Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS35409.roa
File: AS35409.roa (raw, json)
Hash identifier: A87n41uXIKCDhsd6kZen4uInpPXNal062mUcvpFj/vg=
Subject key identifier: 87:39:D0:A5:0B:24:AD:E6:7D:E4:99:0B:89:3E:97:EA:06:67:59:82
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 09F83C0105EFE159FD0F69B17D114313AAB2D5E0
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS35409.roa
Signing time: Sun 23 Jul 2023 00:00:06 +0000
ROA not before: Sat 22 Jul 2023 23:55:06 +0000
ROA not after: Sun 21 Jul 2024 00:00:06 +0000
asID: 35409
IP address blocks: 181.214.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Aug 2023 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f8:3c:01:05:ef:e1:59:fd:0f:69:b1:7d:11:43:13:aa:b2:d5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 22 23:55:06 2023 GMT
Not After : Jul 21 00:00:06 2024 GMT
Subject: CN=8739D0A50B24ADE67DE4990B893E97EA06675982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:99:aa:85:45:6e:dd:2d:54:f0:83:87:72:
23:b0:e7:4a:84:93:f6:3e:57:83:8e:e3:e5:dc:1d:
c4:8c:70:57:bb:67:88:0a:63:c4:24:38:e8:ae:e3:
91:83:c4:88:21:61:10:52:f8:25:aa:a5:98:f0:07:
32:62:70:01:df:15:ce:19:09:62:9d:c3:53:a9:99:
1b:30:02:52:00:c8:e8:9f:f2:2d:bb:f6:65:a7:1d:
5b:b9:02:5f:5d:4f:23:0e:a0:dc:18:7c:ea:f7:8c:
06:74:4d:8c:fc:11:97:c0:c6:1e:f7:1b:55:77:f0:
b9:f7:74:fe:0b:04:98:1a:d7:ef:1f:b6:2e:e1:ae:
40:32:63:79:b3:73:5c:21:97:48:33:05:a5:f9:e0:
da:93:25:b3:da:d7:d6:d1:75:30:34:23:6e:db:dc:
8f:2e:b0:14:2d:7f:f9:e3:ef:75:2a:b7:c9:73:fa:
bb:14:20:99:a1:6a:80:f9:a8:ed:41:af:86:28:dc:
cf:8b:1b:e0:79:f9:ad:40:79:7d:7b:0e:c8:2f:5b:
17:ff:55:ae:88:0e:8d:65:f6:b8:4f:7c:23:ff:1f:
d0:95:d5:e5:e3:1e:4b:2c:d7:fb:07:61:0d:23:41:
f8:30:d2:b8:aa:7f:36:69:5f:9f:75:af:41:25:1c:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:39:D0:A5:0B:24:AD:E6:7D:E4:99:0B:89:3E:97:EA:06:67:59:82
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS35409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.141.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ec:44:3c:c7:32:b7:65:36:64:1c:f9:f5:5c:9a:4c:35:25:
59:76:47:8a:32:d7:82:50:91:50:56:58:7a:da:6e:ff:94:b3:
6b:a0:db:a9:54:23:76:b6:ef:12:ef:c0:56:e2:d7:c3:e8:61:
97:de:fe:4e:9b:70:20:a8:c6:14:e2:97:71:33:6b:1d:cc:28:
06:2a:3e:0d:52:cf:8b:a6:61:50:e7:50:33:f7:db:9c:ae:b3:
1b:5d:62:0a:86:05:ba:e5:dc:d2:47:c9:6f:0b:b7:62:38:28:
8a:ed:89:7c:c5:3d:03:28:31:dd:27:b0:cf:ae:df:a2:8e:50:
a8:00:5f:84:42:1b:35:22:3a:f3:b8:58:34:dc:0e:3e:a5:d9:
b0:f8:5d:7e:a4:e8:83:25:23:92:a9:ef:0b:f4:7a:17:71:e7:
23:d0:bf:54:b1:3a:37:60:c7:a7:4e:d3:60:96:66:23:61:5c:
37:77:f3:af:43:1c:99:8b:dd:5a:78:bd:21:e7:f5:80:c9:f5:
1f:7f:fd:fc:c1:40:d1:52:35:8b:fc:de:79:02:22:b3:3a:a1:
7a:3d:ca:cd:ce:55:a2:df:53:36:c6:52:54:4b:03:99:f9:9a:
60:ec:21:7e:b6:f6:71:62:f6:fb:0c:24:eb:46:de:d8:92:87:
8a:d1:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:04 2024 by rpki-client on console-ams.rpki-client.org