Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215809.roa
File: AS215809.roa (raw, json)
Hash identifier: v9OvQOJ+62P6RzOwzxJfSXXDevP2GPBVWwNC/+TMG1U=
Subject key identifier: CB:4F:94:6F:AA:E2:3F:2F:72:B7:09:2D:99:29:D5:4A:93:FB:4C:6C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 35FC2DD82B89EB8DDD8EC3571D5D94488E130044
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215809.roa
Signing time: Sat 28 Sep 2024 22:10:22 +0000
ROA not before: Sat 28 Sep 2024 22:05:22 +0000
ROA not after: Sat 27 Sep 2025 22:10:22 +0000
asID: 215809
IP address blocks: 179.61.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:fc:2d:d8:2b:89:eb:8d:dd:8e:c3:57:1d:5d:94:48:8e:13:00:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 28 22:05:22 2024 GMT
Not After : Sep 27 22:10:22 2025 GMT
Subject: CN=CB4F946FAAE23F2F72B7092D9929D54A93FB4C6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:21:ca:89:6b:8c:98:57:6c:37:43:4b:29:
01:59:47:3a:43:02:a7:3f:53:27:92:9f:f1:1b:87:
43:c5:96:2e:12:76:2c:92:10:2b:f3:e9:18:4f:69:
d5:07:d8:ad:4e:3b:60:f6:40:ee:2a:97:ca:04:67:
e0:09:a0:8d:53:1c:a9:9a:b1:a6:d2:19:c6:40:31:
8a:e7:5c:7d:4f:55:46:13:3c:69:94:19:a4:90:af:
e2:51:59:72:cf:8b:dc:54:0e:f1:3c:25:a0:5e:4f:
34:0b:24:fa:c9:7c:50:12:35:c5:4b:22:09:62:71:
23:e5:30:55:0c:1e:75:6f:bb:f1:81:8f:16:16:9a:
2f:eb:1c:9c:23:a2:2c:5f:2e:4a:61:67:0a:cc:de:
4a:19:70:e6:9d:57:fd:0d:d3:4f:d3:d8:df:bd:08:
b2:41:63:4e:9e:d3:38:ba:ed:95:bd:43:7c:28:1b:
30:40:c9:19:fc:fc:b0:70:2f:a2:28:9b:a1:fd:b7:
da:a3:5b:c7:09:48:79:37:5b:48:b3:ab:3e:a8:f6:
a1:a2:95:26:50:7a:2f:a9:81:d6:97:d2:2b:85:ee:
f3:4d:8e:91:78:d0:01:d7:bd:e4:a4:7d:33:3b:66:
3f:78:8a:98:d2:eb:87:97:4b:c2:2e:6b:07:d7:8f:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4F:94:6F:AA:E2:3F:2F:72:B7:09:2D:99:29:D5:4A:93:FB:4C:6C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.226.0/24
Signature Algorithm: sha256WithRSAEncryption
37:5b:03:d6:e2:34:03:00:49:bc:10:e1:57:b7:b5:26:6f:03:
ec:17:20:9b:75:47:c8:45:88:47:26:e2:aa:7e:b0:04:82:c0:
d9:e3:36:63:04:c4:49:7d:0b:45:ce:6e:2a:de:60:05:4f:6d:
3d:80:f5:13:fb:d5:2d:71:10:82:4a:9a:db:f3:7f:48:cb:ef:
fd:61:78:29:be:f5:40:23:09:68:6f:88:b9:e0:e4:6a:79:29:
0e:61:32:21:9d:a1:60:43:9c:1c:76:77:84:34:bd:75:e7:85:
1e:f8:8a:31:cd:df:81:98:c8:90:8a:ae:42:01:4a:d8:ee:b3:
af:6c:4e:55:25:b6:01:3a:cc:ab:13:fe:3f:5d:02:b3:16:9d:
81:28:b9:97:ea:38:08:c5:e5:c6:bc:b2:37:09:08:05:d8:5c:
e0:68:9a:d8:6a:80:65:9f:78:e8:73:97:23:07:f2:92:5e:a6:
b9:be:15:45:71:ee:d7:2b:c5:83:0a:ce:f7:51:4e:2b:2b:8c:
9b:ea:d4:75:a2:b0:d4:85:9a:ea:09:20:0c:73:9c:64:55:25:
11:2f:43:39:4d:b1:b3:4d:62:06:28:ca:c2:f0:68:c3:59:a4:
81:e5:8e:f8:22:15:15:41:f9:41:21:69:c0:40:6c:3c:e6:15:
eb:af:14:ad
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 28 00:43:41 2024 by rpki-client on console-ams.rpki-client.org