Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/38342e33382e3235342e302f32342d3234203d3e203231383539.roa
File: 38342e33382e3235342e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: EQkw43LbUi4n8z+AKfFioNVzzKjZs4Fbw3lXZH9DA0U=
Subject key identifier: 61:AF:B9:DF:23:49:67:B4:1B:53:42:DF:6A:3A:93:75:FB:F8:8A:F3
Certificate issuer: /CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Certificate serial: 53981FDF8C11DE0B50DB02DE8F609DFF934F5E3B
Authority key identifier: 05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/38342e33382e3235342e302f32342d3234203d3e203231383539.roa
Signing time: Fri 08 Sep 2023 05:51:59 +0000
ROA not before: Fri 08 Sep 2023 05:46:59 +0000
ROA not after: Fri 06 Sep 2024 05:51:59 +0000
asID: 21859
IP address blocks: 84.38.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:98:1f:df:8c:11:de:0b:50:db:02:de:8f:60:9d:ff:93:4f:5e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Validity
Not Before: Sep 8 05:46:59 2023 GMT
Not After : Sep 6 05:51:59 2024 GMT
Subject: CN=61AFB9DF234967B41B5342DF6A3A9375FBF88AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:f0:f6:2c:21:33:19:c1:8a:c1:5d:41:33:
32:63:8f:57:74:0d:19:da:fb:e0:ff:fb:5d:e8:2b:
81:d9:a0:a2:e2:10:fb:77:48:6d:b2:6f:0a:e7:fd:
32:29:65:a9:6e:33:07:c2:69:58:cf:fe:30:79:62:
51:31:be:19:38:d0:3e:0d:36:b5:83:d3:71:20:18:
b3:10:52:ff:2e:16:c1:73:32:0b:a1:34:df:29:f0:
b1:81:50:4e:cf:84:06:2a:92:5c:1a:00:07:65:46:
6a:aa:bb:8e:c1:17:bf:2a:04:cf:61:89:b6:3b:e5:
ce:83:27:df:3c:7b:3a:59:5c:12:99:d4:b1:98:84:
18:4c:c6:0d:67:88:d4:38:3e:c9:c3:2b:ef:d6:2e:
df:f8:00:14:40:4e:11:07:f7:3a:79:56:f7:9f:ad:
ba:af:dc:26:50:31:94:14:d3:2e:ca:e8:7d:05:a9:
7b:c6:45:62:2c:7a:14:93:81:ff:cf:24:60:c3:94:
71:b3:4b:b8:ed:e8:f3:06:fb:cd:c7:4e:ff:f1:87:
af:8a:41:5a:b5:42:2b:99:4a:ab:53:31:ac:52:be:
30:97:b2:c3:ea:32:0c:03:10:10:8c:b2:28:32:83:
e5:a0:47:e3:04:76:83:ee:b9:ef:aa:6a:62:d1:62:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AF:B9:DF:23:49:67:B4:1B:53:42:DF:6A:3A:93:75:FB:F8:8A:F3
X509v3 Authority Key Identifier:
keyid:05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/38342e33382e3235342e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.254.0/24
Signature Algorithm: sha256WithRSAEncryption
39:99:a3:b5:9e:e4:82:47:d2:3c:68:15:ce:04:6a:a6:c5:67:
33:60:7b:f3:40:44:c0:9f:9b:d2:9c:dd:04:e5:a4:8b:2c:b4:
51:8a:3c:18:13:d3:50:8d:23:e7:8e:1e:00:6e:a1:f6:6c:f7:
9a:03:33:91:d1:db:a0:db:08:a0:38:69:a4:6c:d3:6b:f4:18:
db:80:c5:79:14:62:79:5b:4c:42:c3:28:81:95:c2:fd:cd:5e:
aa:f4:81:e0:63:3e:fc:57:98:6b:25:21:ae:d8:8d:c3:18:f8:
27:e5:1c:ce:00:02:d3:19:60:fb:18:db:58:d7:21:f0:63:c1:
f8:14:52:10:a2:d6:04:60:2e:d2:d6:a4:d8:cc:cb:4d:e8:a6:
ae:df:98:16:60:e8:d6:53:45:8c:6e:a6:57:80:d1:c0:91:c2:
5c:cc:f0:70:74:66:36:79:30:82:e9:d4:eb:a8:dd:83:77:d9:
c5:47:15:b8:ac:84:4d:b8:98:d9:ee:ce:c2:ae:72:eb:df:7b:
fb:84:8b:82:ad:07:59:f2:0e:d4:3d:bb:6f:20:e6:f7:73:8e:
e2:e8:a9:b4:e6:70:0e:20:bf:5b:21:1b:bd:dd:dc:90:eb:e4:
46:34:c1:b0:66:15:ac:54:14:01:1a:99:4a:09:cc:da:65:05:
bf:66:31:32
-----BEGIN CERTIFICATE-----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Generated at Mon Jan 8 00:43:32 2024 by rpki-client on console-ams.rpki-client.org