Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS29854.roa
File: AS29854.roa (raw, json)
Hash identifier: 3MT/MIiLGeXO1luMTbhPbszkg4Kk+Vm4cfINUegGo0U=
Subject key identifier: 6E:A9:6B:3E:5F:BB:AD:7B:99:F1:A8:02:6C:CD:83:97:6F:13:BE:FB
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 347B62CD7E6F7F6F34897EB5EBBBA2AF3A6B6A18
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS29854.roa
Signing time: Mon 08 Jul 2024 08:19:11 +0000
ROA not before: Mon 08 Jul 2024 08:14:11 +0000
ROA not after: Mon 07 Jul 2025 08:19:11 +0000
asID: 29854
IP address blocks: 191.96.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 00:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:7b:62:cd:7e:6f:7f:6f:34:89:7e:b5:eb:bb:a2:af:3a:6b:6a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 8 08:14:11 2024 GMT
Not After : Jul 7 08:19:11 2025 GMT
Subject: CN=6EA96B3E5FBBAD7B99F1A8026CCD83976F13BEFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fa:1d:16:dc:70:cc:46:2a:22:7d:05:ac:b2:
93:a1:d8:67:19:6a:94:92:00:bb:ed:2c:53:fa:30:
db:a9:71:60:8a:ad:e2:b9:e7:26:fb:94:e3:6c:94:
06:de:c7:3e:f8:b4:3c:51:00:95:86:98:0f:52:49:
c1:7d:d3:5b:8b:7e:39:af:0f:35:53:19:8c:60:0a:
13:0b:9f:17:e3:66:05:88:64:3d:af:db:91:0a:ca:
0d:69:7c:c6:dc:6a:a1:95:3f:f5:92:a6:c4:35:c9:
34:f9:0d:47:ad:03:a5:ef:b3:16:02:d9:c9:30:06:
08:b7:b7:05:99:75:84:e2:0e:35:3b:c0:0a:69:54:
b0:ce:9b:b5:78:bd:3a:22:9c:ea:b4:f1:66:e9:e6:
47:7f:aa:28:ba:07:63:1f:0e:29:c3:cf:d5:d9:66:
b5:3b:60:3d:c1:ec:54:c0:77:4f:77:36:58:2f:d7:
5d:5f:9b:f0:a1:a6:8b:14:e7:d5:37:63:32:22:6f:
e2:ff:c6:81:50:ce:80:4c:ee:c1:13:2f:2b:3d:d9:
df:3a:17:cb:ab:2b:16:07:5c:62:42:6d:10:d0:8e:
92:ac:ea:4f:5f:6d:e6:4a:e6:6d:4e:84:1c:20:f9:
16:3d:a4:ef:11:cb:00:6c:84:0f:86:06:eb:39:70:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A9:6B:3E:5F:BB:AD:7B:99:F1:A8:02:6C:CD:83:97:6F:13:BE:FB
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS29854.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.206.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a0:1f:07:aa:23:48:cc:88:ec:f3:93:06:1b:1a:32:17:7c:
60:dc:33:85:f7:6b:71:67:33:07:4a:84:a0:f7:91:e0:e1:c3:
4e:46:92:c7:ac:bf:a0:ff:78:ca:d9:c7:6a:11:2a:3b:56:c4:
0f:02:4d:95:c9:7d:46:a1:33:df:5f:88:da:fc:f0:3d:c0:2b:
ff:09:5a:6c:88:f1:1c:be:e5:17:b2:af:3a:4a:56:5a:ea:1d:
3d:16:52:4e:f3:90:8a:9b:6a:75:29:70:f1:b2:a8:01:48:a3:
69:5b:90:ee:58:27:81:25:8c:fa:3f:b8:37:d0:88:95:89:75:
14:96:2f:28:66:34:52:7b:38:0f:55:0b:a1:0a:dc:8a:cb:a1:
a7:35:3f:66:cf:c1:b0:6f:86:e7:a0:56:55:55:8e:41:20:db:
26:9c:81:53:2e:7c:a4:f5:48:22:23:9d:f3:27:0a:15:a8:de:
21:8e:70:26:f9:9f:25:27:b0:c4:08:34:d0:3e:cf:93:40:8a:
94:b3:ac:82:d3:8b:3c:e4:6b:6b:7c:05:45:54:29:93:a4:0f:
d1:1c:0b:7e:70:7b:cd:ff:10:33:56:5d:11:d8:33:69:8a:9e:
56:53:63:51:a9:13:de:43:f1:81:fe:ce:d6:1a:51:7d:55:e1:
50:04:ec:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 03:31:15 2024 by rpki-client on console-ams.rpki-client.org