Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136342e3130382e302f32322d3232203d3e2030.roa
File: 3138352e3136342e3130382e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: gZ86sqBsXyJOW+E9tO0thnVQ6FxpPhI3SALIBofTj4U=
Subject key identifier: D6:7D:A3:CF:39:40:18:D2:DC:87:71:91:06:51:73:64:BC:21:48:5C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 308727A0FE3A40BCFF4D5A674D6F63DDAF29B21A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136342e3130382e302f32322d3232203d3e2030.roa
Signing time: Fri 12 Apr 2024 08:49:12 +0000
ROA not before: Fri 12 Apr 2024 08:44:12 +0000
ROA not after: Fri 11 Apr 2025 08:49:12 +0000
asID: 0
IP address blocks: 185.164.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 25 Apr 2024 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:87:27:a0:fe:3a:40:bc:ff:4d:5a:67:4d:6f:63:dd:af:29:b2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Apr 12 08:44:12 2024 GMT
Not After : Apr 11 08:49:12 2025 GMT
Subject: CN=D67DA3CF394018D2DC87719106517364BC21485C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:62:2f:38:a7:c3:c9:0c:f0:48:4c:36:92:
3d:02:7a:cf:83:d1:a4:cd:86:56:cf:41:54:a3:5e:
38:de:ac:75:51:a4:c7:b8:25:07:c1:f6:2c:03:39:
5a:c7:28:27:cf:e8:ff:03:9c:9d:fb:fb:1a:75:6f:
a0:47:fb:70:dc:2e:56:04:47:0d:b6:05:5b:c7:79:
1d:07:d6:0a:30:e4:b0:1b:12:d2:4a:93:75:da:d7:
ca:14:4d:8c:93:ea:eb:5a:4e:3d:18:a5:fd:b7:42:
a3:6f:57:84:6c:e4:a5:22:64:a9:e6:5f:2c:68:d6:
80:35:0e:83:44:4d:2c:b8:1a:26:a0:84:6f:93:8f:
a8:77:61:c5:32:20:2f:e6:8a:1c:81:fe:8c:fe:c6:
0a:5c:8d:6c:35:61:fb:a8:44:7a:33:f7:79:9d:f4:
64:b0:b0:4a:ae:3f:f5:a2:1a:08:1f:1a:8e:4c:73:
dc:a5:2b:e0:82:8d:31:64:d8:41:13:14:bf:42:c1:
06:c5:51:4e:f2:e5:ab:37:68:a7:8c:3f:b2:65:28:
6f:5c:6c:08:35:e3:43:08:6b:12:f9:1d:a2:12:0a:
ff:17:80:fb:07:66:62:b7:b2:c0:96:86:f2:c4:86:
7a:68:15:da:24:f0:41:a1:2c:4e:68:ac:bd:ca:cb:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7D:A3:CF:39:40:18:D2:DC:87:71:91:06:51:73:64:BC:21:48:5C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136342e3130382e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.108.0/22
Signature Algorithm: sha256WithRSAEncryption
82:d9:82:78:b1:ea:dd:66:3d:3e:1d:c5:19:9e:d1:66:ca:e1:
d9:1c:9f:d1:dc:7a:8a:de:df:87:df:91:55:69:ed:b1:05:94:
df:75:8c:a5:2f:eb:69:0f:26:a4:e3:8c:49:e4:a3:81:f0:8d:
5a:91:f2:ea:8d:69:25:b3:ac:de:ec:3c:e0:5c:31:71:64:bd:
7b:ce:bc:cf:8f:2a:8c:0d:4b:9f:75:3f:da:75:b2:e9:6a:89:
b9:9e:ca:90:5b:e7:35:42:bc:80:c5:a2:3c:ff:aa:77:21:61:
97:61:70:08:64:93:4e:32:64:f0:a8:d1:92:1e:98:6e:a5:35:
c7:fa:6b:96:57:87:5c:b9:ce:e9:7e:14:be:7a:09:4f:96:9a:
da:e4:83:89:d6:f2:3f:e4:b3:5a:1d:f0:7e:d5:37:b2:83:32:
a4:97:3f:c0:a1:49:67:91:4c:f8:3a:ca:19:27:06:1d:86:85:
52:2f:04:c2:94:a7:b5:9d:67:ba:1d:7a:8a:46:32:b2:67:16:
52:ea:d6:38:e9:b6:65:6b:b2:8c:fe:14:03:01:94:c3:a0:4a:
80:39:1f:84:bd:88:e7:7c:3a:e2:7a:7b:b4:9d:c0:1d:7a:aa:
88:02:3c:e0:d3:17:7e:02:ac:b0:1d:c2:9f:d7:55:c7:74:00:
66:3b:64:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 18:15:31 2024 by rpki-client on console-ams.rpki-client.org