Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213160.roa
File: AS213160.roa (raw, json)
Hash identifier: 1kH1o7pfDojYuvSlO/7FyGwC9VU7FeAse5ZOAQZDo2I=
Subject key identifier: B2:E9:DD:B2:6E:69:0B:59:B3:B6:06:AE:53:DE:B4:BA:4D:38:E0:DE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7C125545105BE15DA4FC196E5283875C51B8FCE3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213160.roa
Signing time: Wed 07 Aug 2024 06:39:13 +0000
ROA not before: Wed 07 Aug 2024 06:34:13 +0000
ROA not after: Wed 06 Aug 2025 06:39:13 +0000
asID: 213160
IP address blocks: 45.231.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 08:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:12:55:45:10:5b:e1:5d:a4:fc:19:6e:52:83:87:5c:51:b8:fc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 7 06:34:13 2024 GMT
Not After : Aug 6 06:39:13 2025 GMT
Subject: CN=B2E9DDB26E690B59B3B606AE53DEB4BA4D38E0DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:fe:4f:f6:9a:30:92:41:ce:4e:e4:69:bd:
c0:f9:e4:d9:e7:57:5f:11:4d:b8:24:c1:bf:19:8e:
f3:77:00:6c:c0:41:0e:c5:be:82:54:de:5e:62:5b:
ce:92:91:6a:31:4a:58:d8:28:a4:ce:6f:60:e2:cf:
06:1a:71:b1:40:a8:46:9a:85:c5:97:1f:ef:ad:f8:
da:41:7d:b8:0b:68:aa:54:5e:65:7c:3b:85:c0:81:
58:77:4b:52:97:2c:39:b3:fd:46:52:2f:99:3a:27:
0f:d7:68:bb:6a:ab:ba:f6:b7:c7:65:1d:2c:aa:88:
31:c0:71:1d:55:44:af:6f:1e:c5:9c:d9:53:74:77:
ec:5f:1e:fa:a7:db:c8:7b:2c:9f:57:1a:5d:cf:02:
29:98:c9:8c:af:33:3a:6f:37:bb:ad:df:97:71:89:
69:3b:c0:32:c3:45:cd:64:ad:e5:25:16:7a:d9:cb:
b7:33:58:6b:d4:d5:07:f3:fe:d4:76:ad:51:74:e6:
8e:6e:16:c8:49:24:ef:3e:da:cc:bd:50:68:35:d0:
fc:10:cb:0b:45:52:59:80:ce:6b:0d:89:8c:b5:7f:
82:8d:0c:7c:c9:21:55:aa:18:8f:05:4e:15:0e:bc:
fe:3f:37:19:6e:37:e3:74:d4:7f:c2:d3:37:60:aa:
90:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E9:DD:B2:6E:69:0B:59:B3:B6:06:AE:53:DE:B4:BA:4D:38:E0:DE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213160.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.206.0/24
Signature Algorithm: sha256WithRSAEncryption
42:14:b3:a2:32:8d:d9:a9:85:48:ef:c5:05:51:9d:a5:41:04:
13:83:d8:db:f2:b1:d6:32:7a:5d:39:43:15:7b:a0:b4:cc:14:
bc:42:e7:4b:44:b9:3c:b4:89:52:29:37:8d:f3:24:98:d6:a0:
a0:8c:a4:d9:86:76:ed:d6:66:27:23:cb:b4:3b:5b:b0:32:30:
7f:a9:53:2d:07:29:be:86:49:d2:61:2c:2c:a6:22:2e:31:a2:
df:29:2d:50:aa:00:d4:7e:a8:0e:79:8d:91:78:b0:ca:1f:d4:
6d:c1:18:bb:fa:5b:19:b2:4b:ad:22:b3:e1:5f:fd:15:f3:de:
4e:ad:7f:27:9c:1c:a0:4c:40:d6:8d:83:12:92:47:1b:a6:de:
14:10:ae:23:29:90:03:e3:85:87:7e:ed:a5:e0:61:ca:45:9d:
68:b7:82:83:10:8d:94:9f:58:ea:a3:0c:33:28:b1:72:44:58:
78:c2:f4:81:93:53:79:54:35:4e:90:58:5f:13:3e:f4:2a:34:
ea:2b:5d:77:8f:3e:e1:ff:de:41:c1:5b:2d:9a:cd:d5:81:65:
66:18:e9:23:3e:51:97:eb:74:45:ad:01:3d:2c:4c:af:9c:86:
8b:6f:80:19:52:86:c4:dc:79:83:5f:c2:c6:05:d5:b9:dc:27:
a8:c3:23:b7
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 7 10:35:03 2024 by rpki-client on console-fra.rpki-client.org