Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS59426.roa
File: AS59426.roa (raw, json)
Hash identifier: nXXXbMAgDuvqz25DndTnBD9bi5UC3eI0ECKVXsSOesU=
Subject key identifier: 24:22:63:BA:ED:C4:DB:9F:CA:4C:53:29:3B:DA:A7:86:AA:6E:BB:1A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 274494E5B732E2154A9AB463E3EBCB8DA9DEC6E0
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS59426.roa
Signing time: Wed 21 Jun 2023 20:47:36 +0000
ROA not before: Wed 21 Jun 2023 20:42:36 +0000
ROA not after: Wed 19 Jun 2024 20:47:36 +0000
asID: 59426
IP address blocks: 179.61.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:44:94:e5:b7:32:e2:15:4a:9a:b4:63:e3:eb:cb:8d:a9:de:c6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 21 20:42:36 2023 GMT
Not After : Jun 19 20:47:36 2024 GMT
Subject: CN=242263BAEDC4DB9FCA4C53293BDAA786AA6EBB1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:7f:f6:cb:f0:b1:33:31:51:83:84:4c:66:
05:75:2d:39:e0:ef:f0:da:a5:a1:0d:5d:61:d7:10:
58:69:f9:cd:f4:a2:76:c3:bd:84:46:43:65:11:c4:
9d:42:ab:c8:a1:85:84:0a:ed:7e:d3:00:74:14:ac:
f0:ce:44:48:13:65:39:62:19:c3:1f:81:fe:de:48:
a5:b6:1f:a7:74:dc:03:dd:ef:45:9c:86:5c:fb:17:
e9:99:b8:82:ef:4f:90:7c:8e:10:84:60:85:cc:92:
b2:78:b6:ee:8f:ff:f0:a7:c0:00:18:3c:1d:96:fe:
6e:9e:85:45:63:35:dd:8f:28:05:ec:0c:47:19:4e:
dc:59:d8:96:0b:57:78:be:f3:f2:24:d2:c3:58:88:
ed:2c:79:a2:66:db:90:40:a8:4c:3e:37:c4:80:42:
ae:d4:b6:55:e0:e7:69:90:81:38:7c:17:b1:44:4f:
fc:1b:3e:5e:17:5b:71:63:09:c4:22:89:b4:6d:17:
e5:53:78:6a:78:6f:ca:2d:d5:26:93:0d:3e:90:e1:
f2:e1:73:b0:09:94:32:e5:ac:0d:fa:34:e9:db:40:
9e:6c:44:40:d8:88:23:8d:eb:0d:39:44:f8:8f:7e:
1f:37:7e:c2:2e:a2:6a:48:00:11:ec:1e:2d:28:fe:
2f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:22:63:BA:ED:C4:DB:9F:CA:4C:53:29:3B:DA:A7:86:AA:6E:BB:1A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS59426.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.226.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:92:95:65:83:0d:71:f8:50:d1:a8:19:ef:f5:fd:26:92:98:
2b:09:31:36:dc:97:87:94:de:8c:ff:7c:3b:8f:a4:63:04:39:
56:ed:13:f4:7a:9d:fa:e5:45:12:df:f3:5d:aa:38:45:93:ef:
e0:d5:2c:a1:69:9d:34:9e:e6:94:e6:dd:fd:5c:65:e1:81:c9:
ad:b2:7a:2d:ba:5f:7b:b6:3e:cf:59:63:43:06:dd:68:50:9f:
b7:03:2d:07:9a:b4:ea:a2:0f:e1:63:9a:91:d4:bb:16:28:8d:
11:af:cf:09:98:2e:f8:0d:9d:50:ac:31:88:ed:71:df:b1:75:
1c:a6:62:d0:ef:8c:66:1c:fc:b2:63:79:49:5b:da:80:7c:db:
5e:08:c5:d4:96:37:ce:56:12:22:b2:1d:1f:d9:e0:db:c5:87:
43:ad:18:35:74:79:c7:9b:14:69:3d:b0:5f:5c:79:bf:54:c1:
64:43:18:d9:14:92:6e:7b:9c:01:35:ad:ff:6e:84:32:a5:a2:
84:7c:92:da:41:08:8d:66:2d:48:11:17:ac:b0:8b:db:5c:9c:
ab:f7:4a:09:69:42:7a:04:8e:fe:bc:8d:5b:7c:88:90:e7:c1:
6f:a4:be:28:3c:2e:54:09:ef:3d:fc:c1:89:0f:38:4d:cf:35:
32:ac:23:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org