Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214995.roa
File: AS214995.roa (raw, json)
Hash identifier: iBTIryug0Z+mTEA93+yMgVXd/Mo/HkVJQRLu4wE79iw=
Subject key identifier: 3C:63:BA:8C:08:07:08:BD:53:80:AE:76:AB:45:AB:78:E7:69:33:1B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 257CFC57718A724D1329B64D31F0300265BC863F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214995.roa
Signing time: Wed 03 Jul 2024 13:31:35 +0000
ROA not before: Wed 03 Jul 2024 13:26:35 +0000
ROA not after: Wed 02 Jul 2025 13:31:35 +0000
asID: 214995
IP address blocks: 179.61.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:7c:fc:57:71:8a:72:4d:13:29:b6:4d:31:f0:30:02:65:bc:86:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 3 13:26:35 2024 GMT
Not After : Jul 2 13:31:35 2025 GMT
Subject: CN=3C63BA8C080708BD5380AE76AB45AB78E769331B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:2a:4b:da:d2:a6:1a:3f:da:be:65:8d:45:
7c:5a:09:33:1e:50:a5:76:10:58:b5:26:df:95:32:
d5:0a:cc:85:31:1c:b2:b1:d3:24:c9:72:a2:70:4d:
19:d0:05:ec:39:2f:d0:a3:a0:c3:a8:5b:b8:33:18:
10:66:c2:c5:24:cb:5a:2f:d3:4f:6e:6f:cb:93:94:
0b:9e:b0:22:b6:06:23:32:65:94:3d:40:ff:0d:3c:
30:b5:49:b0:47:0b:2c:c1:23:e5:e5:9d:fd:17:73:
f2:1c:1f:ed:78:e8:9c:9d:14:88:0e:b1:53:ce:2b:
a8:57:d2:56:05:2a:3f:b5:dc:eb:fc:0e:58:b2:e6:
44:f4:f4:0b:75:12:78:a4:a9:1b:a9:cd:5d:92:5f:
db:2d:f4:1b:08:54:f9:48:bb:26:63:85:1d:c5:14:
d1:81:8b:a3:35:3b:81:96:31:03:59:de:fc:44:23:
96:88:1a:20:e9:16:42:97:d6:c4:da:94:b8:a7:f1:
20:89:ac:f5:66:3e:73:6c:2d:eb:e0:5d:37:08:d5:
6d:cb:96:f5:63:04:e4:76:b5:3e:eb:49:e5:d7:36:
2c:92:c1:f5:dd:c4:c5:3a:9e:aa:4a:54:2e:08:a3:
e5:f2:75:a7:7f:cf:af:0f:b4:c1:a6:ef:8e:f4:60:
6a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:63:BA:8C:08:07:08:BD:53:80:AE:76:AB:45:AB:78:E7:69:33:1B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.227.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8c:73:f7:b1:0b:f1:f5:64:0c:df:9c:15:61:c0:1a:ed:52:
31:06:f0:a9:2c:81:8b:a8:a1:16:9a:3d:6e:9b:1e:e8:94:04:
02:33:a0:37:fe:e8:5e:af:4a:da:9b:8a:9b:5d:df:b2:7b:65:
12:b2:c0:6a:a0:0f:b0:3a:0b:0d:c7:ea:c9:2d:e2:8f:e0:a5:
a0:25:e2:2c:19:d2:5f:60:f6:64:16:e3:74:87:8f:90:19:bf:
a4:9f:79:d7:3a:68:13:5b:ee:a8:77:5f:51:19:7a:74:60:1c:
60:52:58:30:9b:c4:a9:c1:55:6c:6f:04:06:25:1a:3e:a3:74:
3f:71:3e:81:4c:0e:6f:99:c7:9a:60:29:d6:f0:49:e9:ae:20:
04:06:58:4a:d7:44:6a:61:49:67:f8:5c:98:c3:06:0f:9c:a7:
36:68:ad:bf:e3:42:5d:ba:6d:75:5a:d9:5a:fa:01:23:ab:c2:
94:f7:2b:7a:6a:5f:30:8e:63:6b:0d:7d:ca:06:77:87:ed:50:
e4:ac:a7:ca:af:7f:62:d3:40:44:90:47:5a:f7:11:c0:0b:1c:
a9:50:21:3e:58:31:ad:b4:57:56:5a:44:c1:ce:78:21:f9:45:
2c:8a:1e:b4:7a:33:28:83:3e:1d:1b:56:c1:2b:ba:27:ac:db:
42:98:1a:fb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUJXz8V3GKck0TKbZNMfAwAmW8hj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA3MDMxMzI2MzVaFw0yNTA3MDIxMzMxMzVaMDMxMTAvBgNV
BAMTKDNDNjNCQThDMDgwNzA4QkQ1MzgwQUU3NkFCNDVBQjc4RTc2OTMzMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+ipL2tKmGj/avmWNRXxaCTMe
UKV2EFi1Jt+VMtUKzIUxHLKx0yTJcqJwTRnQBew5L9CjoMOoW7gzGBBmwsUky1ov
009ub8uTlAuesCK2BiMyZZQ9QP8NPDC1SbBHCyzBI+Xlnf0Xc/IcH+146JydFIgO
sVPOK6hX0lYFKj+13Ov8Dliy5kT09At1EnikqRupzV2SX9st9BsIVPlIuyZjhR3F
FNGBi6M1O4GWMQNZ3vxEI5aIGiDpFkKX1sTalLin8SCJrPVmPnNsLevgXTcI1W3L
lvVjBOR2tT7rSeXXNiySwfXdxMU6nqpKVC4Io+Xydad/z68PtMGm7470YGqvAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUPGO6jAgHCL1TgK52q0WreOdpMxswHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjE0OTk1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsz3j
MA0GCSqGSIb3DQEBCwUAA4IBAQCBjHP3sQvx9WQM35wVYcAa7VIxBvCpLIGLqKEW
mj1umx7olAQCM6A3/uher0ram4qbXd+ye2USssBqoA+wOgsNx+rJLeKP4KWgJeIs
GdJfYPZkFuN0h4+QGb+kn3nXOmgTW+6od19RGXp0YBxgUlgwm8SpwVVsbwQGJRo+
o3Q/cT6BTA5vmceaYCnW8EnpriAEBlhK10RqYUln+FyYwwYPnKc2aK2/40Jdum11
Wtla+gEjq8KU9yt6al8wjmNrDX3KBneH7VDkrKfKr39i00BEkEda9xHACxypUCE+
WDGttFdWWkTBzngh+UUsih60ejMogz4dG1bBK7onrNtCmBr7
-----END CERTIFICATE-----
Generated at Tue Sep 3 01:42:40 2024 by rpki-client on console-ams.rpki-client.org