Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137332e3130382e302f32332d3233203d3e203437353833.roa
File: 3138352e3137332e3130382e302f32332d3233203d3e203437353833.roa (raw, json)
Hash identifier: lu9vBk/ipf8eSXTNkTafBvYJJmCUbWloWwEcmGLDEGE=
Subject key identifier: CC:89:BA:83:4C:1F:D8:A2:3B:C5:24:F3:C8:A7:D6:9E:D1:80:72:CD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0D18A3423B99C58122F2D943021E5D17A61C1C58
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137332e3130382e302f32332d3233203d3e203437353833.roa
Signing time: Mon 27 May 2024 12:35:06 +0000
ROA not before: Mon 27 May 2024 12:30:06 +0000
ROA not after: Mon 26 May 2025 12:35:06 +0000
asID: 47583
IP address blocks: 185.173.108.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 13 Jun 2024 11:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:18:a3:42:3b:99:c5:81:22:f2:d9:43:02:1e:5d:17:a6:1c:1c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 27 12:30:06 2024 GMT
Not After : May 26 12:35:06 2025 GMT
Subject: CN=CC89BA834C1FD8A23BC524F3C8A7D69ED18072CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:9a:9a:be:70:ec:67:c4:48:43:f4:ed:fd:
f3:ff:26:fa:20:de:e9:bf:e5:e8:c3:b5:05:5d:d8:
35:ab:03:7a:9a:47:16:40:b5:79:4a:f2:26:90:70:
98:4b:11:71:59:ad:c7:b5:fb:06:5f:c5:86:3d:da:
e2:fc:da:e7:c2:e3:3c:96:92:da:cf:8d:1b:18:30:
fc:6d:7b:38:ba:29:ed:8f:6f:ca:86:fd:76:60:c1:
16:ad:8a:66:97:6a:88:fb:59:c8:75:f2:7f:db:1b:
b5:82:90:d6:3b:bd:58:b5:b4:7e:50:63:9f:dd:c9:
a1:8c:b7:1b:48:be:5e:8e:cb:bd:77:06:6d:b9:2e:
c0:50:06:bf:d7:e6:3b:70:a0:de:18:a2:b9:7c:03:
fb:b9:f2:08:97:f3:9b:6f:3d:d8:b0:0a:fc:fc:dc:
0b:43:15:ab:de:b2:b2:50:52:5a:85:bc:73:63:c2:
fa:5f:c3:54:e2:e9:27:6b:50:4b:3a:e2:e4:66:e6:
29:d3:0d:3b:02:bf:97:47:e4:f3:2b:13:3d:66:22:
9b:fb:05:99:bf:2f:8d:ae:7b:0a:ed:60:e5:43:d4:
10:5a:f8:44:89:76:5d:2e:c4:01:47:5c:98:13:5a:
0c:53:80:19:35:66:72:28:0a:59:0b:22:f0:9b:65:
ab:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:BA:83:4C:1F:D8:A2:3B:C5:24:F3:C8:A7:D6:9E:D1:80:72:CD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137332e3130382e302f32332d3233203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.108.0/23
Signature Algorithm: sha256WithRSAEncryption
86:77:fd:fb:c3:91:50:17:1f:29:2b:23:33:1d:42:db:32:33:
e2:64:f9:c9:96:4d:36:89:39:60:70:4f:3e:61:8c:a7:35:1e:
e2:8e:8b:6c:d7:e2:b3:c5:ca:4a:dd:11:9d:42:aa:62:23:27:
9e:66:4d:d0:fd:7d:70:dc:6b:ee:b9:a5:4c:f1:d5:a9:fa:8f:
76:0c:cd:3f:08:2a:65:29:85:e3:df:3b:c6:6b:67:2b:ef:66:
b4:df:0d:ac:96:9f:38:4c:eb:88:ae:09:9f:7b:b4:19:1b:fd:
e4:c2:c3:4b:79:0d:3e:5b:90:d3:11:d6:35:85:16:4a:db:ea:
90:61:c2:92:c3:39:15:c2:47:f0:ad:73:12:70:09:71:3b:84:
c0:7a:8b:b7:ad:93:e6:a6:39:dc:ff:7d:5b:98:6f:90:8e:fc:
85:c1:d1:0a:f0:d9:ca:7b:53:19:cc:99:87:39:01:24:09:af:
b8:71:b2:7a:74:0c:83:ca:36:f8:68:2c:53:e3:0b:4f:56:88:
ef:ca:3e:a4:3a:79:2c:4f:87:a9:69:8e:ad:a0:ed:06:3f:85:
ef:48:1e:04:8c:09:da:a2:f8:29:c8:d3:59:1f:aa:08:64:b9:
2a:09:76:58:e0:89:c7:5c:c5:2c:ff:22:2f:88:7c:28:aa:55:
97:a7:89:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 13 14:15:32 2024 by rpki-client on console-fra.rpki-client.org