Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18779.roa
File: AS18779.roa (raw, json)
Hash identifier: 9Him3cQvhWPqdakkoOpXEuxNSfP0b/XhvsTwkFUEZzY=
Subject key identifier: AC:9D:9A:92:E2:1F:4E:03:2F:98:D6:7D:36:3A:7B:76:58:59:6A:92
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 399F332F2A7F1E00C0FD86F5FBF07D487564AE17
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18779.roa
Signing time: Fri 08 Dec 2023 15:32:50 +0000
ROA not before: Fri 08 Dec 2023 15:27:50 +0000
ROA not after: Fri 06 Dec 2024 15:32:50 +0000
asID: 18779
IP address blocks: 45.95.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:9f:33:2f:2a:7f:1e:00:c0:fd:86:f5:fb:f0:7d:48:75:64:ae:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Dec 8 15:27:50 2023 GMT
Not After : Dec 6 15:32:50 2024 GMT
Subject: CN=AC9D9A92E21F4E032F98D67D363A7B7658596A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:20:da:36:41:96:6b:15:52:c8:e2:b4:0a:
1e:6e:16:3b:83:c0:85:96:d0:fc:86:1d:5c:4d:90:
ad:be:eb:a1:3f:32:84:0b:59:87:ac:94:32:a6:48:
9c:ea:f2:f3:bc:fa:f1:c6:29:94:7c:50:6a:9a:85:
bb:f9:ca:72:e5:67:9a:4e:78:c1:9d:7f:cf:8c:f1:
39:b1:a3:e4:48:75:65:5b:9a:6d:70:b3:4d:de:e7:
23:f9:48:21:c3:6c:45:db:a5:8d:fa:c9:88:f0:9f:
e8:e5:f8:db:73:c4:c5:a5:24:2f:6e:8d:29:a1:10:
3c:7d:bc:56:50:46:7d:39:30:b8:2e:1e:ab:99:df:
ea:40:75:51:1a:c8:f8:3f:c9:2b:fc:43:dc:51:49:
dc:62:de:80:a9:f9:e8:58:c1:77:c4:84:de:6d:d0:
82:54:9d:79:f6:b1:b9:25:36:0b:80:f5:b4:68:a1:
b4:f3:e1:25:e8:e2:1b:be:24:2a:b6:eb:93:8b:79:
c3:7c:c1:ff:84:fa:fd:fd:2c:c3:83:2f:d0:c9:fd:
46:ed:45:af:f0:46:fd:fa:aa:e8:a2:7c:56:a1:2f:
72:a1:e5:a3:9c:42:e5:d5:ec:64:64:25:67:eb:14:
75:a6:c5:dd:5d:4f:c5:d2:1e:8f:b1:f3:25:07:47:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9D:9A:92:E2:1F:4E:03:2F:98:D6:7D:36:3A:7B:76:58:59:6A:92
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18779.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.12.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:6e:78:05:7a:6f:95:bd:44:08:70:4c:89:7c:65:f5:67:0f:
1b:d8:f5:08:c4:7d:4f:14:7b:e3:c8:9a:34:7f:e8:3f:e6:dd:
5c:d7:78:f8:ef:99:a8:12:ee:3e:6b:cd:67:d2:75:74:87:53:
32:fe:0d:bd:7d:ae:fa:cb:f1:df:28:7a:2e:6b:48:b1:ac:52:
9a:e9:6c:85:76:64:69:87:e2:6c:d4:44:5f:e0:a5:f6:8d:bd:
55:4f:2e:13:04:67:ce:d6:17:9c:e3:75:77:5f:d5:d7:df:6b:
95:34:79:ad:a6:41:c0:0e:74:59:14:f4:ce:61:00:e0:c1:1b:
f8:74:c4:45:14:8b:9d:eb:01:b5:cf:90:4e:d7:c4:e1:39:50:
6c:dd:7e:18:8e:0e:1e:a9:aa:4d:5c:cd:fd:fb:4d:fa:5d:45:
8b:89:0c:cc:c8:81:d8:d0:cd:eb:a5:07:7c:5b:66:f3:12:57:
44:93:06:db:92:d9:4c:8c:4f:a6:4d:fd:b7:3b:dc:cd:2d:ff:
af:e5:02:4d:b2:3a:97:43:d0:31:8e:a6:3c:d3:d0:2b:33:ce:
1a:02:e2:cf:a0:86:50:52:12:42:a4:83:9c:24:4d:bf:e9:e5:
a3:9d:97:97:9d:26:85:1e:d0:90:04:34:8c:46:5d:fc:d5:e9:
e3:a4:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:02 2024 by rpki-client on console-ams.rpki-client.org