Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209260.roa
File: AS209260.roa (raw, json)
Hash identifier: s6EgtRI0jC2TDMU+GWrgJBR0BUK8C/2S+fg3Xg5ffwk=
Subject key identifier: D4:9F:31:56:46:3F:FB:7E:53:BE:14:49:D9:B2:76:7A:90:D4:4F:AD
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1269C2121D51847211806E367A11DD7B46F36B6C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209260.roa
Signing time: Mon 19 Jun 2023 00:00:14 +0000
ROA not before: Sun 18 Jun 2023 23:55:14 +0000
ROA not after: Mon 17 Jun 2024 00:00:14 +0000
asID: 209260
IP address blocks: 45.137.127.0/24 maxlen: 24
185.143.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:69:c2:12:1d:51:84:72:11:80:6e:36:7a:11:dd:7b:46:f3:6b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 18 23:55:14 2023 GMT
Not After : Jun 17 00:00:14 2024 GMT
Subject: CN=D49F3156463FFB7E53BE1449D9B2767A90D44FAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:e4:af:68:8e:4d:8d:c4:dd:a5:c2:4b:bc:
94:65:7d:3e:36:bc:63:ef:c4:b9:a9:ed:ec:8c:aa:
e0:0c:9e:96:17:ef:c4:47:43:33:4b:f8:c8:84:27:
f8:23:fc:38:84:f4:25:b2:9f:30:52:10:dd:ec:17:
9c:69:6b:83:ab:0b:09:98:ba:14:77:ad:ff:83:7b:
af:07:35:a3:12:ad:28:db:18:15:36:40:0c:6d:52:
ad:78:38:c3:f3:23:2b:31:96:2b:89:ba:3f:cb:98:
72:ed:a6:ad:c1:23:40:01:ce:29:8d:51:e5:a2:d5:
36:9b:91:15:22:d9:1e:ac:f2:9a:17:c0:4f:a5:7c:
ce:75:43:93:91:c1:64:f8:58:67:44:27:04:ef:d3:
c1:39:43:56:2c:33:11:7d:1c:46:33:35:df:b5:a9:
39:51:e5:20:96:8f:fc:50:b3:e1:fe:ec:db:67:36:
94:0b:9e:6f:13:74:76:2e:a8:aa:73:6b:6f:95:88:
2e:4e:e5:e1:6c:bd:79:18:7e:01:b0:9b:95:16:69:
fb:77:8b:71:cd:d2:6b:5a:6f:d2:e3:6c:83:ef:5a:
59:c1:b8:e7:4c:56:5f:f8:63:9d:47:5e:bf:21:cd:
b4:33:a5:f9:27:32:d6:d5:15:dc:e1:53:ca:10:d1:
98:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9F:31:56:46:3F:FB:7E:53:BE:14:49:D9:B2:76:7A:90:D4:4F:AD
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.127.0/24
185.143.230.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5b:54:cb:ec:0b:6f:bd:4d:21:f4:88:15:24:8a:ff:45:60:
93:e9:cb:2a:2c:72:5f:57:6f:11:fc:3e:e7:80:91:05:62:26:
4a:bf:c4:b1:05:4a:59:95:cf:f5:0d:4d:ad:e7:cb:d0:f3:9c:
33:d4:b1:bf:fa:9d:7f:8a:7d:47:7b:a7:8d:4f:a3:d0:79:6d:
d0:0e:1a:2d:37:12:f1:95:6f:49:eb:1a:08:0e:0e:5b:34:e4:
61:34:39:d2:d2:cb:57:50:db:a0:19:06:52:38:5d:23:97:3c:
1c:2f:fe:f4:13:5d:d7:76:09:01:8e:b2:22:4b:c9:6e:92:d6:
c1:9b:dd:75:b5:fe:f3:db:84:d6:a3:b8:9a:60:76:ae:77:3f:
8a:7d:c2:31:a9:aa:df:32:88:cf:af:a1:0b:98:fa:dc:bb:56:
cf:43:34:a9:b8:71:ba:34:2b:e8:48:08:b6:a9:e3:ef:b2:f8:
e9:33:4d:42:d8:b8:f1:05:30:d8:cf:0e:d0:0f:b5:04:76:e9:
b2:0d:cd:8a:33:6b:62:0f:c2:5b:a2:1d:2e:db:1f:4e:b6:2a:
98:90:4f:6a:30:30:ce:b5:79:8d:e6:0c:ff:b1:25:82:48:2a:
fb:d7:bd:9b:78:4d:be:9c:05:28:f0:c4:24:11:1c:de:9f:32:
32:39:34:37
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUEmnCEh1RhHIRgG42ehHde0bza2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzA2MTgyMzU1MTRaFw0yNDA2MTcwMDAwMTRaMDMxMTAvBgNV
BAMTKEQ0OUYzMTU2NDYzRkZCN0U1M0JFMTQ0OUQ5QjI3NjdBOTBENDRGQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaquSvaI5NjcTdpcJLvJRlfT42
vGPvxLmp7eyMquAMnpYX78RHQzNL+MiEJ/gj/DiE9CWynzBSEN3sF5xpa4OrCwmY
uhR3rf+De68HNaMSrSjbGBU2QAxtUq14OMPzIysxliuJuj/LmHLtpq3BI0ABzimN
UeWi1TabkRUi2R6s8poXwE+lfM51Q5ORwWT4WGdEJwTv08E5Q1YsMxF9HEYzNd+1
qTlR5SCWj/xQs+H+7NtnNpQLnm8TdHYuqKpza2+ViC5O5eFsvXkYfgGwm5UWaft3
i3HN0mtab9LjbIPvWlnBuOdMVl/4Y51HXr8hzbQzpfknMtbVFdzhU8oQ0Zg7AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU1J8xVkY/+35TvhRJ2bJ2epDUT60wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjA5MjYwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYl/
AwQAuY/mMA0GCSqGSIb3DQEBCwUAA4IBAQAzW1TL7AtvvU0h9IgVJIr/RWCT6csq
LHJfV28R/D7ngJEFYiZKv8SxBUpZlc/1DU2t58vQ85wz1LG/+p1/in1He6eNT6PQ
eW3QDhotNxLxlW9J6xoIDg5bNORhNDnS0stXUNugGQZSOF0jlzwcL/70E13XdgkB
jrIiS8luktbBm911tf7z24TWo7iaYHaudz+KfcIxqarfMojPr6ELmPrcu1bPQzSp
uHG6NCvoSAi2qePvsvjpM01C2LjxBTDYzw7QD7UEdumyDc2KM2tiD8Jboh0u2x9O
tiqYkE9qMDDOtXmN5gz/sSWCSCr7172beE2+nAUo8MQkERzenzIyOTQ3
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:14 2024 by rpki-client on console-fra.rpki-client.org