Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS36113.roa
File: AS36113.roa (raw, json)
Hash identifier: Mv5S180m7ttJZ9EkYSt+cl1zjVLgv7bXpZMvCcCuOYg=
Subject key identifier: CC:44:60:CB:AD:29:49:35:75:E9:1D:FF:C7:25:7B:31:FA:32:1A:B1
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 614E01FE2E4A78E71D041003F5450F3A81F3AC32
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS36113.roa
Signing time: Fri 24 Nov 2023 13:39:08 +0000
ROA not before: Fri 24 Nov 2023 13:34:08 +0000
ROA not after: Fri 22 Nov 2024 13:39:08 +0000
asID: 36113
IP address blocks: 181.214.2.0/24 maxlen: 24
181.214.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:4e:01:fe:2e:4a:78:e7:1d:04:10:03:f5:45:0f:3a:81:f3:ac:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 24 13:34:08 2023 GMT
Not After : Nov 22 13:39:08 2024 GMT
Subject: CN=CC4460CBAD29493575E91DFFC7257B31FA321AB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:26:86:5d:78:74:2b:04:f3:90:07:d0:54:
dd:25:19:19:a8:fa:db:9b:6a:12:78:ba:b1:fa:fc:
19:db:86:af:f9:21:e3:f4:04:d3:fa:eb:21:26:a6:
a9:f1:10:ee:cc:6c:13:13:9b:6e:9c:b3:a6:b8:05:
97:1f:41:70:ea:ce:cb:b0:13:7a:91:1a:5d:55:12:
21:33:2c:a6:90:51:e6:0a:e1:d2:ee:f7:a3:ec:71:
f6:8d:d4:e3:df:2e:04:2d:67:70:3b:ef:6c:b3:35:
ef:41:82:5e:4a:cf:b5:85:55:b2:59:17:9f:18:bd:
03:36:0c:17:67:08:ff:8f:70:eb:75:4e:bc:b3:72:
8a:a9:cc:45:94:b4:b0:58:a7:d9:c0:1f:fe:bf:ea:
a2:3e:cd:bd:94:16:45:45:e4:b8:99:74:a9:cf:78:
40:7e:c5:39:59:bd:4f:3e:01:80:16:0c:e7:df:98:
34:c2:6b:b1:5e:53:46:bf:dd:49:a6:63:49:12:b9:
34:13:18:a6:26:78:9a:39:71:48:18:0e:cc:c0:51:
ef:80:96:e8:47:e9:58:17:ae:26:be:76:e4:39:a5:
89:e5:5c:30:b3:76:ef:7e:64:18:8f:03:5e:80:e2:
d4:d0:94:2b:3a:ad:4d:d2:26:eb:92:36:52:30:8d:
cb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:44:60:CB:AD:29:49:35:75:E9:1D:FF:C7:25:7B:31:FA:32:1A:B1
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS36113.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.2.0/24
181.214.245.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ed:bc:f5:92:18:d0:c2:cb:d8:07:cf:73:92:cb:a5:90:a4:
93:3b:b5:70:4d:76:69:b2:9a:d3:29:a8:48:ba:7b:3b:13:32:
97:5b:c2:ae:a4:4c:a1:7e:f7:fe:7f:a1:2d:a0:81:31:a6:04:
89:83:a8:e1:2b:ad:1d:53:6e:c4:3f:99:1b:ed:c1:ad:58:c8:
fa:61:4a:30:3d:a0:05:0d:58:60:d1:5a:10:94:32:48:a8:36:
58:e4:d2:02:ff:cc:f1:70:3e:3a:bd:66:d4:0d:d2:01:29:08:
ce:45:66:07:39:8a:34:74:21:34:9b:f6:35:61:95:f9:a7:9b:
8e:e0:10:70:a0:03:53:ae:92:da:f5:7b:e6:9c:5f:9b:eb:4d:
eb:a9:79:1d:54:24:0c:b4:34:6c:82:d7:9c:44:05:e3:ae:07:
a9:04:95:05:d8:ad:2c:58:37:0e:c9:06:67:55:c7:a0:78:3d:
54:4e:b4:1d:d0:1b:77:d0:a8:c9:f6:12:e1:00:ce:46:f6:22:
8a:4b:bb:62:a7:67:0a:fd:58:60:49:be:54:15:41:3d:fd:35:
89:b8:b2:23:60:3b:02:26:8a:0a:3d:51:7c:94:d3:47:a4:89:
2d:dd:60:82:59:6c:f9:16:7f:fa:61:d3:70:9a:e3:f7:3a:46:
2e:fe:86:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:52 2024 by rpki-client on console.sobornost.net