Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS61135.roa
File: AS61135.roa (raw, json)
Hash identifier: eSWwrLwK0pJS+dsyeNNFJ7ZeThOeEgu1KfuCdlbKo7Q=
Subject key identifier: 03:42:F8:B3:9B:B6:B3:8D:34:32:EE:4C:7C:4B:49:12:CF:34:AE:46
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 057128974E981C093958A6B6D22AE78BB511AE55
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS61135.roa
Signing time: Tue 02 Jan 2024 11:47:24 +0000
ROA not before: Tue 02 Jan 2024 11:42:24 +0000
ROA not after: Tue 31 Dec 2024 11:47:24 +0000
asID: 61135
IP address blocks: 141.11.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 14:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:71:28:97:4e:98:1c:09:39:58:a6:b6:d2:2a:e7:8b:b5:11:ae:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 2 11:42:24 2024 GMT
Not After : Dec 31 11:47:24 2024 GMT
Subject: CN=0342F8B39BB6B38D3432EE4C7C4B4912CF34AE46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:fd:26:dd:ec:9c:cb:27:1a:0b:91:b6:82:
cc:93:7d:50:41:69:5d:3a:79:91:9f:29:5a:42:fc:
7e:f4:4e:be:f1:54:4c:84:7d:33:29:ea:bd:45:6f:
e7:12:c9:31:69:5e:21:50:fd:d7:b4:e9:3c:cd:60:
a6:d0:7e:b0:7d:c9:ea:e9:72:ad:54:78:4e:62:01:
f1:3b:35:d1:57:ef:51:43:b1:12:fc:ea:f5:68:3a:
63:04:fc:cb:27:88:ed:42:18:2e:46:0d:51:0c:81:
93:5c:cf:21:0e:df:34:8d:3b:5e:69:cf:a4:1f:1c:
ba:5b:47:32:61:a4:29:00:a2:ba:b0:69:a5:aa:3c:
dd:68:41:5c:05:83:4e:3f:29:ce:46:8e:92:9b:8d:
06:67:0c:8b:d0:74:83:0c:9f:23:bf:0d:44:b7:7b:
18:45:de:58:e5:2b:99:5e:ce:6b:58:04:e2:8c:16:
55:8b:fb:5a:e0:80:06:91:af:f0:f2:90:41:04:10:
b3:79:70:4d:ba:12:3f:99:21:7d:f2:6a:77:c3:38:
3c:6c:ec:52:7e:50:8a:a1:bc:c4:9e:e4:4b:64:77:
0b:c4:9c:33:f2:4b:8d:70:15:d3:99:ce:56:9a:d0:
e5:83:d6:75:f6:ba:80:00:47:d9:7b:fb:bc:07:9c:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:42:F8:B3:9B:B6:B3:8D:34:32:EE:4C:7C:4B:49:12:CF:34:AE:46
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS61135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.241.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f3:28:d3:5e:22:fb:9b:0f:3f:4b:00:3e:9e:1d:fd:ba:3b:
84:54:0e:0a:50:cd:d9:06:86:99:42:f4:a1:0a:27:d8:e1:46:
c3:d1:f4:ee:6b:df:c8:f6:49:27:8e:2f:ce:a6:a4:46:59:df:
39:e7:dc:f5:5e:e3:01:af:ea:57:92:50:0f:3a:b5:fa:3b:9a:
f6:2e:ee:6b:0c:f8:6e:cd:16:e2:5c:fb:ac:44:14:8d:ea:f5:
fd:d0:c4:a8:1e:06:34:c0:10:67:19:1d:cc:cd:47:e4:7f:a1:
64:49:e0:4b:1c:18:60:0f:fb:86:f8:13:66:e0:ad:55:49:26:
b4:a9:dd:5e:96:41:38:7b:56:66:d3:69:9c:fb:cf:94:fb:2c:
64:9a:9e:62:dc:9e:5a:29:61:37:df:96:81:6a:38:be:b3:60:
48:3d:09:34:dc:38:2e:a0:a2:5a:71:95:96:84:b8:e9:ce:f8:
86:96:a5:7c:7d:62:29:df:87:dc:1d:1e:4d:e0:79:96:a1:19:
18:a9:33:04:cb:e1:b5:45:d9:35:a3:5c:cc:09:2f:20:f2:a6:
39:dd:70:98:f0:c7:58:98:75:aa:26:bc:a2:be:5d:21:43:cc:
07:6c:fc:45:97:94:75:cc:8b:ca:31:d6:14:c7:5d:3d:f6:d1:
c6:a9:60:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 18:10:26 2024 by rpki-client on console-fra.rpki-client.org