Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61135.roa
File: AS61135.roa (raw, json)
Hash identifier: AeWSQ+NZZCgbTis2s1/vTimgaqsTuI8vaEy6jhrJJAA=
Subject key identifier: 69:0C:4C:5E:B4:53:6F:A9:1A:0F:84:6D:07:7C:51:7B:A5:79:8A:0D
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 178847CC2CFF8B78E285F6FF2389008712B2F815
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61135.roa
Signing time: Tue 02 Jan 2024 11:47:26 +0000
ROA not before: Tue 02 Jan 2024 11:42:26 +0000
ROA not after: Tue 31 Dec 2024 11:47:26 +0000
asID: 61135
IP address blocks: 179.61.191.0/24 maxlen: 24
191.96.233.0/24 maxlen: 24
191.101.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 00:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:88:47:cc:2c:ff:8b:78:e2:85:f6:ff:23:89:00:87:12:b2:f8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 2 11:42:26 2024 GMT
Not After : Dec 31 11:47:26 2024 GMT
Subject: CN=690C4C5EB4536FA91A0F846D077C517BA5798A0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:e5:ef:cb:cf:44:80:7a:c2:f6:50:e3:d3:
80:1f:f8:40:9c:51:68:eb:89:47:3a:0e:0b:08:ea:
b0:ee:25:01:8d:75:0b:42:d8:55:70:0d:70:fe:a5:
8a:43:bf:91:e7:0e:f6:6d:3e:b3:66:12:5f:1f:3a:
cd:65:76:96:f3:9d:86:b3:4c:54:82:6c:38:00:1d:
5a:16:64:3b:1a:3a:b0:c6:52:b4:19:11:48:6c:2e:
2a:e3:0e:53:b9:0d:68:9a:bf:ed:99:89:3c:d1:a5:
b2:30:4b:5c:57:7d:50:d4:e9:69:7a:32:85:a8:2e:
c5:3f:ce:b2:ab:72:3e:f8:e9:09:78:ab:2e:cd:70:
fb:49:b8:c0:8f:0a:1b:da:a3:4f:5c:e7:cf:d3:f0:
4d:7c:7a:e3:16:aa:e2:ad:63:22:f0:75:8e:cc:58:
34:85:5d:ef:80:96:f7:48:7b:04:13:0d:b4:68:99:
28:0a:4e:91:02:c6:c0:61:f3:29:e2:05:99:5e:bb:
a5:f4:e5:c9:d2:62:0e:93:68:65:43:0d:d2:e9:59:
ff:3f:75:40:21:6d:3d:a7:d2:26:c1:4e:bc:c9:a0:
fc:ef:cb:fa:40:e0:89:49:8c:a4:44:bf:af:71:51:
51:8c:84:df:89:e2:2b:2a:4c:c8:e5:c9:45:2c:f2:
be:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0C:4C:5E:B4:53:6F:A9:1A:0F:84:6D:07:7C:51:7B:A5:79:8A:0D
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.191.0/24
191.96.233.0/24
191.101.122.0/24
Signature Algorithm: sha256WithRSAEncryption
44:65:0f:a1:24:c1:c6:4c:9d:cc:51:aa:4c:5c:63:84:61:15:
bd:02:18:79:dd:67:a5:46:37:2d:2b:8c:b7:2b:f8:28:84:44:
d8:43:40:2a:c7:44:11:c9:87:c7:74:ef:5c:e4:49:ae:09:73:
99:cf:db:38:bb:f4:12:72:15:e8:8b:03:c9:de:1c:fb:ef:69:
f3:2c:5d:c7:fb:c9:3b:f3:58:76:7f:47:8d:41:42:7a:2e:e4:
a8:ca:c8:b2:ae:58:ca:23:54:66:74:f3:e8:df:c8:3e:71:e8:
55:9f:fb:79:50:30:9b:31:b3:0e:1f:1d:4b:91:8c:6d:fe:ff:
12:73:fe:b9:2b:be:3a:1d:09:63:22:89:64:af:98:fc:57:20:
36:27:28:a2:ce:05:d6:af:85:9a:7e:2a:31:fe:fc:c9:44:97:
93:19:ef:ee:45:3f:c7:47:cf:ab:85:c1:a1:99:1d:75:c4:2c:
39:ce:f1:8a:8f:ed:ae:cb:d8:9e:04:38:e4:48:97:c1:b2:3e:
05:79:a7:9e:75:00:7c:21:e9:4e:24:74:0a:58:55:f7:1e:e9:
68:4a:eb:a3:b3:85:35:7a:0c:db:57:d4:13:d3:da:b2:96:88:
84:cf:e9:ba:58:b9:13:34:ce:ac:71:2c:af:4d:50:37:f8:fc:
b8:4b:8e:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:52 2024 by rpki-client on console.sobornost.net