Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198078.roa
File: AS198078.roa (raw, json)
Hash identifier: oceo+MyUqGXdFQeDk9Ty50OKqlods4TTV9SJaCXnH7I=
Subject key identifier: 29:D4:96:3B:8C:DD:EF:28:C1:7F:15:0D:2E:F2:BD:77:1F:20:7D:9D
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3150B1E674632693BD584DB069C4770F88B601FE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198078.roa
Signing time: Sun 19 May 2024 20:45:45 +0000
ROA not before: Sun 19 May 2024 20:40:45 +0000
ROA not after: Sun 18 May 2025 20:45:45 +0000
asID: 198078
IP address blocks: 181.215.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Jun 2024 10:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:50:b1:e6:74:63:26:93:bd:58:4d:b0:69:c4:77:0f:88:b6:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 19 20:40:45 2024 GMT
Not After : May 18 20:45:45 2025 GMT
Subject: CN=29D4963B8CDDEF28C17F150D2EF2BD771F207D9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:9b:c0:2d:b9:89:6f:68:bc:a0:0b:83:a5:
01:df:eb:01:08:e8:18:1f:2e:af:4c:db:c4:1b:45:
fa:26:30:ac:af:b9:7d:1c:77:d2:40:83:94:9e:bb:
66:04:6d:e2:f4:2a:9d:e4:47:d7:0a:bc:e2:83:60:
53:91:61:12:99:a4:e9:ca:31:19:91:a6:48:b9:74:
dd:b1:46:35:5d:ec:34:f9:ed:98:db:46:b4:97:38:
4d:f6:cc:57:4b:88:f3:a2:5c:63:cd:18:a4:2a:d2:
54:32:02:c1:7c:5f:10:30:68:1f:34:38:8c:0a:2f:
ff:d2:12:bb:e2:7a:a6:49:33:73:5a:1a:6a:23:21:
95:14:bc:a5:35:a1:42:11:14:f1:6f:f3:8b:4d:a5:
91:a9:87:ad:75:b3:df:77:0b:c0:89:b7:90:95:85:
74:3b:ab:8b:1a:a6:96:62:d4:2d:2d:b3:3e:60:5b:
0a:76:d5:f8:ee:3e:6a:a9:58:03:04:3b:66:c1:9d:
75:54:7e:69:c4:3f:57:ea:4f:97:6c:85:36:13:86:
16:2e:a6:40:38:d8:53:80:61:aa:a4:42:b2:50:35:
38:6e:a2:2c:7c:59:d6:f6:d7:5d:2b:e5:c9:b2:7a:
09:ea:bf:1f:29:44:57:5e:bb:3b:45:47:fe:1f:9b:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D4:96:3B:8C:DD:EF:28:C1:7F:15:0D:2E:F2:BD:77:1F:20:7D:9D
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198078.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.225.0/24
Signature Algorithm: sha256WithRSAEncryption
24:3c:bb:9a:6d:53:35:c1:c7:ce:d5:6f:3b:82:50:07:0c:17:
de:ae:3c:84:6a:54:ff:29:b3:d1:07:da:b3:7c:15:11:6f:f1:
33:f7:9f:30:f9:cc:73:e4:86:f8:87:f2:24:93:e1:5c:87:d2:
13:04:72:05:d2:76:c2:ac:ad:21:1a:6a:7f:db:87:8c:a6:c7:
2c:d2:d6:05:8a:e5:0c:18:e3:85:15:25:c5:7e:fe:c5:63:2e:
e7:e6:48:89:ec:86:f3:04:56:4b:60:c1:d2:2b:84:b0:58:1c:
57:9b:03:97:87:1f:fb:e8:55:0e:59:20:59:a9:c4:d5:d5:7c:
a0:a7:a1:3a:8c:b7:0d:4f:aa:e9:f5:36:37:44:7e:72:36:ed:
b4:65:e2:ae:b1:fd:3b:95:a3:f7:98:e3:3e:c9:68:cb:9b:be:
93:fc:87:15:67:97:03:5d:43:4e:8b:36:4c:df:d8:ad:ab:70:
8c:ad:57:27:f6:50:74:89:09:a2:dc:dd:ec:83:83:df:9c:ed:
07:8e:e4:b9:a0:21:fd:94:85:1e:16:5b:36:53:ef:71:c3:71:
03:aa:ae:90:99:60:41:ea:8d:d2:bf:44:21:3b:87:e9:a8:a5:
f6:bb:ba:14:5e:08:ff:bb:6f:d1:77:2e:24:cf:72:16:f0:64:
09:58:fe:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:02 2024 by rpki-client on console-ams.rpki-client.org