Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206995.roa
File: AS206995.roa (raw, json)
Hash identifier: eLTr5iPMCyeub7qF1wkw3kFLPSDAAZ8qk2smMQcKl8M=
Subject key identifier: 25:4F:C4:90:FB:3E:A1:07:AB:8E:9B:1E:C4:6F:6F:AE:60:D3:F0:89
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 302B38972E148F8ED0F28B0EAFF78E23C356B221
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206995.roa
Signing time: Wed 01 Mar 2023 07:08:12 +0000
ROA not before: Wed 01 Mar 2023 07:03:12 +0000
ROA not after: Wed 28 Feb 2024 07:08:12 +0000
asID: 206995
IP address blocks: 181.214.75.0/24 maxlen: 24
185.158.151.0/24 maxlen: 24
191.96.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:2b:38:97:2e:14:8f:8e:d0:f2:8b:0e:af:f7:8e:23:c3:56:b2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 1 07:03:12 2023 GMT
Not After : Feb 28 07:08:12 2024 GMT
Subject: CN=254FC490FB3EA107AB8E9B1EC46F6FAE60D3F089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:08:a2:3e:47:5e:93:05:0a:bf:16:8f:30:
17:a3:09:dd:80:d0:c0:4b:00:55:b6:3b:2c:93:18:
86:57:6e:a0:04:94:0c:5b:dd:1a:00:76:10:15:0b:
50:22:4b:7e:67:ff:3b:3c:17:bf:7b:89:db:68:99:
55:0d:b8:27:38:3e:d1:4b:a7:63:45:20:d0:40:5e:
0d:2c:72:f0:70:ee:be:7f:77:d3:2e:bb:85:23:90:
ca:fe:43:7c:b8:74:4b:c2:aa:07:2a:11:a3:2d:75:
9f:2f:1f:85:48:76:2f:59:5c:64:b1:1a:d3:f9:37:
e2:20:35:83:5a:2f:fa:a4:8f:26:a0:f0:30:9f:a7:
e7:cc:ae:6a:96:cf:01:33:57:3e:95:8a:76:e0:a5:
a0:a6:95:4f:2e:77:7d:d8:4e:53:8c:5f:f0:3f:a6:
12:af:b2:46:27:8e:65:19:1e:89:e6:f9:5e:85:73:
6e:5c:de:5c:13:c9:46:5d:df:01:2f:1b:fa:01:96:
fe:af:a3:53:d1:3c:66:f1:31:07:4e:f3:d4:9a:35:
12:9e:f1:e9:23:75:f4:a7:fe:fd:83:c7:eb:43:da:
31:3a:09:39:ee:1d:26:64:9b:10:53:d1:64:6b:e4:
9f:c2:21:58:00:95:f6:93:cd:dd:ec:7e:2e:ef:3f:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4F:C4:90:FB:3E:A1:07:AB:8E:9B:1E:C4:6F:6F:AE:60:D3:F0:89
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.75.0/24
185.158.151.0/24
191.96.154.0/24
Signature Algorithm: sha256WithRSAEncryption
74:98:a1:e5:b5:18:c1:13:94:47:19:73:a2:bf:58:0b:36:a3:
11:f1:d1:70:40:b6:38:e6:d7:54:35:33:53:98:48:a6:47:16:
f3:89:d8:e8:78:4c:dd:2e:11:34:7f:4c:cc:2d:c5:e7:93:e0:
9e:5e:64:e6:dd:a8:a4:e1:19:18:a6:d9:eb:23:fa:5b:ce:d7:
34:64:71:d4:78:41:40:37:66:97:cb:37:e1:8f:9a:67:7f:84:
8a:ca:51:17:75:fc:9b:41:83:ca:5a:4f:89:b8:50:17:f6:31:
d8:37:f8:6d:1e:4b:df:7d:1a:bb:29:d9:94:19:af:73:fe:09:
68:99:74:b1:6a:b7:ad:a2:52:f3:ba:2d:70:2b:74:1d:e2:99:
1c:b7:5e:70:a6:25:2e:3a:aa:2e:52:d7:3e:41:f1:5c:09:bc:
b9:b3:be:56:47:ed:73:02:44:0b:f8:5d:e9:c5:3b:85:d2:11:
d9:78:cb:80:ee:65:23:7b:5b:c4:0b:90:e7:9a:80:28:73:bd:
f3:d4:36:2b:a8:30:15:0b:f7:bf:f6:62:31:55:bb:83:e9:40:
d2:39:2b:a0:24:10:e4:b1:02:a6:b5:8b:31:7a:4b:46:b1:4e:
57:16:a1:49:55:bb:3f:77:95:fb:52:95:23:fa:2e:af:39:aa:
40:ff:f3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:03 2023 by rpki-client on console.sobornost.net