Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212249.roa
File: AS212249.roa (raw, json)
Hash identifier: 3WkHYQXCSb/6RkqxJ+ZU8h2RnavSUXfc/m1RiS0nZJg=
Subject key identifier: 4F:82:2E:66:67:4A:91:CD:13:1C:1F:F0:A4:67:A9:A8:75:B5:49:06
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1FACFBFD5156D7E56093DBF43FA144309681FE57
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212249.roa
Signing time: Thu 15 Aug 2024 14:28:49 +0000
ROA not before: Thu 15 Aug 2024 14:23:49 +0000
ROA not after: Thu 14 Aug 2025 14:28:49 +0000
asID: 212249
IP address blocks: 179.61.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 12:34:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ac:fb:fd:51:56:d7:e5:60:93:db:f4:3f:a1:44:30:96:81:fe:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 15 14:23:49 2024 GMT
Not After : Aug 14 14:28:49 2025 GMT
Subject: CN=4F822E66674A91CD131C1FF0A467A9A875B54906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2c:0f:ff:7c:12:5d:cd:af:33:54:60:db:ae:
0b:81:93:45:10:95:38:01:57:7d:d3:6c:a2:42:17:
03:fa:36:b7:8c:66:88:50:db:6a:46:92:81:7e:b1:
a5:48:b9:9d:04:c4:62:b9:a8:16:de:22:72:a6:f7:
9b:47:d4:65:fb:59:f5:70:82:0b:b3:a2:d3:5a:49:
9d:9f:25:d4:4f:40:f8:df:90:e6:5d:5b:c0:ed:a6:
4c:58:a5:82:29:5e:97:c6:87:18:ec:fa:e1:3e:e9:
d1:07:8a:ba:1b:f8:55:3c:4e:5f:4d:45:38:d1:7f:
74:a8:df:7d:88:cd:0d:bf:06:c2:25:1d:9e:60:29:
07:13:92:86:44:15:99:5c:f7:52:9b:d7:d0:cd:e3:
f9:30:d0:93:32:b9:c6:70:50:0f:06:66:e2:83:bd:
1f:16:20:5a:cd:13:9b:7e:01:3d:7b:c9:e8:35:b3:
cc:bd:ab:03:81:93:b7:fd:3b:0e:45:e1:4e:09:b9:
d6:24:7b:c8:87:41:4c:7a:9d:6e:7e:39:b4:1e:63:
c7:73:03:20:4d:af:01:c7:1c:2e:4c:af:ef:5c:e7:
15:34:4b:49:90:7c:08:90:2d:46:bf:a3:e5:25:c6:
83:1a:55:ec:16:04:d4:50:f1:2b:48:51:c6:58:43:
3d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:82:2E:66:67:4A:91:CD:13:1C:1F:F0:A4:67:A9:A8:75:B5:49:06
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212249.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.129.0/24
Signature Algorithm: sha256WithRSAEncryption
91:df:a0:1f:e1:5c:e9:09:8b:a3:37:00:18:77:ff:2f:68:34:
da:e8:7a:3c:22:65:73:e5:15:ed:ac:b0:8f:51:6d:d3:fc:25:
5a:cb:85:38:d0:4d:09:d1:13:2d:61:75:6a:fd:4d:31:52:38:
16:ef:49:c9:a8:fb:c4:5c:49:6b:77:d5:08:5d:e9:72:21:e9:
d2:c2:61:a8:7c:0f:66:5e:12:c2:68:f8:58:df:34:c0:cf:8c:
4e:0e:12:f2:8b:1f:a3:32:87:43:60:57:1b:eb:8f:58:6b:3f:
dd:a6:20:4b:2e:ae:80:66:6a:37:0e:d7:1a:9d:4b:31:85:d2:
08:a5:33:f3:78:30:e3:83:0d:81:48:0c:7f:b7:b7:55:6c:da:
14:a5:a5:4d:37:d1:63:58:be:af:be:47:4b:70:60:e7:d7:3d:
a4:e5:ed:5b:fa:9d:9f:75:41:d8:ba:02:95:29:0f:ee:5f:e4:
e2:07:32:3a:f4:bf:e7:67:e6:2b:1e:20:a3:8a:d3:6d:d5:0f:
0f:54:60:ea:06:b5:58:66:98:bc:90:57:2e:40:37:8e:84:c4:
01:4c:70:b4:76:f7:e2:e7:f8:6c:dc:9d:d3:ff:12:bd:78:9d:
e0:2f:a4:96:75:d0:c0:12:00:23:f6:86:83:16:84:ad:ad:80:
77:38:61:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 15:03:10 2024 by rpki-client on console-ams.rpki-client.org