Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS147293.roa
File: AS147293.roa (raw, json)
Hash identifier: JOTEWKIMFGTTc1/jnzjxhjwUWcNJ+DpiYnX27H9hUpc=
Subject key identifier: 33:01:B3:F3:A1:19:86:7E:6A:2E:E9:B5:F7:D8:A2:41:74:15:3A:EF
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 771B9304E6AECA59901FB9DB0634EDA596EDEBEA
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS147293.roa
Signing time: Wed 31 Jan 2024 08:05:11 +0000
ROA not before: Wed 31 Jan 2024 08:00:11 +0000
ROA not after: Wed 29 Jan 2025 08:05:11 +0000
asID: 147293
IP address blocks: 179.61.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:1b:93:04:e6:ae:ca:59:90:1f:b9:db:06:34:ed:a5:96:ed:eb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 31 08:00:11 2024 GMT
Not After : Jan 29 08:05:11 2025 GMT
Subject: CN=3301B3F3A119867E6A2EE9B5F7D8A24174153AEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:66:93:ff:37:fc:95:f4:95:4a:da:1f:92:
4f:92:7e:b4:89:c0:a9:e9:f3:c4:20:93:ca:0b:10:
49:06:8b:56:d0:70:2e:2d:88:3c:20:0f:31:8e:0d:
6f:01:7e:05:d2:78:ff:83:95:4a:22:d8:c3:72:06:
aa:a7:2e:a3:75:9b:6b:bb:d6:ce:a3:0a:d1:01:8c:
77:ca:c4:4d:bb:92:a8:0d:72:5b:b4:90:b8:de:cc:
6d:25:b8:52:ad:28:6d:0c:fb:1d:79:6a:c7:31:75:
28:87:d6:4a:50:bf:05:10:ee:80:c6:e7:33:5b:bb:
ce:af:88:b5:7e:f2:a4:35:9f:da:36:bd:a0:67:f5:
ac:a8:47:d1:20:1f:f6:6c:7b:76:33:e7:45:65:0f:
9a:ed:52:37:5d:fd:9d:2f:a0:ee:3d:25:b7:41:2c:
55:f1:08:f1:22:bc:1e:03:49:65:7e:c5:82:62:79:
18:2e:bd:48:9c:d7:fd:a8:d3:b2:74:e7:e4:da:af:
a7:c4:88:a0:6d:61:2e:99:bc:f9:b1:c4:12:5c:20:
1e:72:86:76:00:c7:3e:af:df:f3:6f:f7:9c:4f:6e:
b2:a2:45:8f:80:4f:6f:0b:d1:06:77:d7:48:1e:49:
70:3a:63:15:d6:b0:0e:13:96:3e:93:bb:bc:78:13:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:01:B3:F3:A1:19:86:7E:6A:2E:E9:B5:F7:D8:A2:41:74:15:3A:EF
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS147293.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.184.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:0b:ba:44:de:35:dc:06:d2:a5:3e:f7:b4:46:34:21:7b:e9:
d6:b4:3d:f9:f6:dd:16:5d:df:e1:6b:71:29:08:ae:96:1b:6d:
84:90:c7:e8:d9:92:0d:fd:d2:4e:4e:f2:67:6b:78:f7:f2:a7:
3d:dc:3b:1f:48:09:fe:cc:a5:db:85:9a:3b:fd:c2:fd:30:ba:
91:5b:db:a8:6c:62:6c:47:96:c8:22:53:e3:15:e4:b5:9e:1a:
a7:a5:d8:89:3a:07:48:82:7d:3c:9c:59:8e:f6:ed:0b:bd:9f:
4a:78:bb:0d:11:b4:45:f2:51:53:8d:31:a3:39:a9:73:ee:21:
bc:d1:22:b2:26:f9:8e:4d:a0:48:50:8b:bd:4b:ef:c4:93:5b:
05:c8:12:55:44:f0:a1:84:d0:10:8a:4b:b9:e7:d2:ba:fb:5d:
b1:d5:f8:56:a8:e2:c4:b7:cc:14:a5:8a:66:e8:e2:37:99:db:
92:64:28:15:d2:1e:f4:07:a7:63:82:23:df:33:c9:38:2c:bf:
36:a1:f8:db:e9:9b:74:85:68:dd:1a:c7:59:4f:fb:17:24:e4:
f0:81:2a:ad:2c:78:05:aa:e7:09:8d:e8:01:37:dc:d7:f9:ff:
cf:d9:05:10:b8:ac:3a:b6:15:a9:6b:87:56:ec:80:d8:9e:5b:
42:ec:1c:d2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUdxuTBOauylmQH7nbBjTtpZbt6+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDAxMzEwODAwMTFaFw0yNTAxMjkwODA1MTFaMDMxMTAvBgNV
BAMTKDMzMDFCM0YzQTExOTg2N0U2QTJFRTlCNUY3RDhBMjQxNzQxNTNBRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNG2aT/zf8lfSVStofkk+SfrSJ
wKnp88Qgk8oLEEkGi1bQcC4tiDwgDzGODW8BfgXSeP+DlUoi2MNyBqqnLqN1m2u7
1s6jCtEBjHfKxE27kqgNclu0kLjezG0luFKtKG0M+x15ascxdSiH1kpQvwUQ7oDG
5zNbu86viLV+8qQ1n9o2vaBn9ayoR9EgH/Zse3Yz50VlD5rtUjdd/Z0voO49JbdB
LFXxCPEivB4DSWV+xYJieRguvUic1/2o07J05+Tar6fEiKBtYS6ZvPmxxBJcIB5y
hnYAxz6v3/Nv95xPbrKiRY+AT28L0QZ310geSXA6YxXWsA4Tlj6Tu7x4E7UpAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUMwGz86EZhn5qLum199iiQXQVOu8wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTQ3MjkzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsz24
MA0GCSqGSIb3DQEBCwUAA4IBAQCqC7pE3jXcBtKlPve0RjQhe+nWtD359t0WXd/h
a3EpCK6WG22EkMfo2ZIN/dJOTvJna3j38qc93DsfSAn+zKXbhZo7/cL9MLqRW9uo
bGJsR5bIIlPjFeS1nhqnpdiJOgdIgn08nFmO9u0LvZ9KeLsNEbRF8lFTjTGjOalz
7iG80SKyJvmOTaBIUIu9S+/Ek1sFyBJVRPChhNAQiku559K6+12x1fhWqOLEt8wU
pYpm6OI3mduSZCgV0h70B6djgiPfM8k4LL82ofjb6Zt0hWjdGsdZT/sXJOTwgSqt
LHgFqucJjegBN9zX+f/P2QUQuKw6thWpa4dW7IDYnltC7BzS
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:13 2024 by rpki-client on console-fra.rpki-client.org