Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS44092.roa
File: AS44092.roa (raw, json)
Hash identifier: CQSRYlwo3zauqKzeAwtuu9FAK/3aQ+0iQpzMnwkyKkM=
Subject key identifier: 4C:31:D2:10:28:0E:7D:65:2F:9E:0D:91:6B:F4:32:AC:0A:12:5E:CD
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 191D94465F8025DF40AEE09E6391593C0A538B35
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS44092.roa
Signing time: Wed 01 Mar 2023 07:08:21 +0000
ROA not before: Wed 01 Mar 2023 07:03:21 +0000
ROA not after: Wed 28 Feb 2024 07:08:21 +0000
asID: 44092
IP address blocks: 194.110.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 08:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1d:94:46:5f:80:25:df:40:ae:e0:9e:63:91:59:3c:0a:53:8b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 1 07:03:21 2023 GMT
Not After : Feb 28 07:08:21 2024 GMT
Subject: CN=4C31D210280E7D652F9E0D916BF432AC0A125ECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:ae:1e:fc:2c:20:ee:5d:01:eb:08:9f:57:
93:c5:16:61:06:5d:a4:cc:c1:4d:48:4b:b3:67:bd:
50:d8:76:cc:c0:58:9f:4c:95:29:ab:b7:22:59:d0:
21:2f:83:49:2d:42:c0:f5:48:9a:f9:c6:37:04:5f:
ff:47:c7:63:56:37:24:f2:91:c3:1a:74:c8:b9:88:
b4:f7:71:41:10:5a:41:e8:0c:4e:0b:61:e1:ad:6c:
b9:99:53:b4:f0:c9:fd:11:02:b1:d9:f2:6a:c2:10:
57:cb:09:0e:0d:4d:37:6d:fb:76:1f:ad:4b:83:ae:
71:a0:6d:cb:26:5e:44:3c:89:25:5b:11:f4:ea:8a:
79:d4:b8:8b:4d:3c:69:1a:da:1a:26:92:01:a7:8b:
8d:34:fd:65:69:82:7e:7d:16:f0:e5:03:e5:5f:83:
93:c9:d9:61:7e:c4:5d:6a:c8:16:27:2a:29:70:e3:
b3:20:d9:d1:d7:0b:85:6f:de:89:4c:d2:f0:80:85:
59:ab:0b:70:06:31:be:61:ee:08:b5:ab:fc:d8:df:
6c:81:e5:20:4a:42:02:67:50:46:93:f3:11:2e:9a:
a5:9c:22:d4:66:d6:fd:5d:19:91:16:f6:7f:df:4c:
f8:54:58:9c:6a:32:55:9b:41:7a:c7:fe:07:07:34:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:31:D2:10:28:0E:7D:65:2F:9E:0D:91:6B:F4:32:AC:0A:12:5E:CD
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS44092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.12.0/24
Signature Algorithm: sha256WithRSAEncryption
38:7a:4d:80:ee:32:d3:33:7f:32:32:5e:d8:c0:24:39:f2:e0:
b3:59:54:13:50:7e:73:3c:d0:71:4e:1a:04:4b:8e:f0:af:0d:
6a:bd:c9:97:dd:26:23:13:20:18:df:37:c4:c8:39:88:9a:86:
9d:4c:4f:5a:21:06:02:7f:b6:11:c5:b9:b1:2d:3e:02:b0:5a:
c0:dd:83:83:39:00:64:21:0a:24:02:f9:32:c8:96:49:6c:d8:
22:61:25:b8:0a:4f:0d:0d:27:19:ca:1e:59:a0:b1:9a:63:36:
c5:7a:98:b4:1b:21:5d:00:aa:f1:82:e3:9e:36:d0:44:70:36:
1d:93:dd:56:40:6c:ee:69:3b:5d:ea:a9:cb:5f:40:2c:60:56:
57:49:e1:0c:28:56:f7:54:20:8a:ea:3e:18:9d:88:6c:e0:23:
81:5c:26:1f:e9:ad:88:d2:ad:7e:ae:8b:f4:8b:1f:0f:02:b8:
5f:4c:48:96:a2:c1:af:25:f7:88:4b:4b:63:df:49:94:c6:c9:
07:5c:af:6c:3b:a2:cd:58:a6:74:17:53:58:d1:11:1a:ca:63:
97:82:22:c6:20:94:2e:8f:4e:ac:d8:5c:c0:a4:2c:14:cb:b5:
8b:8f:96:c0:98:35:db:15:2a:b9:ee:74:2f:5b:bc:cd:ad:ae:
80:79:e0:c5
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUGR2URl+AJd9AruCeY5FZPApTizUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzAzMDEwNzAzMjFaFw0yNDAyMjgwNzA4MjFaMDMxMTAvBgNV
BAMTKDRDMzFEMjEwMjgwRTdENjUyRjlFMEQ5MTZCRjQzMkFDMEExMjVFQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+K4e/Cwg7l0B6wifV5PFFmEG
XaTMwU1IS7NnvVDYdszAWJ9MlSmrtyJZ0CEvg0ktQsD1SJr5xjcEX/9Hx2NWNyTy
kcMadMi5iLT3cUEQWkHoDE4LYeGtbLmZU7Twyf0RArHZ8mrCEFfLCQ4NTTdt+3Yf
rUuDrnGgbcsmXkQ8iSVbEfTqinnUuItNPGka2homkgGni400/WVpgn59FvDlA+Vf
g5PJ2WF+xF1qyBYnKilw47Mg2dHXC4Vv3olM0vCAhVmrC3AGMb5h7gi1q/zY32yB
5SBKQgJnUEaT8xEumqWcItRm1v1dGZEW9n/fTPhUWJxqMlWbQXrH/gcHNNT/AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUTDHSECgOfWUvng2Ra/QyrAoSXs0wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDQwOTIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCbgww
DQYJKoZIhvcNAQELBQADggEBADh6TYDuMtMzfzIyXtjAJDny4LNZVBNQfnM80HFO
GgRLjvCvDWq9yZfdJiMTIBjfN8TIOYiahp1MT1ohBgJ/thHFubEtPgKwWsDdg4M5
AGQhCiQC+TLIlkls2CJhJbgKTw0NJxnKHlmgsZpjNsV6mLQbIV0AqvGC45420ERw
Nh2T3VZAbO5pO13qqctfQCxgVldJ4QwoVvdUIIrqPhidiGzgI4FcJh/prYjSrX6u
i/SLHw8CuF9MSJaiwa8l94hLS2PfSZTGyQdcr2w7os1YpnQXU1jRERrKY5eCIsYg
lC6PTqzYXMCkLBTLtYuPlsCYNdsVKrnudC9bvM2troB54MU=
-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:52 2024 by rpki-client on console.sobornost.net