Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS59538.roa
File: AS59538.roa (raw, json)
Hash identifier: NFfYZc0OxuMG7Mz2GelnD8P3bL88SN37TFRv+cUZcP0=
Subject key identifier: C2:92:69:63:8B:8E:35:70:C7:86:D4:86:C6:6B:31:AB:95:73:0D:3B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3BDDC6D01605087DB47BC2BAA6DA5B5A0CCBDFB4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS59538.roa
Signing time: Fri 04 Aug 2023 17:39:12 +0000
ROA not before: Fri 04 Aug 2023 17:34:12 +0000
ROA not after: Fri 02 Aug 2024 17:39:12 +0000
asID: 59538
IP address blocks: 181.215.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Dec 2023 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:dd:c6:d0:16:05:08:7d:b4:7b:c2:ba:a6:da:5b:5a:0c:cb:df:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 4 17:34:12 2023 GMT
Not After : Aug 2 17:39:12 2024 GMT
Subject: CN=C29269638B8E3570C786D486C66B31AB95730D3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:31:d0:91:20:e2:e6:60:87:44:9b:4c:0c:
a6:55:56:3c:bc:a6:85:18:b8:13:71:71:e1:ea:db:
35:3f:48:e0:7d:b4:98:e4:4a:68:14:60:b7:36:3b:
6e:37:88:34:a4:cc:49:d4:5e:75:f0:17:32:a3:30:
34:32:be:63:5a:30:19:a6:9b:6f:36:66:15:47:fb:
d5:1a:dc:05:d7:58:ff:35:33:40:1c:f7:a6:6c:6a:
b3:1f:73:d0:d8:51:8e:9e:3b:55:e6:75:7c:3a:3e:
ff:78:1f:31:9b:94:48:64:3d:31:c5:32:76:7b:48:
54:89:6c:b5:cb:ba:ab:ee:5d:a4:77:79:54:df:7c:
8c:e0:38:f0:f8:73:b5:5a:2e:31:e5:be:38:70:7a:
7d:22:9d:30:59:60:60:ae:3d:90:2b:a3:0c:a4:c5:
59:54:12:01:25:1b:a7:25:a9:8a:aa:62:bf:9a:c3:
99:7f:43:ac:41:77:7a:52:6e:02:3e:56:46:06:6f:
dc:a7:3c:49:bb:4f:18:27:8a:27:b5:b8:06:95:07:
73:83:2e:cf:9e:a6:10:d5:65:b3:30:2c:49:ee:36:
65:2f:b9:f3:3b:d2:1e:8b:ea:74:b0:f0:2a:a1:9d:
b6:8a:35:75:6d:5d:3f:8b:3e:99:cb:4b:d7:80:7a:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:92:69:63:8B:8E:35:70:C7:86:D4:86:C6:6B:31:AB:95:73:0D:3B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS59538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:2f:ea:20:5b:03:d7:8e:ac:83:38:ec:3b:77:a3:ba:5f:78:
45:cc:81:76:27:93:7f:1a:54:e7:ea:36:01:c9:57:03:a6:c9:
b5:e7:7d:ca:a9:6e:e0:9d:28:23:8c:b5:7b:5c:39:96:88:1d:
0a:fa:de:cf:cd:bc:46:56:4c:e9:51:5e:0c:3a:dc:bc:dc:26:
63:2d:ea:26:41:aa:c1:2d:dc:29:67:07:6c:46:ef:38:57:91:
ed:53:07:8c:65:c6:8c:7d:2b:ff:22:da:e2:73:df:41:84:cd:
55:92:e1:6a:ff:91:cd:f7:10:39:bc:cc:6b:f2:19:0e:b3:ad:
b0:1e:6b:65:c4:c0:ea:c9:de:86:21:b0:28:f7:02:12:64:bd:
05:e0:a7:77:22:ef:0a:46:0d:2d:0c:2a:b5:93:64:08:25:42:
33:1c:83:b4:bb:51:f0:29:d7:7c:b4:97:e8:9d:df:3e:5e:e4:
80:66:2f:cd:44:1a:86:a5:9c:01:3d:a8:62:99:15:b5:c3:12:
70:4e:87:2b:82:12:d5:d0:3f:70:25:bb:be:ca:1c:67:a5:4f:
0d:31:c3:ae:d0:8b:a7:da:c6:d0:76:84:97:e7:64:fc:bb:0d:
9d:72:30:cd:93:01:57:05:e6:7e:df:d5:ee:d4:6c:52:8d:de:
9f:77:eb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:05 2024 by rpki-client on console-ams.rpki-client.org