Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210732.roa
File: AS210732.roa (raw, json)
Hash identifier: 4e8kY7QobP7lC0DTmbqipLrmXhNHcW6gF6wucb4Ilb4=
Subject key identifier: 9E:1A:36:17:4C:97:B1:D2:89:F5:7A:2E:AC:33:FB:67:F9:B4:19:41
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 38B0E53589EAC019D1DA26971A71C8A8CBA15969
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210732.roa
Signing time: Wed 21 Jun 2023 21:02:49 +0000
ROA not before: Wed 21 Jun 2023 20:57:49 +0000
ROA not after: Wed 19 Jun 2024 21:02:49 +0000
asID: 210732
IP address blocks: 181.214.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Oct 2023 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b0:e5:35:89:ea:c0:19:d1:da:26:97:1a:71:c8:a8:cb:a1:59:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 21 20:57:49 2023 GMT
Not After : Jun 19 21:02:49 2024 GMT
Subject: CN=9E1A36174C97B1D289F57A2EAC33FB67F9B41941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:48:45:a4:04:2a:51:65:5a:51:8f:24:e4:
f1:94:2a:ef:f9:87:e0:80:2f:6b:23:81:5e:1e:6e:
5f:e6:46:e2:7e:91:26:74:6d:79:c4:4d:dc:a2:b2:
37:1d:76:55:25:fb:98:71:29:cb:7c:f8:68:7a:5c:
64:3f:60:cd:d2:13:b4:1f:de:be:cf:4a:ae:9c:b0:
73:d9:68:ea:1b:ed:2c:c5:31:74:fb:0f:12:c5:06:
4f:86:d5:ac:bf:b2:b2:2c:11:44:af:29:ae:d1:f0:
f3:6f:e4:c9:c8:e1:d9:ce:9d:ff:40:14:79:38:3b:
07:ec:54:51:67:c0:d2:2c:19:51:c1:ce:8d:c3:3e:
e6:43:2e:af:3d:4b:8e:60:71:ed:32:b1:c4:a2:41:
3f:f7:f9:0b:20:76:a6:4a:9a:08:f8:2d:6a:80:26:
95:ba:24:a1:65:4b:7e:84:03:7f:f1:be:d6:83:05:
67:1a:fb:04:df:8e:ab:49:07:bb:65:3d:ba:ab:18:
68:dd:89:60:1d:b1:28:da:89:ee:f6:fe:f2:00:ef:
46:2e:fe:7e:36:84:bc:97:d5:41:e4:16:e0:a8:bb:
11:bc:96:a7:bf:d4:7b:5e:57:dc:f9:46:6a:8c:d9:
1c:b1:71:c3:7e:df:05:d3:e5:3e:79:aa:27:c5:fc:
73:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1A:36:17:4C:97:B1:D2:89:F5:7A:2E:AC:33:FB:67:F9:B4:19:41
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a4:01:8a:bf:31:52:e0:ee:43:36:b4:5e:39:f8:58:59:38:
a1:e6:b1:b8:a3:e8:9e:8a:40:d6:b2:a9:0a:6f:99:a5:fa:6f:
17:40:f6:cf:d6:07:32:96:40:a4:ba:d5:86:de:b3:8b:d7:45:
f3:1b:6b:50:38:04:a0:02:9c:e9:c1:d3:04:3a:25:6c:16:3b:
b8:92:fa:bd:40:1d:08:3c:44:51:6d:08:47:c8:81:53:08:c5:
8d:a2:f6:9f:72:0c:e9:d8:c7:35:cb:11:62:95:12:0b:22:90:
e4:1f:b3:85:33:80:31:36:91:e4:3e:20:c3:1f:e9:91:d7:fc:
49:40:58:1d:b0:a4:f0:25:1a:54:67:a5:01:a4:86:a9:40:ce:
94:bb:77:2d:1e:41:29:8a:24:eb:94:c2:a7:b4:b4:ad:d2:a0:
a7:ed:06:30:de:50:7b:9e:f4:f0:f5:d4:3e:dc:09:7e:ab:ea:
03:1c:9b:80:2b:19:ed:8a:4f:eb:e5:8d:2c:88:92:2f:72:0d:
e0:a1:4d:ce:85:3a:f1:71:29:dd:72:d3:dc:c1:0f:f6:28:bf:
60:65:fe:a5:e3:ae:b5:08:12:fb:30:fb:18:b2:9d:83:8c:a1:
4b:ae:3a:0a:61:a3:d5:30:c5:11:42:d1:ca:a7:ed:79:14:87:
26:ce:4e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:14 2024 by rpki-client on console-fra.rpki-client.org