Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137302e3139382e302f32332d3233203d3e203437353833.roa
File: 3138352e3137302e3139382e302f32332d3233203d3e203437353833.roa (raw, json)
Hash identifier: mv/lq0YnLLmQD3q6k/c/0Kcr2tZTzqB4247wt7nTMTw=
Subject key identifier: 03:30:DB:AD:8F:45:6F:8C:D7:2D:D9:80:57:E1:82:FE:F6:FE:CC:56
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2375CA8EEA042FB82920C6C3354BDAB8911CA11F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137302e3139382e302f32332d3233203d3e203437353833.roa
Signing time: Thu 23 May 2024 13:52:19 +0000
ROA not before: Thu 23 May 2024 13:47:19 +0000
ROA not after: Thu 22 May 2025 13:52:19 +0000
asID: 47583
IP address blocks: 185.170.198.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 13 Jun 2024 11:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:75:ca:8e:ea:04:2f:b8:29:20:c6:c3:35:4b:da:b8:91:1c:a1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 23 13:47:19 2024 GMT
Not After : May 22 13:52:19 2025 GMT
Subject: CN=0330DBAD8F456F8CD72DD98057E182FEF6FECC56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:2a:a1:8e:58:62:73:08:71:a2:8a:0c:37:
8f:97:c9:14:9b:28:a0:17:b1:d7:50:6c:0a:d8:32:
4c:db:73:c8:fc:6f:12:f6:0d:2a:79:73:2c:f9:64:
7d:10:e9:52:80:ad:a8:46:9c:fe:f7:69:99:21:61:
4c:2b:d8:9b:9e:a9:3e:18:23:52:10:aa:1a:b7:f8:
5e:b0:f9:ea:7c:16:66:e7:91:9d:28:99:54:ce:ad:
72:8c:bb:8a:c2:41:37:80:12:3e:81:36:e0:91:08:
e2:43:21:50:32:6f:53:13:4f:a1:98:7c:27:69:fe:
44:86:03:c8:a0:ab:f6:8d:30:15:4b:e4:70:1c:f9:
a7:cb:00:ee:d8:c1:06:89:59:6b:ef:c2:87:a8:8b:
6d:16:b7:a6:9a:9e:01:f0:ae:2d:bf:4e:81:91:f5:
af:9a:5e:11:5c:5b:6b:c6:61:79:a1:75:bb:27:3b:
55:4e:61:ff:91:ab:91:e2:7e:4c:a9:33:b8:53:39:
d9:40:12:70:b0:fd:85:2f:35:91:01:a0:e9:41:d1:
da:fd:d2:0b:17:63:8b:64:16:54:b9:47:21:84:74:
df:ec:a6:b5:5b:6c:65:76:80:93:e7:0a:38:ab:2d:
61:3b:e5:31:3e:ed:70:78:a8:c8:78:a6:25:22:bc:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:30:DB:AD:8F:45:6F:8C:D7:2D:D9:80:57:E1:82:FE:F6:FE:CC:56
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137302e3139382e302f32332d3233203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.198.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:d7:48:3e:a5:23:28:6d:e7:d6:6a:6c:5d:78:3f:47:20:f5:
c5:49:eb:3b:82:51:25:ac:14:f0:d5:5f:81:3e:40:06:ec:2d:
de:9f:15:0c:9b:b5:de:25:40:68:a1:a1:c7:8b:fa:c0:bc:03:
cd:99:92:5b:3c:d7:ef:36:ae:13:c7:86:2d:51:49:2c:91:8e:
8c:90:0b:3d:5f:f0:11:a2:be:f7:4c:9c:fe:b6:0b:66:13:60:
81:c5:9f:be:1e:19:41:3a:b4:3b:55:2e:bf:b9:d1:02:e6:75:
7a:69:77:c3:ec:da:4f:9e:80:ea:f2:68:04:9f:58:3d:99:5d:
b4:f2:ec:cf:e5:c9:13:29:fd:61:18:fb:fd:9c:91:b7:42:de:
6a:4a:6d:48:80:ac:d5:58:53:a6:75:5e:79:67:b3:66:97:1f:
35:4f:29:e0:95:99:f2:49:a7:c2:a3:0f:2a:16:20:8e:c9:fe:
07:fa:e4:3b:cb:84:58:bb:ee:f8:b1:75:e1:de:f3:ed:e0:61:
bf:94:d4:a4:9d:45:05:8f:70:eb:c7:0e:91:4d:da:49:b0:42:
85:be:49:47:f4:93:10:a9:7d:41:28:85:bf:a9:23:d4:1a:7f:
66:3e:0d:c2:f5:52:d4:e0:07:0f:ca:4a:c9:6a:d4:c2:dc:93:
5c:6c:7d:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 13 14:15:32 2024 by rpki-client on console-fra.rpki-client.org