c:8e:
31:09:d0:69:a7:67:26:52:cd:e5:98:cb:3c:69:1f:
07:8b:87:42:90:42:ca:57:49:be:e5:6e:1d:70:14:
57:bf:08:fc:ca:63:ba:fd:bf:30:b4:43:ce:f8:63:
70:27:6c:8f:4a:05:00:4e:3f:a3:ac:8a:8c:c1:cc:
12:d8:f6:94:c5:ac:9f:3b:80:a4:d2:50:7a:ca:7a:
d7:2b:0e:1d:09:5d:9c:0c:ad:c7:80:44:de:d5:c0:
db:f6:6b:39:7e:e7:0a:26:a7:5c:4a:7d:9c:21:1d:
84:39:06:e6:69:1f:4a:94:d0:c0:77:43:d9:a7:83:
6f:62:fd:2d:1a:90:8a:b4:3a:a8:f9:ef:16:63:f9:
9b:bd:4f:4a:56:35:ee:9c:eb:12:d1:66:2f:d1:c2:
40:a8:9f:71:86:81:e2:68:b3:f7:06:0b:67:7d:59:
fb:58:52:30:c9:28:64:bd:2b:b8:45:ee:49:e0:d1:
bc:9d:5a:b0:f9:09:d9:05:61:a1:19:7b:f5:24:59:
4d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:05:A9:15:28:AC:99:8D:92:C9:29:1E:FD:54:B7:56:23:C5:A6:9F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS146943.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.93.0/24
Signature Algorithm: sha256WithRSAEncryption
86:69:a6:fb:0d:ae:40:73:f4:3f:82:7b:a9:8a:9f:94:40:be:
fd:66:65:1e:10:51:0b:5d:c3:0d:70:80:ef:e8:0b:fc:02:66:
fd:99:12:cc:b0:15:04:3f:b8:4b:65:ce:de:d8:e8:9e:ad:95:
da:71:58:e6:a0:8c:20:06:c7:24:11:1d:9b:fb:7f:b2:98:14:
81:21:6b:32:70:1c:15:ef:cf:7b:7d:c3:6e:46:f4:58:78:95:
dd:df:40:71:31:f9:b7:eb:89:0b:d9:a7:41:dd:01:80:6d:f9:
c1:87:06:9e:85:33:e9:f7:70:66:40:f6:b6:4f:64:07:26:0e:
d8:4d:c9:61:18:ed:18:28:5e:02:92:27:3e:20:b0:e6:05:74:
f0:b1:bc:36:8b:b3:9b:cd:18:23:b7:dc:00:fb:20:5c:8c:65:
97:9d:d6:f9:7d:f1:82:62:93:a6:4e:f3:f3:94:2d:96:72:2c:
ec:b9:18:f4:95:ed:64:d7:cd:18:64:db:71:ad:34:cf:db:60:
cf:61:e2:65:05:f7:f0:0f:b6:86:c7:b3:9a:46:24:ba:28:d4:
c8:fd:60:12:a4:b1:37:a8:d5:fd:b3:8b:58:20:e1:74:92:72:
5c:72:b2:4a:6e:e1:c9:59:8e:fe:d1:ea:e8:d7:44:cd:3c:9e:
82:03:6d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:13 2024 by rpki-client on console-fra.rpki-client.org