Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39342e302f32342d3234203d3e203433323839.roa
File: 3138352e3234342e39342e302f32342d3234203d3e203433323839.roa (raw, json)
Hash identifier: 3wuCZOkG/1/5wl3gB2FyvEZ/Ok6zPXflGkSzQcNWhUU=
Subject key identifier: 09:FA:E9:FF:AC:96:50:65:47:7D:44:2F:DF:D7:3D:FC:9E:59:85:62
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 099325E12F11CFAC7B01475AD82D2467585096
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39342e302f32342d3234203d3e203433323839.roa
Signing time: Wed 17 Jan 2024 09:52:36 +0000
ROA not before: Wed 17 Jan 2024 09:47:36 +0000
ROA not after: Wed 15 Jan 2025 09:52:36 +0000
asID: 43289
IP address blocks: 185.244.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Feb 2024 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:93:25:e1:2f:11:cf:ac:7b:01:47:5a:d8:2d:24:67:58:50:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jan 17 09:47:36 2024 GMT
Not After : Jan 15 09:52:36 2025 GMT
Subject: CN=09FAE9FFAC965065477D442FDFD73DFC9E598562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dd:f4:81:79:96:20:31:19:f1:39:fd:38:f6:
23:44:4f:b3:52:f0:23:48:53:c9:0b:6c:fd:77:69:
24:b4:38:5b:89:41:49:e5:28:92:54:88:d8:b0:45:
c2:c9:e8:ab:cf:04:e4:e9:cc:1a:59:07:63:80:2e:
43:7d:b3:f7:d9:93:e4:35:d5:35:a8:55:4c:42:dd:
ee:5b:b6:f3:af:64:56:73:a7:23:18:bb:0a:87:e1:
74:c3:54:15:c1:6f:d6:ff:da:89:f4:26:dd:cf:e2:
32:a4:1a:d0:21:11:88:a3:35:e5:dd:d9:7b:f8:be:
f0:0f:15:2d:da:89:4c:2a:6e:d8:cc:f3:68:d8:de:
cc:d7:c4:bb:9b:c6:23:de:47:c3:91:ad:ec:ff:1e:
23:74:47:7c:13:99:1d:40:79:ea:77:62:97:1d:ee:
5b:79:71:de:0f:48:79:5f:ad:87:6a:c3:38:ad:f0:
2b:23:7b:7f:68:d0:e6:30:ea:73:4a:bc:aa:34:cc:
1b:3c:eb:3d:dd:8a:1e:b7:44:ad:2d:fe:b3:b0:4d:
44:a3:b1:5c:63:18:5c:20:ab:33:3e:d2:6f:2b:a0:
a1:aa:d6:86:23:89:de:a1:7b:76:71:ab:42:4d:08:
d1:14:dd:05:9e:22:59:43:60:2f:f5:98:89:8a:d8:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FA:E9:FF:AC:96:50:65:47:7D:44:2F:DF:D7:3D:FC:9E:59:85:62
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39342e302f32342d3234203d3e203433323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.94.0/24
Signature Algorithm: sha256WithRSAEncryption
86:de:d9:88:48:59:68:d9:4f:f6:1c:77:ef:d7:27:b5:99:91:
3f:e4:33:f2:7b:3d:6d:44:0a:5c:76:5b:8c:eb:82:19:10:81:
3e:df:bb:39:23:09:9e:79:54:a1:5c:01:87:10:52:68:15:30:
d4:d2:76:24:0d:58:95:1f:49:ad:73:69:21:3a:ec:7b:9f:81:
38:75:87:5d:0f:86:a1:86:14:dc:ec:48:0d:b7:4c:b8:ba:45:
79:92:66:fc:56:67:a4:27:c9:ea:0f:a2:e5:cb:29:61:db:80:
96:1b:1e:6f:c1:6e:a1:66:06:41:ca:01:df:05:68:f6:9b:fc:
dc:a4:83:3f:d7:29:b2:1b:5d:ae:69:4e:d2:e0:9b:50:ae:c9:
c2:e3:5d:c7:3f:c4:c8:a3:ab:e9:63:c7:d3:b8:d8:a3:d8:82:
0f:37:32:a1:3e:c4:0b:5b:ed:06:a5:a0:2b:b6:c9:fc:30:6e:
ea:92:21:b6:e2:ad:04:69:58:df:93:39:dc:fe:cb:69:eb:33:
64:d8:fa:62:11:6b:2f:59:a8:0a:69:f8:69:2c:13:0b:a3:13:
34:c3:76:1f:47:89:84:7f:7e:2b:2f:97:c0:74:c6:ef:45:17:
bf:01:91:76:1a:8d:cd:a1:f9:09:bc:3b:c5:a4:df:a1:06:05:
95:79:75:6b
-----BEGIN CERTIFICATE-----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Generated at Sat Feb 17 01:11:11 2024 by rpki-client on console-ams.rpki-client.org