Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202044.roa
File: AS202044.roa (raw, json)
Hash identifier: tBfW9flSUiSumRq2bDoduc6pQYfwG2BgHQU5xuXMMQA=
Subject key identifier: 24:A9:55:28:E6:30:BC:E9:A7:DD:2D:83:16:36:60:7B:6F:17:A8:53
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 457DCD436EAC04A3D60296D5F00374F07DBC9297
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202044.roa
Signing time: Mon 21 Aug 2023 10:52:59 +0000
ROA not before: Mon 21 Aug 2023 10:47:59 +0000
ROA not after: Mon 19 Aug 2024 10:52:59 +0000
asID: 202044
IP address blocks: 2a0a:8e00::/29 maxlen: 48
2a0a:9f00::/29 maxlen: 48
2a0a:b200::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 16 Oct 2023 08:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:7d:cd:43:6e:ac:04:a3:d6:02:96:d5:f0:03:74:f0:7d:bc:92:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 21 10:47:59 2023 GMT
Not After : Aug 19 10:52:59 2024 GMT
Subject: CN=24A95528E630BCE9A7DD2D831636607B6F17A853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c3:e5:82:ee:f4:bb:f0:58:7d:01:40:34:7a:
c7:a1:d2:87:6a:00:b9:c2:53:87:fb:51:78:28:22:
e5:a1:23:a6:6d:a3:63:ae:81:c7:df:4b:fc:c5:5c:
8c:de:b4:43:99:52:7a:8e:dd:d2:61:39:a0:52:8e:
89:b1:2b:e3:2a:26:4d:21:d4:75:a4:6a:fa:25:52:
49:7c:07:0e:21:a7:2d:a7:59:2d:76:10:99:13:69:
5b:b7:57:38:d9:ab:c8:29:51:53:48:1e:d4:61:ac:
26:49:5d:5f:1f:ef:66:0d:1c:95:04:98:22:83:21:
f9:76:30:5a:8a:2e:6a:7c:54:f6:bf:06:89:00:0f:
69:e1:15:dc:e8:8b:f7:a7:75:12:34:40:f5:9b:39:
2d:05:a4:df:6b:b2:6f:c8:e7:ec:a7:7c:61:83:46:
9d:2e:2f:c2:62:c0:2f:69:de:6e:b2:a3:b7:25:78:
22:bc:78:59:d4:7d:c6:5f:3e:0c:57:96:98:ea:cc:
41:7e:62:28:a8:e4:72:fd:7e:77:65:b8:9a:2e:de:
09:80:99:cd:96:98:ba:1a:91:66:34:9e:30:10:64:
ee:7e:fc:f7:b6:25:9b:1b:2a:2f:2a:cb:64:46:bf:
42:15:af:c3:55:ae:16:9c:29:eb:79:bc:ab:a3:97:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A9:55:28:E6:30:BC:E9:A7:DD:2D:83:16:36:60:7B:6F:17:A8:53
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202044.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:8e00::/29
2a0a:9f00::/29
2a0a:b200::/29
Signature Algorithm: sha256WithRSAEncryption
67:ac:c2:58:28:52:2f:55:aa:18:af:2f:7e:e3:9e:0c:65:af:
01:8e:63:ef:49:a4:67:36:71:af:29:ec:2e:ae:35:ec:bc:d2:
fe:f0:a2:fb:24:c3:5d:23:63:f8:3b:6b:60:58:f2:e4:18:bc:
7c:5e:d8:79:2e:92:21:03:dd:d0:28:ba:4d:55:a0:86:a1:29:
e3:b9:26:af:bc:cd:ab:a1:f3:19:bb:c0:75:13:fe:59:76:2e:
58:eb:3b:e3:b0:e6:72:48:cb:59:06:cd:31:95:a0:b7:da:59:
93:50:c7:82:b6:74:e1:bd:32:55:01:12:03:cd:ea:22:31:1e:
14:25:61:9f:a2:f5:de:9b:8e:41:b5:46:b1:59:79:d0:e9:23:
9a:80:3f:17:70:1a:5c:01:2b:d9:c3:ad:a0:9e:9a:d6:50:1e:
3c:17:0d:27:98:1c:99:cc:65:95:ac:70:9c:e7:af:38:85:19:
dc:27:15:73:3e:66:7b:8c:45:85:69:9d:be:d2:d7:12:cb:4d:
0a:21:22:db:27:3b:80:6a:b6:2c:09:62:70:08:5b:ab:f9:69:
be:3a:4c:3e:9d:f3:94:31:9a:af:e0:e2:5c:d7:1f:f8:83:1c:
cf:ad:88:5c:9c:df:37:33:df:5a:f7:23:ce:1c:4c:77:c9:63:
a1:3e:63:10
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIURX3NQ26sBKPWApbV8AN08H28kpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzA4MjExMDQ3NTlaFw0yNDA4MTkxMDUyNTlaMDMxMTAvBgNV
BAMTKDI0QTk1NTI4RTYzMEJDRTlBN0REMkQ4MzE2MzY2MDdCNkYxN0E4NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTw+WC7vS78Fh9AUA0eseh0odq
ALnCU4f7UXgoIuWhI6Zto2OugcffS/zFXIzetEOZUnqO3dJhOaBSjomxK+MqJk0h
1HWkavolUkl8Bw4hpy2nWS12EJkTaVu3VzjZq8gpUVNIHtRhrCZJXV8f72YNHJUE
mCKDIfl2MFqKLmp8VPa/BokAD2nhFdzoi/endRI0QPWbOS0FpN9rsm/I5+ynfGGD
Rp0uL8JiwC9p3m6yo7cleCK8eFnUfcZfPgxXlpjqzEF+Yiio5HL9fndluJou3gmA
mc2WmLoakWY0njAQZO5+/Pe2JZsbKi8qy2RGv0IVr8NVrhacKet5vKujl+1XAgMB
AAGjggIZMIICFTAdBgNVHQ4EFgQUJKlVKOYwvOmn3S2DFjZge28XqFMwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjAyMDQ0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKgqO
AAMFAyoKnwADBQMqCrIAMA0GCSqGSIb3DQEBCwUAA4IBAQBnrMJYKFIvVaoYry9+
454MZa8BjmPvSaRnNnGvKewurjXsvNL+8KL7JMNdI2P4O2tgWPLkGLx8Xth5LpIh
A93QKLpNVaCGoSnjuSavvM2rofMZu8B1E/5Zdi5Y6zvjsOZySMtZBs0xlaC32lmT
UMeCtnThvTJVARIDzeoiMR4UJWGfovXem45BtUaxWXnQ6SOagD8XcBpcASvZw62g
nprWUB48Fw0nmByZzGWVrHCc5684hRncJxVzPmZ7jEWFaZ2+0tcSy00KISLbJzuA
arYsCWJwCFur+Wm+Okw+nfOUMZqv4OJc1x/4gxzPrYhcnN83M99a9yPOHEx3yWOh
PmMQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:14 2024 by rpki-client on console-fra.rpki-client.org