Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211061.roa
File: AS211061.roa (raw, json)
Hash identifier: jaakbXt8BsvNjf3wfBO5upak1dsA/R6uYf1piHJjuxM=
Subject key identifier: 2E:D2:DE:D7:03:4D:91:28:3E:F9:6A:C1:1E:D1:F6:67:9E:DE:89:49
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: A48C19D53FAE937BCEA894654AE658CAD9716D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211061.roa
Signing time: Wed 28 May 2025 19:54:08 +0000
ROA not before: Wed 28 May 2025 19:49:08 +0000
ROA not after: Wed 27 May 2026 19:54:08 +0000
asID: 211061
IP address blocks: 92.242.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 11:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a4:8c:19:d5:3f:ae:93:7b:ce:a8:94:65:4a:e6:58:ca:d9:71:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 28 19:49:08 2025 GMT
Not After : May 27 19:54:08 2026 GMT
Subject: CN=2ED2DED7034D91283EF96AC11ED1F6679EDE8949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ef:72:7a:e3:7a:52:1a:7f:51:bf:73:f3:7f:
9a:72:95:1d:85:c3:a4:80:79:76:86:9b:fd:46:ee:
af:5e:11:34:36:1e:7a:39:59:30:55:d5:3d:50:a6:
00:f4:57:87:d0:e2:e9:6a:ed:5b:f0:3c:8d:e1:87:
74:c2:5d:b3:cf:f8:8e:c8:18:61:f1:3d:23:8e:ec:
94:49:12:3c:5d:76:38:40:53:ca:d2:69:4f:7e:6b:
b1:20:8b:56:99:88:7e:cd:ce:b3:8d:65:f5:7d:6a:
27:fe:07:51:f8:d8:de:78:3f:70:c5:b3:4c:88:5c:
1d:79:10:44:3e:30:ce:26:77:68:59:51:54:02:07:
cd:db:27:a3:cf:53:0f:86:8c:b8:b2:4d:8f:46:cb:
7f:e5:47:3e:df:3d:96:e2:49:2d:91:27:81:51:bd:
bb:2b:25:a3:20:2e:7c:71:14:30:a1:fd:b5:5d:43:
cd:9c:35:1a:e4:8a:b6:19:d5:10:5d:d5:80:d4:1e:
73:23:32:49:b1:6f:ec:76:77:61:25:d1:ff:cf:e0:
22:56:b3:c0:26:27:71:55:58:72:3c:94:78:bb:48:
6a:96:1c:91:34:e6:c5:c0:e3:74:7f:d0:4b:f1:86:
7a:81:77:a0:a1:e8:09:9d:8d:85:12:0a:67:3e:87:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D2:DE:D7:03:4D:91:28:3E:F9:6A:C1:1E:D1:F6:67:9E:DE:89:49
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.184.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a1:0d:f2:61:f2:9a:3e:4f:24:de:7a:2d:d0:f8:0a:12:93:
0b:82:dc:16:fa:18:40:29:3d:08:35:65:f1:4a:be:01:75:50:
ed:84:fc:90:1d:07:cf:bd:bc:ec:33:7f:b7:59:e4:68:b7:31:
1c:fe:c5:f0:1f:41:38:58:86:eb:83:8a:fd:5e:17:c7:f7:39:
73:34:a6:c0:cb:7c:43:a4:82:1a:2e:43:41:10:d2:49:c7:3b:
7e:b0:a8:58:3c:9e:5e:b0:39:4f:a8:93:01:15:2a:16:69:f0:
d9:92:9e:90:ef:7f:d9:94:d3:76:44:59:93:06:c2:68:81:18:
39:44:88:1a:8b:b4:12:08:46:5b:b0:79:ca:4b:34:8c:e8:17:
06:e9:87:45:48:6d:a1:c8:51:e5:c1:06:d0:8a:df:e4:54:01:
aa:ee:e0:66:08:77:ef:0c:29:a8:8f:82:7d:1a:1a:4a:dd:ad:
94:64:19:8b:db:63:56:88:b9:75:21:0d:47:ea:c5:8c:e4:31:
af:32:37:ae:e9:2b:3b:35:bf:d5:6d:1a:3a:c6:92:1b:fd:7a:
a5:53:19:e1:02:f0:09:ba:4a:2d:a9:25:c3:0d:69:2f:d1:39:
c7:82:7a:51:83:de:1c:14:fe:43:7c:06:7d:6a:9b:71:9f:ad:
36:b6:c3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:19:16 2025 by rpki-client