Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51765.roa
File: AS51765.roa (raw, json)
Hash identifier: SnkSQQyqNAgJ8dqfmgHMWIoM0w8haqC4+I8SWnYurek=
Subject key identifier: 6B:05:8B:7B:41:C6:66:5A:5C:CB:AF:BE:05:80:4E:66:B1:ED:26:F2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 072EFCC2C38CDE5994EFEB758DD7404D5273115A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51765.roa
Signing time: Thu 31 Aug 2023 00:00:11 +0000
ROA not before: Wed 30 Aug 2023 23:55:11 +0000
ROA not after: Thu 29 Aug 2024 00:00:11 +0000
asID: 51765
IP address blocks: 181.215.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Oct 2023 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:2e:fc:c2:c3:8c:de:59:94:ef:eb:75:8d:d7:40:4d:52:73:11:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 30 23:55:11 2023 GMT
Not After : Aug 29 00:00:11 2024 GMT
Subject: CN=6B058B7B41C6665A5CCBAFBE05804E66B1ED26F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:33:8e:93:85:98:3a:76:d1:11:f8:fa:6c:
a5:dd:e2:af:af:29:5f:06:bc:d9:55:90:9b:a7:35:
e7:39:50:38:88:48:84:4f:68:ed:3a:e4:a5:ad:f8:
b6:6c:d5:13:66:63:fb:ec:29:6f:fa:a5:bf:1f:3f:
9a:a5:ab:0e:c6:b4:6b:5b:d0:4d:ed:eb:08:c5:3e:
d2:dc:92:ed:7a:6b:2c:13:ad:e3:c3:2c:c9:d5:46:
2e:e0:9f:27:a8:25:23:a2:b1:4c:42:c9:27:d8:70:
62:01:2f:29:43:0d:1e:54:81:41:9f:a4:2c:d7:4e:
18:30:ca:08:c0:7e:7c:92:3a:e9:34:f1:f1:94:06:
81:ef:7c:7e:1d:30:62:23:22:79:20:d6:f4:1d:f2:
ff:9f:e9:5d:d3:13:69:1c:79:7c:40:d5:c5:49:48:
de:e2:a2:4f:6d:87:52:3c:ef:f2:6c:4c:c8:49:e0:
8c:2e:ce:af:30:ae:ff:d9:0d:c6:2f:da:dd:87:90:
2a:e5:bc:fa:7c:ae:d0:a4:63:2c:31:e1:9e:2e:1b:
88:31:37:83:f1:10:be:32:2e:8d:69:68:81:4d:e2:
5a:4b:62:45:a0:9f:3f:6c:1f:2e:48:00:0b:eb:94:
4f:b4:9f:5e:56:9d:92:4c:49:ac:89:6a:c5:0d:f9:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:05:8B:7B:41:C6:66:5A:5C:CB:AF:BE:05:80:4E:66:B1:ED:26:F2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.204.0/22
Signature Algorithm: sha256WithRSAEncryption
08:37:12:90:d5:35:ae:81:c8:a8:6a:30:7d:40:ce:2e:46:c8:
b9:f2:30:33:dc:a6:46:c3:62:b6:7e:6f:5e:aa:29:59:27:ab:
1d:b3:cf:ed:8f:7d:6f:0d:70:f3:c4:7d:18:fd:46:19:0a:67:
8e:ce:4d:9d:e0:22:6f:25:74:f6:c5:8d:fe:cb:34:10:d1:49:
51:fa:8c:b3:e3:0a:5e:f2:65:11:27:fe:af:48:f5:8f:e3:ef:
ee:fa:e7:9d:aa:6d:5f:79:db:e3:d1:67:74:d6:c4:69:1a:4e:
38:93:83:63:ad:10:20:61:5a:cc:4a:13:b7:58:0c:89:08:7f:
35:7f:11:b6:51:57:81:ec:1b:13:5a:77:a4:10:8d:67:f2:8a:
8a:a7:ed:df:3d:aa:c9:17:89:3f:5a:94:27:8e:d8:c0:af:41:
da:5e:a5:1c:72:a9:02:d6:20:51:e6:46:a7:01:86:d1:57:33:
f8:ee:c4:9a:9d:25:c2:00:35:a1:81:a0:5e:cd:40:13:d3:5b:
6c:85:09:ca:d8:fe:16:9d:29:27:cc:ff:1d:20:85:af:19:70:
da:e9:e8:1c:bc:15:1f:a2:30:60:68:aa:61:f2:21:b1:ed:fd:
fc:87:01:2c:ac:0e:c9:0a:15:62:af:71:e7:e5:87:81:1e:f0:
2f:af:10:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org