Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18450.roa
File: AS18450.roa (raw, json)
Hash identifier: GD0nikLTugaV3lIa7S760YrQnry4Rd31NTyybnQnFrk=
Subject key identifier: 41:8D:A8:F4:15:5F:38:4D:35:7A:C9:83:BC:1A:F6:31:4C:D8:5A:49
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 12EE44486573A9E3C291FDCFDDAE3F5201DA5790
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18450.roa
Signing time: Wed 14 Jun 2023 22:23:06 +0000
ROA not before: Wed 14 Jun 2023 22:18:06 +0000
ROA not after: Wed 12 Jun 2024 22:23:06 +0000
asID: 18450
IP address blocks: 181.214.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Sep 2023 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ee:44:48:65:73:a9:e3:c2:91:fd:cf:dd:ae:3f:52:01:da:57:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 14 22:18:06 2023 GMT
Not After : Jun 12 22:23:06 2024 GMT
Subject: CN=418DA8F4155F384D357AC983BC1AF6314CD85A49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:e4:fa:42:15:ad:0e:2f:83:64:3c:01:88:
68:19:18:b9:96:6c:ae:d0:5c:a4:dc:87:3c:65:8d:
f3:4b:23:ce:05:c2:1a:45:76:cf:24:1c:7c:7c:00:
e9:c1:fc:7e:7d:fa:08:01:c2:16:0a:89:21:0f:7f:
ca:c9:fe:d2:9c:84:22:6c:e3:db:5a:83:ab:d3:57:
5e:42:4d:b8:f6:f4:0b:c1:fa:01:4b:1d:ba:d9:aa:
30:af:65:65:5d:89:47:fd:48:b3:d7:4f:bf:e5:5b:
c9:7b:72:e4:57:5d:d4:7f:36:92:02:43:2a:08:b3:
15:60:c8:33:c2:e7:5c:17:34:2f:2b:93:94:de:b3:
c0:e4:7d:f3:56:93:ad:d4:81:44:78:31:36:fd:3c:
ef:af:10:ac:ce:90:f0:f7:0e:96:6a:88:cb:ea:71:
09:1b:f9:90:fd:f5:d1:af:c9:6d:b1:f3:eb:27:12:
f6:f5:1a:47:46:0d:56:dd:a2:d8:32:20:40:43:37:
aa:1f:19:da:7b:47:55:8d:be:ff:0d:35:05:2b:88:
e8:b5:91:81:da:cb:6b:68:7d:1b:39:3b:a7:6e:4a:
7f:1c:e8:30:b2:53:d7:b8:c6:34:77:66:bc:9e:a8:
4b:c5:fb:ca:69:20:c0:13:d8:0a:7d:d4:14:bc:43:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8D:A8:F4:15:5F:38:4D:35:7A:C9:83:BC:1A:F6:31:4C:D8:5A:49
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18450.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.128.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:3c:34:56:24:d7:9e:cb:39:bb:c2:aa:96:4d:d1:20:61:94:
66:40:13:cb:31:c3:4d:19:7a:2e:12:18:d2:87:2c:ac:b6:02:
1b:ce:11:75:40:77:8d:50:9d:da:36:92:e2:19:e2:07:96:fa:
98:f5:22:ae:48:1e:ea:ed:e9:10:0e:3e:3e:49:0c:a5:b3:5e:
f8:54:c3:56:78:a0:0d:4e:5a:ac:c0:44:ad:06:c9:7b:24:fe:
24:81:6a:7f:b7:01:a2:92:88:60:78:14:9f:85:8c:e2:ab:a7:
60:b8:f2:2e:4a:14:63:61:59:bc:29:19:82:bc:f6:8b:53:56:
65:f1:d0:7d:24:e4:8c:1d:55:dd:3b:86:3f:16:b0:bd:ee:cc:
39:16:db:4f:a1:de:a8:c9:79:26:ce:33:e5:5f:4b:d3:e2:e2:
f2:4d:97:7d:7f:8f:a2:4d:d3:45:8e:ad:a8:4e:72:8e:b5:32:
48:b7:7b:23:eb:d8:92:2b:69:49:19:27:1b:8d:de:ab:90:46:
d4:45:e5:4c:4b:68:9c:dd:e4:c1:ff:20:12:47:22:dd:53:17:
78:21:ce:f8:89:67:23:7d:1e:c1:9e:56:cf:a0:72:8d:68:8e:
16:64:36:e9:71:7b:57:94:05:4f:b8:a4:1a:76:43:25:70:da:
de:e2:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:14 2024 by rpki-client on console-fra.rpki-client.org