Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61335.roa
File: AS61335.roa (raw, json)
Hash identifier: v1C5VwiSVbcoGba5aVa4Ps63GAf7JZ+yuANzWYokiFU=
Subject key identifier: 16:D3:7E:3F:64:56:72:D0:4B:D0:A9:B6:B1:98:BC:66:BB:4A:CF:BF
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 26CAABCD8B44C2CF1292C6B285CF9B81E368DC24
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61335.roa
Signing time: Wed 27 Sep 2023 15:38:55 +0000
ROA not before: Wed 27 Sep 2023 15:33:55 +0000
ROA not after: Wed 25 Sep 2024 15:38:55 +0000
asID: 61335
IP address blocks: 181.214.128.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 26 Oct 2023 13:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ca:ab:cd:8b:44:c2:cf:12:92:c6:b2:85:cf:9b:81:e3:68:dc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 27 15:33:55 2023 GMT
Not After : Sep 25 15:38:55 2024 GMT
Subject: CN=16D37E3F645672D04BD0A9B6B198BC66BB4ACFBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:59:e9:08:6f:cf:bb:19:0d:ed:be:44:1b:
37:dc:f4:10:24:0e:63:42:f1:c0:47:6c:03:11:c2:
89:44:ad:e1:8a:27:4a:db:60:68:5a:78:ea:da:46:
7c:2c:43:43:cc:6d:dd:5c:e5:e7:40:11:b2:99:02:
be:d0:bb:15:5e:5d:7b:72:f2:da:a3:53:82:2e:fc:
4c:f4:6b:4e:fe:98:13:b7:9d:d9:c2:47:88:d8:bd:
94:7f:f5:03:2b:92:03:4f:5d:13:d3:c9:25:e4:51:
34:50:d2:e1:9f:67:54:a5:1e:f8:1e:42:57:5c:56:
6f:ba:f1:1e:13:7e:34:5d:4f:2f:4f:cb:99:69:91:
08:f4:b3:9f:62:2e:31:a5:2e:0c:b6:68:15:15:64:
f0:e1:e8:7d:b5:f7:ff:cb:59:58:eb:40:37:75:66:
4a:8c:25:52:fb:7d:21:e7:d6:66:e0:7d:df:ea:27:
fb:ef:b8:49:6a:72:b6:66:5b:e5:cc:06:5a:22:ff:
47:ec:eb:6d:e5:40:a3:37:de:fd:63:d2:14:a2:2e:
90:2f:1c:cc:61:9e:51:d9:6c:c3:6b:88:d7:e9:20:
30:6d:5b:f4:46:92:01:3d:be:95:b6:e1:5d:d3:5c:
de:91:04:5f:41:a9:1c:ac:24:aa:85:b9:49:50:c1:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D3:7E:3F:64:56:72:D0:4B:D0:A9:B6:B1:98:BC:66:BB:4A:CF:BF
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.128.0/23
Signature Algorithm: sha256WithRSAEncryption
87:cc:02:8d:2e:5a:0a:97:40:2e:3a:4c:fa:eb:6f:f1:bd:1c:
20:0b:e8:1e:46:b0:d6:48:c8:06:2d:80:48:84:1a:ff:d4:e2:
67:10:1b:79:f3:9b:03:42:de:92:c7:ac:1e:75:3c:fc:3d:0e:
cc:b3:df:0b:16:9a:fd:4d:33:e5:09:c0:49:d2:f7:7c:ea:3b:
b1:2c:06:1b:b8:43:a8:21:ac:b5:c4:54:f6:c1:2d:65:f4:06:
61:84:28:7b:06:af:0c:02:33:1c:22:1b:5b:18:f0:b7:2e:ad:
19:c1:c6:c1:79:e0:d0:69:7f:57:59:76:fd:93:93:57:e1:7d:
4b:91:c3:49:d3:11:aa:7d:c2:6c:0b:4a:80:64:46:54:50:63:
54:bb:61:27:3e:ad:05:02:da:8a:c2:0a:b4:06:2d:cb:55:8d:
7d:6c:e9:74:7a:c9:9c:1a:c1:11:0b:d9:42:70:76:50:9b:6f:
2f:90:eb:11:2a:c0:1d:81:61:bd:3b:2a:ff:6c:83:5a:a7:88:
2d:95:0b:eb:fc:64:35:f6:35:90:d6:15:ca:4b:2e:11:d4:75:
24:d5:cb:ab:0a:99:a5:fe:15:af:29:a1:e2:1c:07:97:61:7d:
c9:b2:d0:1f:ed:8b:98:cb:c2:de:d5:59:d0:46:6d:94:41:22:
57:fc:f1:5a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUJsqrzYtEws8Sksayhc+bgeNo3CQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzA5MjcxNTMzNTVaFw0yNDA5MjUxNTM4NTVaMDMxMTAvBgNV
BAMTKDE2RDM3RTNGNjQ1NjcyRDA0QkQwQTlCNkIxOThCQzY2QkI0QUNGQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb3FnpCG/PuxkN7b5EGzfc9BAk
DmNC8cBHbAMRwolEreGKJ0rbYGhaeOraRnwsQ0PMbd1c5edAEbKZAr7QuxVeXXty
8tqjU4Iu/Ez0a07+mBO3ndnCR4jYvZR/9QMrkgNPXRPTySXkUTRQ0uGfZ1SlHvge
QldcVm+68R4TfjRdTy9Py5lpkQj0s59iLjGlLgy2aBUVZPDh6H219//LWVjrQDd1
ZkqMJVL7fSHn1mbgfd/qJ/vvuElqcrZmW+XMBloi/0fs623lQKM33v1j0hSiLpAv
HMxhnlHZbMNriNfpIDBtW/RGkgE9vpW24V3TXN6RBF9BqRysJKqFuUlQwSLdAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUFtN+P2RWctBL0Km2sZi8ZrtKz78wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNjEzMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG11oAw
DQYJKoZIhvcNAQELBQADggEBAIfMAo0uWgqXQC46TPrrb/G9HCAL6B5GsNZIyAYt
gEiEGv/U4mcQG3nzmwNC3pLHrB51PPw9Dsyz3wsWmv1NM+UJwEnS93zqO7EsBhu4
Q6ghrLXEVPbBLWX0BmGEKHsGrwwCMxwiG1sY8LcurRnBxsF54NBpf1dZdv2Tk1fh
fUuRw0nTEap9wmwLSoBkRlRQY1S7YSc+rQUC2orCCrQGLctVjX1s6XR6yZwawREL
2UJwdlCbby+Q6xEqwB2BYb07Kv9sg1qniC2VC+v8ZDX2NZDWFcpLLhHUdSTVy6sK
maX+Fa8poeIcB5dhfcmy0B/ti5jLwt7VWdBGbZRBIlf88Vo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:05 2024 by rpki-client on console-ams.rpki-client.org