Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS36113.roa
File: AS36113.roa (raw, json)
Hash identifier: PfmUTqO/uyw+X2/aiOj22qqg/ulv+HFDUEBmFM3qUgg=
Subject key identifier: 99:76:B9:8A:2B:76:BE:38:C5:96:BD:0D:EB:4F:E0:13:0B:43:EF:9F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 50D7EE1CB9323F814050BC6B85E092B47C1B9692
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS36113.roa
Signing time: Fri 19 Jan 2024 00:00:10 +0000
ROA not before: Thu 18 Jan 2024 23:55:10 +0000
ROA not after: Fri 17 Jan 2025 00:00:10 +0000
asID: 36113
IP address blocks: 181.214.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Feb 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d7:ee:1c:b9:32:3f:81:40:50:bc:6b:85:e0:92:b4:7c:1b:96:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 18 23:55:10 2024 GMT
Not After : Jan 17 00:00:10 2025 GMT
Subject: CN=9976B98A2B76BE38C596BD0DEB4FE0130B43EF9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:0e:87:63:e5:80:43:f5:96:74:b7:bf:5a:
38:05:5c:1b:71:04:a0:80:05:6b:72:3e:64:ea:47:
99:ec:cf:7e:87:64:27:cd:2f:6f:49:f5:00:c9:26:
f7:de:76:67:fc:ad:b6:d8:fc:1e:13:d7:e4:28:5d:
b9:04:02:99:15:28:b0:50:e7:44:70:b0:5f:b0:c9:
d3:af:38:a3:09:01:24:a3:23:87:5a:1f:0a:0a:8f:
d9:c6:cc:e8:54:8c:73:b5:b5:a5:1c:a2:eb:0c:a8:
82:8e:79:a1:3c:13:96:b2:98:f8:ec:c9:5c:e3:57:
f9:84:ce:ee:ee:8d:3e:9f:24:9f:f5:82:78:27:ad:
84:15:58:ad:f5:d3:27:b8:82:ac:cf:75:51:ba:88:
c1:58:30:02:22:29:78:7d:2a:e5:d6:5d:2e:34:fc:
3e:fd:ea:bf:3a:c8:34:6c:16:ee:27:0a:ed:35:6a:
a3:ab:f4:dd:a1:3b:f5:e7:3f:f1:70:a7:1f:d0:62:
50:97:1a:19:61:c0:56:49:34:dc:93:da:3f:84:2b:
f1:ae:24:5f:4b:d4:b7:78:a8:a6:f7:3a:4b:51:2e:
92:31:c8:c0:92:36:10:56:48:b8:96:28:80:1c:32:
5c:50:3a:cb:b5:04:26:e0:fd:f2:db:bc:ac:5e:15:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:76:B9:8A:2B:76:BE:38:C5:96:BD:0D:EB:4F:E0:13:0B:43:EF:9F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS36113.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.245.0/24
Signature Algorithm: sha256WithRSAEncryption
38:fd:80:13:32:e0:ce:e5:b3:86:a6:ac:3b:60:58:46:74:15:
73:96:73:bc:46:d3:69:2b:73:68:5f:42:a9:cc:a5:c2:cf:bf:
4a:ad:6c:12:7c:a1:12:b3:07:60:52:1c:b3:7b:42:5f:35:75:
9f:39:ca:5f:ad:27:c1:ab:76:12:b7:cc:e4:7a:80:c8:b5:bf:
d2:a0:f4:b8:44:26:0a:d0:9d:b7:f8:c1:d7:c2:13:3b:63:0c:
d8:a3:e0:4d:b0:af:29:86:12:73:61:e9:47:b4:54:ec:3b:bb:
da:f6:30:73:f9:5c:cd:f3:f0:c8:fe:9c:87:f3:f7:6f:90:46:
f2:03:53:d2:64:ac:7a:ae:e6:f9:ed:9a:73:a4:c7:75:f4:e9:
48:17:1b:8a:3a:c8:a7:f0:39:80:d2:1a:5b:7d:a8:22:3c:c7:
ec:f4:79:41:60:28:bb:56:7d:7d:65:f3:7a:b7:45:77:f5:43:
b6:8f:e4:75:ba:79:a8:74:4c:9c:eb:d6:84:28:0f:e4:e0:ed:
cc:a0:ab:21:14:d1:22:57:4a:1d:b4:58:a4:8f:e4:f4:10:d3:
f6:21:e0:a7:9d:2a:56:5e:01:c8:fd:f7:22:f7:e0:40:fc:d1:
16:dd:1f:fd:7a:ee:00:6b:70:33:72:f4:90:0b:f0:ba:e5:07:
15:6b:bf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:04 2024 by rpki-client on console-ams.rpki-client.org