Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213059.roa
File: AS213059.roa (raw, json)
Hash identifier: 9c7c1TrEa80ZDzO/7h9YKgB2dUdcDSSOaTLVwR3cUfE=
Subject key identifier: 40:2B:14:4F:07:95:C3:88:64:0F:BF:9B:62:1D:43:0E:48:87:FD:B5
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6C5121138305C703ACC60CEFC7D7D9DEF81D207B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213059.roa
Signing time: Thu 03 Aug 2023 10:33:23 +0000
ROA not before: Thu 03 Aug 2023 10:28:23 +0000
ROA not after: Thu 01 Aug 2024 10:33:23 +0000
asID: 213059
IP address blocks: 45.231.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Aug 2023 09:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:51:21:13:83:05:c7:03:ac:c6:0c:ef:c7:d7:d9:de:f8:1d:20:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 3 10:28:23 2023 GMT
Not After : Aug 1 10:33:23 2024 GMT
Subject: CN=402B144F0795C388640FBF9B621D430E4887FDB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:80:c1:98:98:84:00:27:15:9b:5c:b2:49:d5:
1a:56:d7:ea:50:90:0d:84:7f:2f:4f:0c:74:ff:73:
c3:df:c2:4c:cf:b5:16:1d:e1:30:f6:95:71:05:9d:
73:f8:48:c9:ad:51:0a:04:0d:ce:53:5e:37:d9:55:
aa:28:cb:5f:fa:f9:0d:d4:4e:ce:11:88:ea:ed:c0:
62:3f:33:1a:d1:4e:48:e1:60:92:92:ee:36:1e:20:
f3:d5:64:c5:d3:61:f6:72:be:1f:fd:14:c9:83:eb:
a1:8f:87:16:8c:89:87:e3:d1:51:8e:45:2c:f0:f6:
54:2a:02:6c:44:74:05:41:ca:ad:6f:f6:f9:30:ba:
3d:f6:c4:36:60:c6:7b:db:c3:23:44:9e:15:1a:90:
a6:25:de:63:f4:60:aa:79:d4:94:70:79:02:f8:2d:
48:dd:b0:e3:52:4e:17:c0:96:3d:5a:d9:3c:09:97:
a9:ba:ec:4b:fa:ce:5c:d2:40:be:e6:4c:c2:be:32:
72:55:e8:a5:4f:a6:90:1b:16:7e:e4:70:97:82:8a:
60:3f:5b:ad:c4:23:24:46:cd:ae:9b:1f:cd:3e:78:
b1:68:a2:05:f8:1d:a3:34:22:92:6e:7e:08:3d:e0:
bc:fe:67:4c:40:b6:ff:a8:d6:53:d2:9a:77:30:25:
ff:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2B:14:4F:07:95:C3:88:64:0F:BF:9B:62:1D:43:0E:48:87:FD:B5
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213059.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.206.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:91:b3:41:29:d6:b6:61:aa:62:b9:bc:ca:f1:f2:c4:60:2d:
d5:10:1c:b3:0c:6d:cb:f8:22:01:a4:85:95:1c:21:90:82:50:
e5:a6:61:46:42:58:c9:a4:02:ac:3e:3b:a4:44:46:23:dc:1d:
d2:2a:4b:54:83:ba:f0:88:ca:41:6e:27:89:da:38:88:79:65:
0a:29:79:b7:bc:c6:7d:6c:c6:7b:da:fe:20:96:e5:63:ee:6e:
4e:46:59:d7:2e:1b:34:5f:2d:3c:14:a4:fd:c4:3f:c9:d0:0d:
c3:6c:bc:b1:b4:3e:dd:98:46:83:ba:39:35:65:e8:43:44:62:
6f:46:60:a2:81:eb:7f:93:02:66:c9:fc:ea:73:b8:81:1a:50:
06:88:98:e7:83:42:77:7b:f1:41:dd:d7:a8:f9:7e:99:34:fc:
66:ef:33:60:41:f9:77:7e:f8:00:7e:64:0f:c1:55:72:29:ed:
be:b4:b6:f9:f4:20:99:52:cf:ed:66:5c:0e:c1:c1:e3:83:49:
0c:fe:ed:94:46:ef:fc:d0:a2:59:c1:48:7b:17:2d:cb:fa:6e:
9e:db:b3:2f:93:9d:53:c2:30:d2:6c:71:ac:6d:0d:f7:5c:d2:
7c:2e:8d:c1:fe:a1:9c:90:50:f2:b2:1c:10:5c:ca:6c:0a:f6:
16:cf:2c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:03 2024 by rpki-client on console-ams.rpki-client.org