Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198786.roa
File: AS198786.roa (raw, json)
Hash identifier: UiGds3ggrhainbudBWqkvK8g+6Cm/tndCtouKqoXEKo=
Subject key identifier: 23:B0:0F:8A:6A:44:CE:F4:1F:5B:14:53:68:BD:1A:F5:5D:2C:29:E0
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 240BABCAFD714F05F8CFB74E7A603DA90390A13E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198786.roa
Signing time: Fri 02 Feb 2024 01:46:50 +0000
ROA not before: Fri 02 Feb 2024 01:41:50 +0000
ROA not after: Fri 31 Jan 2025 01:46:50 +0000
asID: 198786
IP address blocks: 179.61.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 10:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0b:ab:ca:fd:71:4f:05:f8:cf:b7:4e:7a:60:3d:a9:03:90:a1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 2 01:41:50 2024 GMT
Not After : Jan 31 01:46:50 2025 GMT
Subject: CN=23B00F8A6A44CEF41F5B145368BD1AF55D2C29E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:c1:09:d1:f5:c7:ed:24:14:ba:cb:15:0c:
b4:5a:80:49:b8:d1:5d:67:8d:2b:d5:13:28:e6:95:
37:7e:fa:a4:69:a2:f9:bd:bb:2a:7d:26:b1:9b:27:
b8:d5:32:88:99:44:44:92:26:46:79:d6:c4:35:45:
86:eb:51:5a:f1:ca:47:b2:16:62:9e:6d:5d:77:e1:
e3:36:b4:b0:94:77:ee:39:24:89:c8:8a:ff:24:b5:
e0:71:d1:6d:57:08:2a:04:31:23:a4:73:84:32:1d:
56:ac:9c:00:18:ed:02:63:f3:9d:48:a5:13:5f:0f:
1f:f2:30:49:fa:5a:0e:72:58:b6:33:68:4b:83:75:
31:fd:8a:30:ac:c4:69:23:b5:77:29:df:25:f6:a5:
0d:8e:74:28:bb:44:e8:5a:75:70:cc:34:b3:23:62:
36:c8:10:1f:26:37:a0:8c:6e:12:c5:ad:48:16:54:
e4:0c:f7:fe:49:a8:77:db:f7:1f:6e:14:5a:c8:c3:
ff:6d:78:7d:d5:1a:08:c4:cb:0d:57:82:85:ed:92:
58:fa:77:78:a1:b0:f2:0e:06:5f:05:71:2a:3a:87:
9f:e7:40:02:17:91:00:39:6a:72:8d:bf:11:b9:3c:
c6:57:3b:d9:a0:e8:da:8d:a8:8b:90:88:1e:90:48:
01:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B0:0F:8A:6A:44:CE:F4:1F:5B:14:53:68:BD:1A:F5:5D:2C:29:E0
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198786.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0b:17:1f:54:36:8e:71:03:ce:0a:a1:9d:d1:29:9c:11:bc:
29:40:c6:fd:1a:a7:dd:1b:3b:5f:04:ac:82:98:91:c2:85:7a:
bc:bf:93:6f:05:96:a4:6e:ab:1e:94:a1:ca:36:ff:cc:cb:db:
e6:9a:0d:f7:b1:4b:97:ff:14:17:db:07:c4:5b:e7:76:61:fe:
ce:2e:9d:2f:46:15:7b:ab:af:db:c1:1e:4e:1e:c5:b8:32:e6:
25:ff:68:64:f2:75:e7:52:52:23:73:72:a0:81:5d:5d:86:3c:
3e:69:62:0e:20:4c:3d:1e:51:aa:b9:bf:9a:72:52:54:01:3a:
62:ee:4f:e7:eb:91:d6:b7:d8:4f:f1:22:11:bf:7d:f6:bf:f3:
14:85:e3:5e:1d:d2:a4:65:3b:8e:60:18:ac:0d:c8:42:a2:f6:
c5:8a:d5:17:06:72:24:19:3a:1e:c4:ba:76:af:f4:75:2f:4e:
34:ff:e9:52:0f:d0:01:60:f3:7e:43:7c:70:c8:5c:77:0a:c2:
01:e8:8d:12:df:06:c0:4f:bd:8a:f8:9f:dd:4a:68:77:b4:b9:
e4:07:f9:a2:f0:b7:50:83:e1:34:d0:5e:05:ed:1c:1e:74:15:
57:28:2e:6a:3f:96:63:7a:06:21:03:3f:4f:f3:9e:0f:07:8c:
77:83:cd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:14 2024 by rpki-client on console-fra.rpki-client.org