Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS147186.roa
File: AS147186.roa (raw, json)
Hash identifier: +mhguBUtPB1C62nGmAChWhsxMIV7fHghtvWAwHhF+Es=
Subject key identifier: D1:EC:0A:0D:57:B4:94:B1:C4:03:E6:AE:B2:ED:ED:F9:1A:AB:44:02
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 07765B2CA5926C02B1DCEA86AC040849B0DA2C0D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS147186.roa
Signing time: Fri 18 Aug 2023 00:00:10 +0000
ROA not before: Thu 17 Aug 2023 23:55:10 +0000
ROA not after: Fri 16 Aug 2024 00:00:10 +0000
asID: 147186
IP address blocks: 191.96.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Aug 2023 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:76:5b:2c:a5:92:6c:02:b1:dc:ea:86:ac:04:08:49:b0:da:2c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 17 23:55:10 2023 GMT
Not After : Aug 16 00:00:10 2024 GMT
Subject: CN=D1EC0A0D57B494B1C403E6AEB2EDEDF91AAB4402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a9:70:01:86:a2:17:ff:19:93:e9:78:3b:3b:
43:ac:ad:d0:64:ad:20:92:81:3f:e8:d3:1b:8e:e3:
00:21:16:07:bf:5d:4b:e7:e3:2f:0c:4f:75:9a:a4:
c4:8a:f7:d2:52:84:a4:6f:95:a0:47:aa:db:6a:7a:
a3:5e:e8:86:03:be:a9:71:cd:bd:dd:a0:3b:ab:36:
aa:2a:7c:4e:ce:5b:e3:43:76:33:df:4a:d8:5f:7a:
93:1c:04:2a:76:c1:24:ea:a2:4b:1c:00:2c:4e:48:
f3:f4:20:2b:6c:9b:71:a9:9a:a5:6f:61:55:cd:02:
0b:4c:05:90:74:8f:ba:de:12:e6:7b:d7:11:a2:be:
d9:8c:d2:d9:48:17:cb:ea:47:6b:e6:2b:f0:c0:60:
e6:47:e7:bd:f9:a1:09:1e:56:cc:d6:5b:83:94:24:
f5:00:2a:32:86:7a:c4:71:24:66:0c:50:97:8a:dd:
1b:ec:8c:99:92:91:2e:bd:c4:81:5e:e9:29:a4:0b:
18:22:55:5b:28:f8:4e:fe:05:bc:d7:5b:a9:bb:94:
9a:f8:7f:b6:85:85:79:ec:88:8c:aa:ef:c6:52:37:
de:3b:d8:39:d7:89:99:e7:34:bd:bb:0b:e2:c9:06:
31:92:eb:c2:1a:c3:ac:18:bc:a3:f3:1c:54:a2:55:
e9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EC:0A:0D:57:B4:94:B1:C4:03:E6:AE:B2:ED:ED:F9:1A:AB:44:02
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS147186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.253.0/24
Signature Algorithm: sha256WithRSAEncryption
55:78:4d:1f:51:08:87:c4:a6:60:0f:50:8b:49:02:12:f9:20:
cb:83:0b:0f:6e:bb:8f:da:7d:f4:25:02:41:a5:6a:8d:1f:45:
22:ac:10:d6:57:e2:77:f4:d5:04:8e:44:b4:99:cf:98:77:ca:
c5:c6:c0:c5:d8:45:64:f2:99:47:61:76:a6:fd:3a:e7:31:8d:
32:44:d0:5c:35:47:09:3a:62:cc:05:d6:91:bb:d3:ec:3f:b2:
29:b2:0e:61:c5:4b:a8:7f:8e:95:6d:3b:b3:f7:47:16:25:44:
f3:e9:0f:d3:85:02:fc:3a:23:6b:98:d0:ca:75:15:b1:e2:5a:
33:33:b5:52:ea:b3:68:5e:5c:49:bc:88:24:f2:7a:02:b7:aa:
35:89:d4:91:9a:a7:7a:06:b4:11:d9:40:30:a6:64:66:d5:5d:
55:57:ac:b6:89:06:53:6e:6f:d4:bc:16:b5:7c:6d:ff:93:39:
41:9e:b0:9f:41:13:4f:b6:10:94:22:39:56:16:a3:0f:a9:e8:
cd:c7:34:ea:b1:88:f7:0b:07:12:f7:19:0d:9d:1b:51:fc:36:
a8:63:8b:d7:f0:4a:a1:0f:69:2e:97:92:d9:e5:74:f4:d0:74:
0c:c3:da:0e:2f:20:14:64:1f:0f:50:f6:14:c8:cd:9a:21:6f:
85:d8:e7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:02 2024 by rpki-client on console-ams.rpki-client.org