Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206286.roa
File: AS206286.roa (raw, json)
Hash identifier: Qdbig8smL6MtUlCUGe+tJ6ucHz8xQY3hxjPn8sItMCU=
Subject key identifier: 47:2A:4E:B5:78:7E:06:CE:66:5F:C5:B0:CD:9E:32:11:A3:5F:22:46
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7979B0159BB5298CB21DEF364C52DE030D780AFD
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206286.roa
Signing time: Mon 02 Sep 2024 06:14:53 +0000
ROA not before: Mon 02 Sep 2024 06:09:53 +0000
ROA not after: Mon 01 Sep 2025 06:14:53 +0000
asID: 206286
IP address blocks: 191.96.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:79:b0:15:9b:b5:29:8c:b2:1d:ef:36:4c:52:de:03:0d:78:0a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 2 06:09:53 2024 GMT
Not After : Sep 1 06:14:53 2025 GMT
Subject: CN=472A4EB5787E06CE665FC5B0CD9E3211A35F2246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:cc:56:b4:9b:c3:81:ec:74:e8:37:e1:10:
3f:4a:29:98:88:1e:e3:25:87:59:5a:04:5c:b1:6b:
09:9c:97:f2:b9:ed:36:c4:82:27:16:5c:c6:cc:b9:
cd:ab:6a:68:61:0b:45:0f:ab:96:f3:b9:95:87:f5:
5a:42:1e:93:9b:bd:5e:78:d8:78:d9:3a:7a:58:c8:
b6:7a:7a:75:52:39:fd:16:fc:a9:d7:4a:7c:a3:f6:
56:6c:c7:0c:64:0a:67:a2:c0:cb:51:c6:51:e4:a7:
c5:42:91:7f:77:47:8b:f1:d2:3c:38:e5:97:36:e7:
b1:bc:11:72:65:a3:a4:b0:dc:0d:7b:26:8e:a4:ab:
84:ae:d4:77:be:66:c3:2a:6a:92:55:5f:a7:6d:d7:
39:d7:0e:94:91:c4:1e:7a:21:f0:f9:2e:ce:e4:e6:
b2:23:4b:5d:12:74:15:4a:c4:65:ce:03:e9:70:51:
41:af:b4:2e:7f:4a:96:39:52:0c:06:24:30:5c:b4:
2c:6a:d3:d3:65:b5:9a:f8:a5:a6:ee:51:55:2d:d5:
13:90:45:d9:31:80:91:62:a5:47:7a:c8:c5:55:50:
0d:26:11:ba:b2:cf:07:16:f7:c5:9e:0c:09:5d:c0:
39:1f:aa:12:de:15:04:24:75:76:b4:39:dd:f3:ab:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2A:4E:B5:78:7E:06:CE:66:5F:C5:B0:CD:9E:32:11:A3:5F:22:46
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206286.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.180.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e9:ec:59:b4:17:8e:23:ea:31:66:75:28:7c:1e:db:8d:ff:
7e:5a:22:59:4b:a3:24:2b:3b:bb:1f:29:95:1f:6a:c4:8a:43:
67:57:68:75:ea:0b:1a:de:66:bf:90:ba:bf:a5:fb:f9:be:75:
f6:2d:43:b9:9d:9f:02:2d:15:52:23:ad:45:a6:71:1f:06:b1:
80:ae:23:52:aa:f2:c8:e5:3c:ef:4a:6d:08:5b:c1:21:b3:18:
a3:87:e0:81:ba:29:5c:73:16:d7:09:8b:86:82:97:fc:4b:28:
94:af:92:a4:a0:de:d5:5c:15:5b:23:24:41:20:ef:30:72:2e:
74:66:7d:52:76:e1:78:25:e6:c2:0b:52:77:67:a9:99:a8:3c:
3b:ad:32:35:25:29:54:9b:6f:50:18:a6:8a:72:7a:e5:86:24:
4a:16:6b:6f:01:bd:7f:a9:37:b1:8e:65:b3:47:98:c2:58:a6:
02:27:5d:18:27:0f:42:bb:2b:b8:22:68:db:e5:1d:32:72:ca:
da:53:ca:a6:3a:65:a1:c2:bc:e9:fc:6a:3c:4b:e4:bf:d8:8a:
1d:db:38:f0:b4:14:68:e0:f7:c7:c3:2f:b6:0d:62:6f:f1:a1:
6a:2b:8f:eb:89:1b:98:e1:5e:e5:1b:bd:81:fe:31:0d:c6:d2:
1f:83:63:d2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUeXmwFZu1KYyyHe82TFLeAw14Cv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA5MDIwNjA5NTNaFw0yNTA5MDEwNjE0NTNaMDMxMTAvBgNV
BAMTKDQ3MkE0RUI1Nzg3RTA2Q0U2NjVGQzVCMENEOUUzMjExQTM1RjIyNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNX8xWtJvDgex06DfhED9KKZiI
HuMlh1laBFyxawmcl/K57TbEgicWXMbMuc2ramhhC0UPq5bzuZWH9VpCHpObvV54
2HjZOnpYyLZ6enVSOf0W/KnXSnyj9lZsxwxkCmeiwMtRxlHkp8VCkX93R4vx0jw4
5Zc257G8EXJlo6Sw3A17Jo6kq4Su1He+ZsMqapJVX6dt1znXDpSRxB56IfD5Ls7k
5rIjS10SdBVKxGXOA+lwUUGvtC5/SpY5UgwGJDBctCxq09NltZr4pabuUVUt1ROQ
RdkxgJFipUd6yMVVUA0mEbqyzwcW98WeDAldwDkfqhLeFQQkdXa0Od3zq5PBAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQURypOtXh+Bs5mX8WwzZ4yEaNfIkYwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjA2Mjg2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2C0
MA0GCSqGSIb3DQEBCwUAA4IBAQBG6exZtBeOI+oxZnUofB7bjf9+WiJZS6MkKzu7
HymVH2rEikNnV2h16gsa3ma/kLq/pfv5vnX2LUO5nZ8CLRVSI61FpnEfBrGAriNS
qvLI5TzvSm0IW8Ehsxijh+CBuilccxbXCYuGgpf8SyiUr5KkoN7VXBVbIyRBIO8w
ci50Zn1SduF4JebCC1J3Z6mZqDw7rTI1JSlUm29QGKaKcnrlhiRKFmtvAb1/qTex
jmWzR5jCWKYCJ10YJw9Cuyu4Imjb5R0ycsraU8qmOmWhwrzp/Go8S+S/2Iod2zjw
tBRo4PfHwy+2DWJv8aFqK4/riRuY4V7lG72B/jENxtIfg2PS
-----END CERTIFICATE-----
Generated at Wed Oct 2 02:52:08 2024 by rpki-client on console-ams.rpki-client.org