Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46450.roa
File: AS46450.roa (raw, json)
Hash identifier: IZ5SV6C1vrwfLs+AO+cdEu3eZV8w4jDKRtHE/yYydqk=
Subject key identifier: 2F:F8:91:3A:51:3C:43:C7:C9:14:A6:80:00:A3:3B:A0:7F:59:8A:11
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7CE0F696E6834DBE16F6CECCEE6DEC4F6FCAE54F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46450.roa
Signing time: Sun 19 May 2024 15:46:11 +0000
ROA not before: Sun 19 May 2024 15:41:11 +0000
ROA not after: Sun 18 May 2025 15:46:11 +0000
asID: 46450
IP address blocks: 191.101.25.0/24 maxlen: 24
191.101.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jul 2024 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e0:f6:96:e6:83:4d:be:16:f6:ce:cc:ee:6d:ec:4f:6f:ca:e5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 19 15:41:11 2024 GMT
Not After : May 18 15:46:11 2025 GMT
Subject: CN=2FF8913A513C43C7C914A68000A33BA07F598A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:ae:ed:f7:a3:a3:02:59:92:9e:51:d8:c5:
b7:18:f5:61:12:fd:82:06:cb:1a:6d:3c:64:b3:a0:
2d:44:f3:1f:ce:f8:96:72:52:51:71:8a:ef:d5:fd:
95:4a:74:42:7a:88:3b:45:a5:61:99:7d:01:f4:aa:
c1:42:64:15:0f:36:f4:ac:24:d4:88:df:48:a6:5f:
c6:b5:19:92:5f:4e:2c:24:05:32:c8:df:c7:cf:a1:
e7:9f:cb:47:80:59:ab:85:a4:51:e8:13:42:3f:08:
99:d7:c7:21:bc:6f:a1:04:ac:96:bf:87:2e:be:a2:
01:2e:06:e1:35:6d:a7:aa:b6:70:39:d9:ec:b2:b2:
13:c1:2f:b5:59:9c:87:c8:37:e6:ef:3e:26:24:31:
26:e1:32:4f:de:f4:0f:d1:c8:f2:c5:ee:32:7e:b4:
07:25:49:5a:5b:7b:9a:b0:34:41:c9:fb:1c:c0:ff:
cc:f7:a3:89:bc:0e:8f:c2:1c:cf:35:6a:30:14:37:
50:58:0c:47:e6:b3:3e:ee:00:77:3f:9b:8f:80:50:
65:6b:e4:a2:fc:85:bc:5e:a0:fa:e2:32:b5:2c:d1:
1c:96:a0:be:44:6a:32:32:cc:36:9e:67:72:a0:2f:
58:b1:62:5f:a5:91:ab:8f:6b:a0:74:0e:38:dc:a0:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F8:91:3A:51:3C:43:C7:C9:14:A6:80:00:A3:3B:A0:7F:59:8A:11
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46450.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.25.0/24
191.101.121.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:49:05:51:bb:ac:30:d7:d5:13:18:1a:ce:7d:4c:24:e1:ef:
18:a0:21:82:0f:8b:d3:56:da:c5:f7:db:d5:33:5f:60:b8:79:
a0:0e:d9:88:ed:8a:49:cd:5b:49:fd:62:d4:a4:58:63:c4:6a:
ac:f9:ad:60:8a:3e:52:83:49:06:d1:f1:51:19:d4:bf:14:72:
ea:a5:c2:cc:35:e8:b4:0b:2d:2b:a4:72:22:e2:54:a1:56:71:
67:c8:6e:93:cb:be:ab:dc:d6:b8:3b:8b:88:7d:fa:3b:aa:49:
a3:81:aa:ff:7c:d8:a2:ea:5a:c9:ae:a5:6a:9d:9e:5c:18:61:
18:29:81:57:48:cb:74:64:b6:cd:c3:e3:84:33:1b:9f:74:07:
24:21:c7:9d:a5:59:fd:8d:e0:e6:7c:e4:09:f0:9c:6a:32:b1:
87:7f:90:50:06:90:76:c8:54:83:8e:cc:10:68:0c:bf:bf:16:
e8:a9:1d:b2:9c:56:71:77:3d:44:56:ab:bf:27:e0:67:b5:5f:
82:ee:7d:75:fe:f7:78:2b:9d:dc:da:a9:4d:a1:de:84:da:21:
b7:d3:a2:ba:3c:35:9e:b9:ea:bd:50:a1:62:28:a2:1b:cf:96:
92:ca:47:33:3e:5d:46:76:d0:6c:e2:30:69:96:d3:d2:5e:87:
d8:4a:a4:b7
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 19 02:57:34 2024 by rpki-client on console-ams.rpki-client.org