Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200651.roa
File: AS200651.roa (raw, json)
Hash identifier: Tx4XI8BBMC6hXgx+kcS6VFp2aQxVTcr2lUxoflu7Gbs=
Subject key identifier: 6B:EA:16:25:BA:FB:DE:1D:FA:BD:79:89:B2:A2:BF:78:FB:07:48:B4
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 79C514B4B30800073AC7466E134A235A6DF402E9
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200651.roa
Signing time: Wed 31 Jan 2024 08:05:11 +0000
ROA not before: Wed 31 Jan 2024 08:00:11 +0000
ROA not after: Wed 29 Jan 2025 08:05:11 +0000
asID: 200651
IP address blocks: 45.95.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c5:14:b4:b3:08:00:07:3a:c7:46:6e:13:4a:23:5a:6d:f4:02:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 31 08:00:11 2024 GMT
Not After : Jan 29 08:05:11 2025 GMT
Subject: CN=6BEA1625BAFBDE1DFABD7989B2A2BF78FB0748B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:31:9b:c3:eb:3f:bd:c7:9e:65:f0:d2:88:92:
7f:44:9d:84:e5:d7:82:97:9b:a5:29:72:3c:e7:3f:
20:8a:06:8e:48:17:13:a0:b2:f9:8b:7f:e5:60:9f:
80:03:9a:3d:da:d7:42:d1:67:76:65:78:6a:06:ec:
87:ca:27:3c:81:93:c2:de:20:f5:2b:7a:5b:69:e8:
0c:df:a5:b3:82:6f:96:98:e2:c4:a8:7d:ea:ac:a4:
dc:5f:80:22:10:62:81:48:15:ba:ac:13:e9:24:8d:
81:9f:b1:58:0f:fd:5b:ee:4b:01:0f:76:97:b1:89:
b3:dd:59:b3:4c:9b:6a:3a:ae:74:7e:07:93:05:1a:
0c:6e:95:b7:aa:5b:80:ac:dc:dd:68:65:fc:88:b0:
10:bb:d6:d4:36:73:e0:46:3f:12:06:51:bd:81:6b:
9f:da:e9:24:be:fd:a2:a8:fa:d4:1d:a7:4d:8b:4e:
3b:9e:ce:b6:68:ce:24:6e:d1:3f:f5:09:82:f2:0c:
29:eb:63:51:2d:2e:1b:68:d8:01:6c:2a:88:64:2a:
36:a6:dd:ab:87:06:83:c8:45:ab:f3:3b:cf:c5:4b:
d7:5c:4f:19:77:86:03:36:41:41:a4:a4:cf:93:76:
32:97:8a:64:09:8a:4c:cf:ca:8b:49:7a:21:b5:7d:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EA:16:25:BA:FB:DE:1D:FA:BD:79:89:B2:A2:BF:78:FB:07:48:B4
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200651.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.38.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:69:5d:6c:cf:29:ba:80:21:26:34:63:62:09:95:3a:38:44:
bc:bf:49:21:76:b8:0a:a2:9e:b8:aa:fe:e2:c9:e1:ee:6a:ab:
09:16:2b:5f:57:e3:d8:6b:77:da:c5:91:7b:5c:fa:80:5a:5c:
7d:07:3c:68:3c:80:a5:21:ee:c5:08:2e:31:34:c3:52:f9:72:
2c:ad:25:d1:08:61:50:7f:c6:ee:d4:9b:88:f7:ae:53:88:e6:
9d:c1:03:54:6b:63:6a:d6:ee:1a:85:59:59:c5:ef:18:df:22:
5d:61:58:87:bf:55:a2:8c:c4:68:be:6e:ef:47:82:4a:65:31:
0c:5c:71:e1:bd:42:0b:5f:b5:d1:14:90:1c:f1:16:ee:86:09:
4e:a0:9c:65:2a:36:af:2b:7b:09:87:58:6b:bc:73:f6:83:42:
8c:af:0d:18:71:20:6a:fe:ec:45:71:9f:35:c6:ce:11:8d:4c:
1c:5f:c4:1e:f4:10:39:bc:ef:03:8a:1e:2b:fd:57:0b:d7:93:
c5:74:25:f2:87:e6:37:40:25:05:ed:69:fc:99:41:c1:50:20:
69:92:ae:e9:f4:48:87:50:9f:d5:10:ac:2a:f4:30:f6:df:d0:
76:a1:b0:0f:ef:01:18:d2:4c:6f:15:cf:ac:b7:c4:7f:71:71:
38:aa:d4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:14 2024 by rpki-client on console-fra.rpki-client.org