Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS56106.roa
File: AS56106.roa (raw, json)
Hash identifier: BOlqLtUJWyODp9ut3OWizaUd/AJbPxb4eYy8kf0htmU=
Subject key identifier: A1:9B:71:0A:53:8A:89:86:0D:94:4F:E3:FB:C5:12:FA:3E:17:0C:8B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4640657B634E37AB5C67EBFCF8A08539453E1513
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS56106.roa
Signing time: Tue 03 Sep 2024 05:49:15 +0000
ROA not before: Tue 03 Sep 2024 05:44:15 +0000
ROA not after: Tue 02 Sep 2025 05:49:15 +0000
asID: 56106
IP address blocks: 191.96.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:40:65:7b:63:4e:37:ab:5c:67:eb:fc:f8:a0:85:39:45:3e:15:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 3 05:44:15 2024 GMT
Not After : Sep 2 05:49:15 2025 GMT
Subject: CN=A19B710A538A89860D944FE3FBC512FA3E170C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:46:57:39:07:ec:b7:29:a8:07:12:fc:14:
72:9e:2a:82:f7:11:a6:91:1f:b8:54:2e:d5:77:4d:
d5:70:d4:28:4f:74:b8:ae:6a:0c:64:a1:c3:84:19:
ed:fb:e3:eb:45:78:04:74:7e:73:0e:d3:b0:39:0b:
41:6b:bc:9c:b8:c6:5f:19:6d:a5:ad:80:9e:a4:01:
d8:e1:4f:44:8e:5e:cb:5a:72:d8:6b:7e:cc:91:55:
c9:39:90:1f:60:a2:03:00:c6:f2:ef:f3:07:90:ad:
7d:b7:36:05:a3:a4:0a:b0:88:fb:d8:78:28:d9:df:
74:01:78:65:cf:4a:68:5a:2c:a9:be:03:63:67:6e:
df:62:7d:cb:e1:15:c6:21:b4:69:27:40:fb:a8:42:
80:8b:82:c8:37:ca:2e:e6:97:aa:e2:04:81:e7:78:
51:5a:23:90:b9:b2:83:06:21:57:f9:66:9f:23:43:
ab:f8:62:c8:ac:0e:37:ed:af:0d:f2:ed:5b:0a:3d:
09:e2:f9:c2:69:97:2b:24:23:58:c4:80:54:6b:61:
ab:4a:66:91:67:6d:4b:dc:79:e0:63:64:3d:3f:a9:
e9:3a:89:97:7b:63:c4:6f:1d:83:73:5e:b1:fa:1b:
88:26:ad:f0:c9:53:44:f9:c2:e3:16:66:65:fc:32:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9B:71:0A:53:8A:89:86:0D:94:4F:E3:FB:C5:12:FA:3E:17:0C:8B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS56106.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.180.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c8:f3:fa:1d:66:2c:70:4d:11:b9:39:e9:7f:1a:4e:9f:80:
52:46:02:c4:22:57:7b:9d:5c:ca:ea:12:ee:5f:e0:49:f5:11:
de:c8:a6:45:84:0a:f3:fd:e0:e9:cb:04:75:54:35:8e:ec:fe:
d7:27:78:3e:b4:f9:34:51:1e:ad:05:a9:0b:e8:b3:d0:2d:d4:
da:c7:06:d5:7d:dc:13:e7:37:9a:9a:c7:aa:8c:fb:7f:ae:ec:
88:35:f5:46:f1:bf:13:50:11:77:00:99:3d:b4:d2:dc:0c:cf:
2e:39:c0:6c:ca:98:7c:a7:5e:89:8a:7e:92:1b:e0:3c:da:c3:
f2:af:5b:5d:4e:ab:bc:36:fa:59:08:b6:7b:a8:8f:fc:4f:db:
5b:4d:27:a3:87:0f:7a:da:a3:87:62:85:97:cf:d3:7b:42:0f:
fe:51:a1:8e:93:c1:2f:62:62:5a:39:e9:76:0a:d6:42:b8:ef:
ae:b2:d8:99:1f:5a:0a:19:a8:12:43:f1:3c:c3:21:f1:17:40:
0a:5b:f7:21:da:2b:23:d5:f3:6c:7a:e2:e9:79:bb:c2:46:ea:
90:6d:79:a1:eb:68:91:6a:3d:3a:3a:33:f6:42:41:6f:40:81:
f4:46:b0:33:5b:de:00:c8:42:f7:85:6d:db:49:4c:77:c8:f0:
2c:c5:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 02:52:08 2024 by rpki-client on console-ams.rpki-client.org