Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48678.roa
File: AS48678.roa (raw, json)
Hash identifier: NhbFVuD6YkhLKIIr3q9Q7H9m4Mrdj7bJr10WL4aN4pg=
Subject key identifier: A0:3A:C2:79:EE:22:EC:40:6C:BD:E3:F4:54:35:00:4D:33:F2:2D:C6
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0196C3D3637499040AAA8EA15290BAADFF3C9E0F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48678.roa
Signing time: Sat 15 Jun 2024 00:05:18 +0000
ROA not before: Sat 15 Jun 2024 00:00:18 +0000
ROA not after: Sat 14 Jun 2025 00:05:18 +0000
asID: 48678
IP address blocks: 181.214.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 10:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:d3:63:74:99:04:0a:aa:8e:a1:52:90:ba:ad:ff:3c:9e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 15 00:00:18 2024 GMT
Not After : Jun 14 00:05:18 2025 GMT
Subject: CN=A03AC279EE22EC406CBDE3F45435004D33F22DC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:ba:0f:97:8e:33:5c:29:3c:d6:b4:52:03:
1b:5b:7b:f6:ce:9b:41:13:ce:a3:fc:7b:e0:8e:0e:
2a:59:8e:bd:df:9f:1d:91:e9:59:b8:e5:ba:37:60:
ff:6d:32:5d:b2:9c:75:08:a5:b9:52:40:e2:56:cb:
86:e2:55:c1:f9:2d:b1:9e:db:52:bd:08:34:63:2f:
c6:65:00:11:0e:b6:2f:83:96:98:8e:9b:9f:50:39:
62:a1:d0:3c:7d:27:6c:3c:e3:e1:f8:09:f6:ec:62:
30:4a:f3:ae:6e:5e:ef:36:06:02:ec:9c:c0:66:0b:
3f:5c:66:e1:7c:af:a7:73:6d:5a:2d:5f:5f:da:45:
15:14:2d:0b:50:f4:32:55:b3:7b:67:cb:d5:0a:15:
8e:8e:7e:ec:65:3f:62:f8:c2:75:d7:ee:12:29:82:
8b:39:b7:36:2f:1b:db:81:4b:08:9a:bf:3e:ae:49:
f2:0c:a3:99:17:ae:b2:a7:e2:ba:1a:1a:a8:48:e0:
33:68:f9:75:d8:47:06:3e:f0:c3:f4:b3:21:28:33:
af:cd:1e:52:56:e8:1d:1f:ec:90:71:93:77:4b:f8:
09:01:fd:e4:00:71:1c:39:c9:35:c3:48:7d:b2:d9:
55:9a:45:03:59:dc:37:3a:ff:cb:60:bf:b4:01:fa:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3A:C2:79:EE:22:EC:40:6C:BD:E3:F4:54:35:00:4D:33:F2:2D:C6
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48678.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.154.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:55:bc:ca:a0:a5:1f:73:db:41:a8:3f:d7:87:7a:ff:8d:58:
e1:bf:64:e3:52:b5:e4:42:7c:7f:2c:89:fe:bc:ac:b1:c8:c0:
3f:75:a0:26:32:a9:08:d9:29:34:95:de:36:8b:de:48:0e:6b:
6f:35:16:9b:89:b9:12:dc:98:5f:26:a3:72:e1:6d:b1:3d:72:
92:8f:5b:9c:3e:c3:28:69:fa:c3:f7:be:49:20:f7:69:91:d1:
01:0d:da:91:d5:f4:75:5d:94:68:a7:b2:42:85:a8:0a:83:dd:
46:df:96:92:6d:24:8d:f1:38:34:8f:f4:eb:e4:29:25:b9:cb:
06:48:8f:d8:d6:d8:18:3e:e7:d2:28:78:a2:e8:8c:31:82:d2:
a9:8a:ac:a7:eb:0e:89:bd:de:b8:1a:d2:60:1a:af:dc:fb:df:
f7:6d:2b:01:ca:0f:47:d5:5a:ee:c4:4a:e0:d1:33:43:61:b2:
49:4f:fb:9e:26:e4:a8:07:81:9e:84:e8:ee:49:c0:cd:27:f1:
ab:36:19:26:1d:80:42:df:cb:25:d0:7f:96:8c:87:8b:ad:5e:
ae:7b:2b:43:69:1b:78:6b:c4:f2:d2:a0:06:a4:16:91:09:a9:
ff:7a:27:36:98:3d:78:2c:02:b3:9e:a2:75:19:dc:11:a4:de:
43:60:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 12:29:07 2024 by rpki-client on console-ams.rpki-client.org