Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS216061.roa
File: AS216061.roa (raw, json)
Hash identifier: IGRO4XT7JQ+6DRfgmvBAGZ9hKEhhWpt/cZCyPEQPqOU=
Subject key identifier: 06:51:23:D5:3D:6D:C3:2A:FF:FB:25:F3:F3:12:0C:B6:C9:80:32:9B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 794E52E9E63816B8201D9A9B6D7DC87BE24D4B05
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS216061.roa
Signing time: Fri 19 Jan 2024 16:51:10 +0000
ROA not before: Fri 19 Jan 2024 16:46:10 +0000
ROA not after: Fri 17 Jan 2025 16:51:10 +0000
asID: 216061
IP address blocks: 45.95.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 10:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:4e:52:e9:e6:38:16:b8:20:1d:9a:9b:6d:7d:c8:7b:e2:4d:4b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 19 16:46:10 2024 GMT
Not After : Jan 17 16:51:10 2025 GMT
Subject: CN=065123D53D6DC32AFFFB25F3F3120CB6C980329B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d5:72:0b:4d:0f:aa:68:4a:c9:f2:30:9a:2d:
29:2b:24:d1:77:c3:40:bd:97:9b:f5:b3:30:32:ea:
f8:0b:74:c6:33:ff:f0:34:10:e9:a2:bc:97:3d:32:
ee:b7:f8:e7:35:eb:0a:a3:c3:59:02:5f:a6:0c:71:
78:87:1a:4d:f8:0d:7d:f5:1d:e8:15:77:7e:1c:a5:
4d:f3:af:9c:59:aa:71:c2:16:9e:4b:3a:7d:cb:35:
c7:c9:d9:f6:08:24:4f:8d:79:b8:48:56:28:db:4e:
e7:77:95:c1:ac:90:6a:21:bb:0d:35:61:33:9d:67:
25:71:4f:9d:b1:90:7a:db:71:c5:b7:03:c9:34:6d:
c7:05:81:b7:8f:54:4e:f5:a8:d9:91:7d:e5:62:91:
95:00:fd:9b:98:72:38:64:3e:31:e0:01:98:ee:04:
a7:39:81:4d:a5:2e:d7:55:77:82:44:db:f3:04:fe:
c0:5a:cc:9f:14:b7:b3:28:0a:de:d7:6c:04:7a:ea:
4e:e3:b7:ab:3a:26:43:29:76:2a:68:37:0c:ea:b7:
be:9d:be:2e:4a:22:41:4b:c9:57:1c:ee:95:00:2b:
01:a1:0d:4e:63:11:f7:9f:4e:76:2c:e2:62:b8:f2:
34:3b:42:05:f4:f1:45:51:bd:50:17:4f:01:82:56:
4e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:51:23:D5:3D:6D:C3:2A:FF:FB:25:F3:F3:12:0C:B6:C9:80:32:9B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS216061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:eb:70:f0:40:51:89:13:5e:27:46:c0:af:7d:67:68:d8:e5:
b6:7d:ec:ab:5f:0f:ae:50:ee:a5:49:86:7b:09:9d:e4:1e:f6:
5b:6c:e3:00:cc:cb:1e:20:c1:fd:3e:c6:83:63:c4:66:61:33:
53:1c:cb:ad:50:e7:f6:9e:55:53:1f:f1:a5:87:9a:a5:4a:14:
a6:3c:50:c1:76:ca:7c:37:56:2e:42:2b:0a:e2:3e:14:4a:29:
b7:cd:e2:0c:a4:de:1f:76:11:d6:b1:d1:e4:62:88:b2:c0:32:
a2:de:62:54:7c:8e:55:00:6c:d2:4f:af:35:4f:d2:c2:9e:9e:
d2:80:e8:3e:8e:f0:c2:95:66:84:ea:56:8e:39:c0:aa:7a:ef:
9f:44:ea:aa:13:af:91:9a:89:1d:97:cb:2a:88:5a:65:6e:ce:
38:88:50:5d:fa:9f:33:cd:ea:d6:c7:1b:2c:1f:3d:08:06:2c:
89:92:f6:76:25:21:35:ef:7b:09:8d:2c:65:b8:78:06:60:56:
04:a4:ab:38:c6:be:8b:ad:da:98:bb:f3:64:e6:d2:00:13:ed:
af:cd:e6:5f:6d:5c:4d:a8:70:ab:f8:ef:42:fa:97:7e:ed:8c:
91:44:68:7e:17:e8:f1:ad:ec:c2:9b:49:f6:85:2d:ec:45:82:
c1:f5:4e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:15 2024 by rpki-client on console-fra.rpki-client.org