Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS44413.roa
File: AS44413.roa (raw, json)
Hash identifier: oyfkXT+xRBkEg+tKdwchRoH07HJ08rRXp4mFy5noSN0=
Subject key identifier: C9:41:11:E5:16:E7:08:02:12:DE:B5:D3:1C:08:C3:FF:84:56:33:E4
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 20F63BAB50BFBFF4CCC041AB86B5DE227E771131
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS44413.roa
Signing time: Tue 19 Mar 2024 00:54:26 +0000
ROA not before: Tue 19 Mar 2024 00:49:26 +0000
ROA not after: Tue 18 Mar 2025 00:54:26 +0000
asID: 44413
IP address blocks: 191.101.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f6:3b:ab:50:bf:bf:f4:cc:c0:41:ab:86:b5:de:22:7e:77:11:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 19 00:49:26 2024 GMT
Not After : Mar 18 00:54:26 2025 GMT
Subject: CN=C94111E516E7080212DEB5D31C08C3FF845633E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:8e:0b:fc:3f:a5:3c:58:b9:c8:c0:3b:8d:
2e:6a:52:02:82:4c:aa:9a:e3:84:ab:06:b0:cf:15:
40:00:68:c2:82:e7:1b:f5:e4:d7:2b:88:9a:3b:f1:
3c:e1:80:46:e7:c3:9d:45:28:5a:02:e1:d4:cb:12:
b9:64:fb:a6:5f:d4:70:76:19:8c:d0:e3:fb:3d:09:
7d:f1:a5:55:fe:84:0e:98:64:f9:97:17:a1:18:6c:
6f:3a:71:bf:70:6b:6a:6e:60:fc:d0:b5:f5:4d:8b:
02:fd:7e:5b:85:61:e8:77:e5:9c:82:e8:9a:f5:de:
a7:ec:d5:a9:5e:31:be:93:23:89:68:86:65:16:0f:
c6:8a:d6:59:f0:6c:91:b0:04:61:2a:cc:0a:ab:f9:
f4:02:71:b2:d0:72:c0:e3:d0:65:0e:d8:08:a9:6b:
8f:9f:78:b9:13:98:2c:a5:19:59:e6:5c:2d:9a:f6:
63:90:6b:73:c0:1e:d1:f0:5b:d7:59:df:ab:51:7b:
f2:34:19:28:df:bb:2d:b5:84:fd:e4:4b:bf:1e:86:
19:bc:2d:c1:ea:01:a3:b0:28:af:58:42:5c:b5:6b:
1f:1e:91:20:79:36:94:6d:37:f9:7b:00:7d:95:dd:
26:d9:82:7b:70:a4:03:33:51:e3:25:39:2c:a3:50:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:41:11:E5:16:E7:08:02:12:DE:B5:D3:1C:08:C3:FF:84:56:33:E4
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS44413.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ae:47:10:5c:d3:e5:e6:ba:0b:d2:55:70:f4:de:94:c3:46:
0e:b5:77:c7:72:c1:08:30:1e:01:07:69:39:f9:ea:3f:38:23:
72:aa:40:e4:a8:07:21:41:c4:07:15:4f:cc:74:5b:30:ac:93:
18:e8:21:4d:fd:39:28:b5:45:36:73:b5:23:2d:08:32:b2:2b:
67:ef:ec:83:ae:8a:79:2b:75:d8:f8:1b:85:12:99:5a:c2:22:
14:20:e5:cb:a8:1f:a8:a4:46:d7:74:43:b6:c3:09:83:41:96:
b5:09:6c:6b:81:c6:a2:90:37:7d:01:59:6a:8d:40:0f:a8:38:
15:9a:96:fb:de:14:b7:95:27:7c:cd:cd:45:fa:69:c0:16:49:
ce:d3:b3:67:57:24:fe:60:93:4f:e5:9e:25:3b:36:8a:de:00:
a8:37:12:d5:c6:e1:bc:d1:28:6e:0c:e7:b1:18:02:97:d0:b2:
d8:55:df:bc:eb:47:19:e8:40:b8:1f:05:71:0e:75:4d:ed:84:
ec:9a:f2:63:f4:da:d8:1d:05:11:0b:87:90:20:3b:b8:c7:ad:
fa:2f:b4:ff:85:75:16:e4:a5:de:17:fe:a6:aa:38:06:e8:55:
22:3d:b4:18:19:3a:d5:cc:1c:a3:d9:eb:c0:8a:08:45:22:6d:
c2:2d:94:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:15 2024 by rpki-client on console-fra.rpki-client.org