Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3230352e31322e302f32332d3234203d3e20313336373837.roa
File: 3138352e3230352e31322e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 0DBJxNVl3aIwT8ku9MOxdi/l1NCFhfOeyu7GK7RsRs8=
Subject key identifier: 91:75:AD:2E:0C:77:5D:37:C5:17:BA:64:44:E2:D6:93:EE:24:3A:4B
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 1C639FBE62B87E5FD0FED1116659D05344A62581
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3230352e31322e302f32332d3234203d3e20313336373837.roa
Signing time: Sun 11 Jun 2023 11:01:03 +0000
ROA not before: Sun 11 Jun 2023 10:56:03 +0000
ROA not after: Sun 09 Jun 2024 11:01:03 +0000
asID: 136787
IP address blocks: 185.205.12.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 10:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:63:9f:be:62:b8:7e:5f:d0:fe:d1:11:66:59:d0:53:44:a6:25:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Jun 11 10:56:03 2023 GMT
Not After : Jun 9 11:01:03 2024 GMT
Subject: CN=9175AD2E0C775D37C517BA6444E2D693EE243A4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b7:15:fe:2e:da:e1:eb:2c:45:5d:78:7b:0e:
43:94:c5:ac:9b:f6:70:05:94:56:61:b7:95:ec:15:
3b:e2:2b:99:53:d4:c4:20:9c:35:7e:1d:c2:86:6a:
04:60:b6:dd:2a:4e:83:42:37:71:b6:12:7c:31:20:
d4:fb:db:bd:55:9e:14:b1:30:e6:cf:4d:1f:47:33:
73:c4:10:85:78:84:23:e5:49:3e:14:61:7f:22:5d:
5f:11:75:fc:30:d5:a9:cc:3e:f6:7d:16:09:e5:fd:
46:c3:6d:ab:08:9c:81:ec:bb:a7:9c:f0:df:3c:ef:
07:f5:5f:5d:e2:d4:94:a3:af:c1:a4:3e:e7:36:c8:
8b:7a:30:3c:63:05:d5:43:67:99:96:f3:81:96:d3:
e4:a6:3d:b8:0f:0e:ad:fb:9e:1f:36:2f:63:6f:d9:
7e:fa:a1:75:02:77:d6:03:10:fe:29:f8:4d:32:ed:
00:e9:89:18:74:d6:ee:8f:9e:26:40:34:f7:8d:79:
00:0b:f7:44:3d:8d:fa:98:32:da:45:f9:ce:1c:cf:
85:40:7d:d9:f3:b1:a3:bd:a9:97:5d:26:ee:4b:4e:
19:d2:3a:d5:a0:cf:99:c5:0b:0e:9f:9c:f8:ff:2f:
de:60:81:ce:66:b3:24:9e:62:61:ca:ae:f5:87:94:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:75:AD:2E:0C:77:5D:37:C5:17:BA:64:44:E2:D6:93:EE:24:3A:4B
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3230352e31322e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.12.0/23
Signature Algorithm: sha256WithRSAEncryption
35:5e:39:09:33:05:cd:25:18:12:ca:c3:2c:ae:95:b9:1e:84:
27:c5:57:ad:d7:2c:b4:b2:77:94:b6:3b:65:fa:d4:c7:e3:0f:
d2:a1:9b:86:4e:5a:94:1f:94:6c:63:2a:3f:c6:15:84:b5:1e:
43:b0:c8:e1:a8:ee:fb:e9:c0:ff:39:1c:f3:9b:05:f7:7a:ad:
8f:97:1a:fd:07:d0:eb:04:24:ad:d1:9a:d9:c9:a8:59:a3:ce:
99:8c:d4:54:51:2a:84:f6:81:1e:12:aa:10:a7:98:29:94:5f:
65:79:ea:76:a3:37:23:a1:e5:b3:20:b9:3e:9c:2e:0f:e5:89:
ff:70:c3:2b:23:49:9d:85:2f:22:51:8f:68:c0:7d:ab:90:e2:
75:a2:f9:2c:3b:e5:6b:09:b6:e3:02:d1:e1:8d:54:c5:9b:2e:
d4:ae:cd:54:3e:f1:ab:60:15:4f:b0:be:97:4d:24:ea:48:57:
7d:9f:ed:68:81:78:5e:43:43:5c:4b:c0:20:54:47:4e:98:60:
e2:74:88:50:60:b9:8e:c7:74:5f:09:4d:00:c1:36:ac:5b:c0:
06:0d:0f:f1:f8:30:74:a5:b2:d7:9a:94:22:4e:1d:75:1f:79:
6c:1e:6f:f8:80:50:ef:a8:ac:06:52:22:02:9a:c5:53:ed:0c:
f4:3c:70:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org