Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400810.roa
File: AS400810.roa (raw, json)
Hash identifier: U9iX/AVucwUZDb76JC/0autVth7aVEKr7rnzwiP4gsE=
Subject key identifier: C2:4F:E0:08:9D:C4:F4:5E:E3:BA:A4:1F:27:33:6F:E0:45:24:CF:39
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7394C4C664B6902EF22E04DDB27DC1ABECBD96EE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400810.roa
Signing time: Thu 18 Apr 2024 13:44:29 +0000
ROA not before: Thu 18 Apr 2024 13:39:29 +0000
ROA not after: Thu 17 Apr 2025 13:44:29 +0000
asID: 400810
IP address blocks: 179.61.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 13:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:94:c4:c6:64:b6:90:2e:f2:2e:04:dd:b2:7d:c1:ab:ec:bd:96:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 18 13:39:29 2024 GMT
Not After : Apr 17 13:44:29 2025 GMT
Subject: CN=C24FE0089DC4F45EE3BAA41F27336FE04524CF39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:b8:ac:11:d3:95:96:7e:d7:c8:87:0d:fb:
92:ca:25:0a:2d:ef:cc:eb:76:3a:ab:7e:1a:57:65:
f3:bc:a0:9d:0c:89:93:4f:f7:a4:10:94:1d:dd:c6:
5f:47:16:22:3f:71:ae:a8:ef:ad:a2:31:14:3a:e9:
89:1d:52:c9:52:e1:3e:5b:17:8e:e2:65:a0:48:23:
8a:20:21:5c:05:5c:c3:87:ab:b3:2f:ea:6d:08:d3:
56:b3:ae:ab:2c:6a:fd:8e:bf:14:54:9d:73:2f:d2:
f3:ae:6b:60:2a:bc:bc:0c:a7:dc:8f:13:40:76:b9:
9d:18:7a:43:ef:9e:83:51:3c:ad:b1:69:b1:15:cf:
f9:40:0c:aa:ce:0b:70:df:91:6d:8b:ee:21:42:9b:
8b:a9:8f:85:e9:83:3e:da:fa:cc:a5:4d:bd:4d:7d:
14:30:27:04:67:fc:90:49:fb:47:af:0a:e8:4f:2d:
ac:96:27:0e:fc:c4:41:e3:c2:76:4d:b3:60:8d:ff:
ad:c1:aa:49:35:09:04:70:64:82:e8:8c:fc:03:fb:
20:4c:8d:ba:20:71:65:d4:09:83:82:7d:b9:58:5d:
7a:b0:e1:d6:e0:bc:28:ae:f7:7c:6b:62:eb:41:38:
bd:25:da:0f:f2:8f:ab:cd:7c:15:d4:fb:ca:ec:73:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4F:E0:08:9D:C4:F4:5E:E3:BA:A4:1F:27:33:6F:E0:45:24:CF:39
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.155.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7a:e5:3b:cb:62:53:50:3d:40:5e:0d:c9:d5:4f:93:75:27:
a2:b5:7d:eb:ed:fc:b5:34:45:d6:f8:ef:0e:d6:4d:8e:14:5c:
20:df:97:08:4d:5a:aa:60:c8:ac:7b:f4:7b:f4:b2:43:3f:fb:
c4:9d:69:03:73:37:15:02:66:ff:a8:79:6d:c1:76:3b:69:17:
0a:fb:d5:e8:72:e7:e2:26:43:bf:5e:27:b9:8f:f1:11:d1:a9:
dd:b7:35:e8:87:1a:92:4a:81:39:07:88:79:c2:04:4a:30:7c:
47:41:bb:f1:c3:53:73:88:0b:fe:a8:d8:92:7c:f7:f8:00:f0:
4d:07:1e:5a:d7:dd:01:ca:7f:a4:8d:80:a9:c3:0f:df:83:61:
9b:33:df:23:3d:b3:91:95:2b:15:72:8c:bb:d1:f4:2a:3c:3f:
ec:25:91:ca:30:f2:b6:47:4d:35:72:85:8c:e0:63:7d:3e:2c:
25:d0:d6:ed:b4:b1:2b:32:4d:6e:ac:24:59:db:9b:4f:9d:ea:
b1:5d:89:8b:8e:80:20:64:19:62:8c:49:32:60:71:d6:00:53:
2b:38:a0:2e:84:ee:ce:d2:2a:20:0e:5f:7f:ae:24:9e:6a:02:
b9:e1:07:dc:13:f1:9a:f8:b2:47:2e:61:32:3a:ad:1f:4d:7b:
ca:ca:e7:3c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUc5TExmS2kC7yLgTdsn3Bq+y9lu4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA0MTgxMzM5MjlaFw0yNTA0MTcxMzQ0MjlaMDMxMTAvBgNV
BAMTKEMyNEZFMDA4OURDNEY0NUVFM0JBQTQxRjI3MzM2RkUwNDUyNENGMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwrisEdOVln7XyIcN+5LKJQot
78zrdjqrfhpXZfO8oJ0MiZNP96QQlB3dxl9HFiI/ca6o762iMRQ66YkdUslS4T5b
F47iZaBII4ogIVwFXMOHq7Mv6m0I01azrqssav2OvxRUnXMv0vOua2AqvLwMp9yP
E0B2uZ0YekPvnoNRPK2xabEVz/lADKrOC3DfkW2L7iFCm4upj4Xpgz7a+sylTb1N
fRQwJwRn/JBJ+0evCuhPLayWJw78xEHjwnZNs2CN/63Bqkk1CQRwZILojPwD+yBM
jbogcWXUCYOCfblYXXqw4dbgvCiu93xrYutBOL0l2g/yj6vNfBXU+8rsc4zhAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUwk/gCJ3E9F7juqQfJzNv4EUkzzkwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDAwODEwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsz2b
MA0GCSqGSIb3DQEBCwUAA4IBAQA0euU7y2JTUD1AXg3J1U+TdSeitX3r7fy1NEXW
+O8O1k2OFFwg35cITVqqYMise/R79LJDP/vEnWkDczcVAmb/qHltwXY7aRcK+9Xo
cufiJkO/Xie5j/ER0andtzXohxqSSoE5B4h5wgRKMHxHQbvxw1NziAv+qNiSfPf4
APBNBx5a190Byn+kjYCpww/fg2GbM98jPbORlSsVcoy70fQqPD/sJZHKMPK2R001
coWM4GN9Piwl0NbttLErMk1urCRZ25tPneqxXYmLjoAgZBlijEkyYHHWAFMrOKAu
hO7O0iogDl9/riSeagK54QfcE/Ga+LJHLmEyOq0fTXvKyuc8
-----END CERTIFICATE-----
Generated at Wed May 8 16:42:15 2024 by rpki-client on console-ams.rpki-client.org