Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS216221.roa
File: AS216221.roa (raw, json)
Hash identifier: MvxXTKCPYHrx1DjaG1bQr01+SGY0UMyeWIvGLcPx0kU=
Subject key identifier: B6:79:58:32:FE:9A:A9:19:35:6F:1E:6A:67:8B:91:6A:B1:E5:89:DA
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1AE67CA34AF9F5A7F5A758B18F35E2851E403B85
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS216221.roa
Signing time: Thu 06 Mar 2025 00:00:46 +0000
ROA not before: Wed 05 Mar 2025 23:55:46 +0000
ROA not after: Thu 05 Mar 2026 00:00:46 +0000
asID: 216221
IP address blocks: 179.61.181.0/24 maxlen: 24
191.96.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 00:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e6:7c:a3:4a:f9:f5:a7:f5:a7:58:b1:8f:35:e2:85:1e:40:3b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 5 23:55:46 2025 GMT
Not After : Mar 5 00:00:46 2026 GMT
Subject: CN=B6795832FE9AA919356F1E6A678B916AB1E589DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:b1:88:b1:d4:23:fb:9d:e0:9b:e4:96:34:
b6:cf:15:42:7f:87:82:e5:75:7d:c9:3a:34:17:da:
b3:9c:2d:b5:cd:89:be:80:2f:3a:d0:e0:6e:35:d1:
3e:af:be:27:30:af:da:72:bd:a7:a2:32:83:1e:76:
f7:2c:f6:68:63:0f:ff:52:70:58:e9:50:ea:8a:c3:
57:64:de:60:c2:05:d9:88:31:41:23:99:12:f0:d4:
bc:27:4f:3f:f0:c0:9d:38:32:34:d6:1b:7c:ef:f5:
4f:1a:ec:88:98:73:91:2e:65:ac:66:fe:50:6d:21:
c8:72:0e:3c:b1:3a:bf:c5:f8:b8:c2:8f:b8:cc:a2:
c7:d0:81:b7:5f:6d:5c:a6:52:5f:6a:a3:21:96:bb:
0b:6f:3a:40:f7:2b:6b:09:d8:e3:1a:26:02:c8:e6:
84:89:68:49:39:e2:9f:67:87:d3:84:d3:8f:9d:76:
21:e2:9b:1b:5e:91:fd:0b:91:7a:c3:a6:41:15:37:
5f:4e:f4:44:46:ed:72:d2:76:44:ee:08:50:7b:37:
f5:2b:42:70:fb:9a:da:c1:95:59:f4:5c:01:40:18:
9a:82:4c:d3:1a:21:36:ac:21:9d:22:3b:3f:56:9e:
9b:61:f7:4c:55:ce:6c:d0:ff:49:26:0b:b8:a8:0a:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:79:58:32:FE:9A:A9:19:35:6F:1E:6A:67:8B:91:6A:B1:E5:89:DA
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS216221.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.181.0/24
191.96.180.0/24
Signature Algorithm: sha256WithRSAEncryption
57:6a:65:dd:32:b8:48:3d:55:c8:54:28:8c:35:54:c8:6c:2f:
09:e2:3e:5b:8b:7f:7d:c0:40:5c:42:39:0a:54:30:63:06:70:
d4:85:8c:e2:65:ca:85:3a:49:00:92:c1:06:8a:f5:d5:ca:be:
4f:17:78:64:04:9f:d1:7b:32:25:9b:13:51:79:bc:c2:42:8c:
65:22:f6:51:9c:fa:a0:24:f2:50:84:46:ae:15:b2:34:9b:1f:
71:8c:0d:e1:10:0e:dd:77:cc:f1:58:73:8e:6d:a5:c1:f7:cd:
19:1a:42:f9:17:8b:6a:c1:d3:6e:2b:97:57:25:78:c0:03:06:
ca:73:38:46:a8:10:56:65:08:3a:50:9f:fd:8e:d0:be:a0:aa:
79:fa:1b:51:82:05:a2:60:dc:bc:91:3e:2b:99:9f:78:62:52:
bb:b9:94:23:7a:13:c6:ee:02:e2:0d:5c:35:d1:f8:40:6b:0c:
71:9c:b4:cb:c3:05:5b:02:32:60:e7:59:44:7e:38:72:43:49:
f7:de:e7:70:9b:02:b7:f5:3f:36:73:f4:e3:1f:e7:09:74:35:
33:f4:60:2b:85:25:fb:87:f0:31:3c:3a:0c:b3:e7:09:97:f8:
34:d3:8c:b8:ef:de:25:66:e1:43:84:1b:98:a6:b3:af:e2:88:
26:42:07:74
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUGuZ8o0r59af1p1ixjzXihR5AO4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTAzMDUyMzU1NDZaFw0yNjAzMDUwMDAwNDZaMDMxMTAvBgNV
BAMTKEI2Nzk1ODMyRkU5QUE5MTkzNTZGMUU2QTY3OEI5MTZBQjFFNTg5REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyG7GIsdQj+53gm+SWNLbPFUJ/
h4LldX3JOjQX2rOcLbXNib6ALzrQ4G410T6vvicwr9pyvaeiMoMedvcs9mhjD/9S
cFjpUOqKw1dk3mDCBdmIMUEjmRLw1LwnTz/wwJ04MjTWG3zv9U8a7IiYc5EuZaxm
/lBtIchyDjyxOr/F+LjCj7jMosfQgbdfbVymUl9qoyGWuwtvOkD3K2sJ2OMaJgLI
5oSJaEk54p9nh9OE04+ddiHimxtekf0LkXrDpkEVN19O9ERG7XLSdkTuCFB7N/Ur
QnD7mtrBlVn0XAFAGJqCTNMaITasIZ0iOz9Wnpth90xVzmzQ/0kmC7ioCoH/AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUtnlYMv6aqRk1bx5qZ4uRarHlidowHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjE2MjIxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsz21
AwQAv2C0MA0GCSqGSIb3DQEBCwUAA4IBAQBXamXdMrhIPVXIVCiMNVTIbC8J4j5b
i399wEBcQjkKVDBjBnDUhYziZcqFOkkAksEGivXVyr5PF3hkBJ/RezIlmxNRebzC
QoxlIvZRnPqgJPJQhEauFbI0mx9xjA3hEA7dd8zxWHOObaXB980ZGkL5F4tqwdNu
K5dXJXjAAwbKczhGqBBWZQg6UJ/9jtC+oKp5+htRggWiYNy8kT4rmZ94YlK7uZQj
ehPG7gLiDVw10fhAawxxnLTLwwVbAjJg51lEfjhyQ0n33udwmwK39T82c/TjH+cJ
dDUz9GArhSX7h/AxPDoMs+cJl/g004y4794lZuFDhBuYprOv4ogmQgd0
-----END CERTIFICATE-----
Generated at Thu Jun 5 03:24:06 2025 by rpki-client