Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61135.roa
File: AS61135.roa (raw, json)
Hash identifier: CQYKKMIs1HUoy0328b5NaYz5kPXQz8wn+0T3+vG82hU=
Subject key identifier: DE:AA:F4:8D:9B:8A:31:D0:37:9E:C3:2A:B6:98:1D:A8:BF:17:35:3A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1B821A27007C720864D847896F4EDD8A32D2C91A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61135.roa
Signing time: Sun 04 Feb 2024 14:46:51 +0000
ROA not before: Sun 04 Feb 2024 14:41:51 +0000
ROA not after: Sun 02 Feb 2025 14:46:51 +0000
asID: 61135
IP address blocks: 191.101.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Feb 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:82:1a:27:00:7c:72:08:64:d8:47:89:6f:4e:dd:8a:32:d2:c9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 4 14:41:51 2024 GMT
Not After : Feb 2 14:46:51 2025 GMT
Subject: CN=DEAAF48D9B8A31D0379EC32AB6981DA8BF17353A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:34:e7:75:d3:f3:20:78:d8:3b:51:9b:31:
9b:3b:ce:12:63:93:6f:ac:c6:5e:45:d9:91:9a:07:
b1:83:b3:22:c3:ad:b4:b0:65:b4:cb:c8:77:0e:ec:
60:92:d7:bd:5a:c3:ab:d4:99:e8:aa:02:a3:c6:e7:
b6:36:fc:24:d6:57:87:7a:54:1b:b8:28:a8:b9:6c:
0d:d9:60:56:ed:6e:f9:f3:da:72:a9:fc:98:02:fd:
25:14:8d:24:60:64:bc:86:59:34:e2:b4:d2:24:10:
42:31:b4:d0:2a:e9:e6:c8:8f:fb:e0:03:b4:e9:4b:
cd:0f:05:b5:89:72:d6:54:42:69:e8:cb:de:db:21:
c0:f6:3d:91:99:3c:91:5b:d5:f7:cb:0c:84:ac:b6:
1c:e5:85:ef:73:55:b4:cf:39:93:a6:54:cc:a9:27:
45:26:42:20:c9:5f:93:9c:23:23:79:49:e2:b8:91:
8a:12:a9:64:54:15:fe:19:b5:0d:f8:da:79:96:78:
d5:3c:79:65:9e:b4:8c:0a:82:5f:26:4e:1e:1b:f3:
b8:f6:b3:0d:ac:d6:ec:36:0c:a3:fb:ca:32:2b:80:
3a:09:94:80:69:1c:db:a9:d0:f8:9d:66:a4:d4:0f:
c4:85:e1:29:70:48:9a:77:62:d9:7f:a9:d1:52:34:
2d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AA:F4:8D:9B:8A:31:D0:37:9E:C3:2A:B6:98:1D:A8:BF:17:35:3A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.122.0/24
Signature Algorithm: sha256WithRSAEncryption
34:60:1f:5d:d1:f3:70:d4:3c:5c:81:6e:7c:6b:f3:7f:f8:a3:
fa:d5:cc:96:1c:fd:ad:e0:e1:4b:ac:a3:da:0b:b9:62:9e:21:
c2:c8:a8:a5:7e:2c:2f:aa:97:6c:b8:6a:f4:60:a3:ea:55:4a:
03:50:e7:9e:d9:a9:af:8b:30:2c:27:c4:35:21:38:4c:15:b9:
c2:c5:98:a0:53:8f:d6:ed:bd:5f:d1:ef:86:7e:6c:bf:bf:d3:
bd:8d:ba:e7:fa:cb:72:4d:0f:7a:d8:21:6c:37:06:da:9d:0b:
ed:06:75:4d:cf:25:73:d2:b9:cc:55:4a:f1:d3:b1:88:81:73:
55:0d:0b:d5:61:b8:d1:3f:2c:52:0a:e1:a5:5d:91:1f:f6:ba:
37:8e:bf:22:4c:d7:9c:bf:a6:f7:c8:7c:21:32:29:df:e5:3b:
24:96:a6:69:56:dd:8c:54:b9:fc:25:0d:2e:6f:d3:f3:fc:c7:
e9:e6:ca:d1:04:71:01:32:2b:71:6b:93:cd:ba:8d:75:2a:4b:
fc:0d:15:0a:a6:1f:12:ea:6e:a2:63:c7:4d:3b:1d:3f:4b:b8:
ef:81:c0:2b:ca:96:3a:3a:3d:bf:60:c8:f5:28:d3:6f:b8:1c:
7b:ea:7e:28:07:89:ef:2f:69:f7:50:21:d9:77:7e:36:c4:f4:
fa:65:8f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org