Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137332e3131302e302f32332d3233203d3e203437353833.roa
File: 3138352e3137332e3131302e302f32332d3233203d3e203437353833.roa (raw, json)
Hash identifier: ode5J6B2F4EfNlj8pvpLm6uythAGJsf9LU0ThVbdIAs=
Subject key identifier: A9:DF:AD:50:60:4A:1A:EE:65:E6:39:F8:E9:77:61:5F:85:92:2D:E7
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 44FA05F1489CB5E7F6313FBA10DEDE0E076D6492
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137332e3131302e302f32332d3233203d3e203437353833.roa
Signing time: Mon 27 May 2024 12:35:35 +0000
ROA not before: Mon 27 May 2024 12:30:35 +0000
ROA not after: Mon 26 May 2025 12:35:35 +0000
asID: 47583
IP address blocks: 185.173.110.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 13 Jun 2024 11:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:fa:05:f1:48:9c:b5:e7:f6:31:3f:ba:10:de:de:0e:07:6d:64:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 27 12:30:35 2024 GMT
Not After : May 26 12:35:35 2025 GMT
Subject: CN=A9DFAD50604A1AEE65E639F8E977615F85922DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:d6:fe:0a:7f:82:92:d9:3b:21:15:ec:63:
73:2a:d2:8f:91:77:81:df:c0:64:32:b2:9f:70:91:
79:d3:86:fe:3e:54:1d:ce:1b:d9:38:1c:6c:d6:ab:
8b:a2:78:20:19:38:6a:25:91:d0:c7:49:df:a5:1f:
d4:e4:e1:41:00:69:25:b7:96:6f:2a:f4:93:7d:9f:
6e:ba:33:02:3d:e7:70:05:ea:ad:4d:0f:84:8a:4d:
15:b9:50:94:20:25:02:18:cd:79:64:09:3f:2c:ed:
cb:31:3e:83:ea:87:fd:58:a6:91:7f:c7:83:81:f2:
36:28:a1:f0:42:85:a3:4e:2b:f9:b5:90:d8:79:cc:
34:a0:79:ec:44:d5:52:70:68:0f:d5:3a:ec:e4:93:
51:68:fb:55:a3:24:32:ea:c4:5a:b7:dc:1a:61:02:
ec:ed:8e:fd:8f:20:12:81:2d:36:b6:f1:2d:77:88:
c5:1a:2d:08:bb:e1:75:a8:92:e4:76:73:24:67:c7:
a0:91:1f:db:c1:00:f8:5a:e6:c7:42:52:3d:37:8c:
61:7f:ec:fe:62:0a:42:80:1c:96:cf:a7:ce:2a:0b:
fa:e6:e6:21:58:5f:ad:ba:74:1f:3f:75:50:76:bf:
bf:7a:20:82:fc:7a:36:3a:ab:7c:3c:4f:a0:af:ee:
5e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DF:AD:50:60:4A:1A:EE:65:E6:39:F8:E9:77:61:5F:85:92:2D:E7
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137332e3131302e302f32332d3233203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.110.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:8c:11:b8:c5:3f:35:fb:7e:6a:24:52:e8:6b:9e:ef:24:a1:
12:cb:4c:77:ee:cd:85:75:39:94:98:59:b9:02:f3:c8:e3:35:
ad:ef:c8:9c:aa:2b:2d:62:84:49:b1:fb:4a:74:7b:f5:7a:64:
5c:22:5a:b7:c1:08:87:8d:e2:87:27:30:28:eb:ee:a4:37:e6:
ce:04:0f:b4:3a:d8:d9:ae:1d:88:41:e9:d9:3c:d0:1f:6e:80:
32:6d:1a:74:53:77:76:59:78:47:fe:14:69:a6:5c:41:7e:ca:
71:63:18:c6:f3:4d:b1:18:84:98:c1:57:35:9a:e4:b9:21:09:
a0:4d:e7:fe:4e:76:d9:32:d1:f2:c1:5e:66:05:18:2a:91:32:
ce:f9:a0:24:cc:bb:27:3b:aa:2a:23:cb:74:4e:6a:25:60:d1:
d0:26:f2:49:e4:93:23:19:5e:67:c3:bb:d4:b9:b3:f0:2f:a9:
8c:5c:3a:bc:5e:2d:8b:f0:8e:c8:bc:a8:3a:45:7d:aa:53:ad:
8e:bd:f4:b0:bd:02:a3:4d:d3:00:54:f2:37:4c:04:84:57:97:
14:d0:55:5d:e7:42:9f:8b:a3:a1:e6:49:03:e7:73:2e:82:3e:
49:36:55:5f:21:dc:34:05:90:05:92:cc:b2:a0:e4:5e:ef:77:
29:f0:cf:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 13 14:15:32 2024 by rpki-client on console-fra.rpki-client.org