Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138352e302f32342d3234203d3e203230343733.roa
File: 352e3138312e3138352e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: V9D99WWuu/rrJANAa8UcWDL2o5U8Zu3Q5EIrWt/6ZeA=
Subject key identifier: 49:86:A1:A8:C0:2C:12:2A:55:34:A3:88:AC:77:7F:27:2E:72:C3:53
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 0F6EEE781163940918DC449AF278635D3E706872
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138352e302f32342d3234203d3e203230343733.roa
Signing time: Sun 02 Jun 2024 06:55:03 +0000
ROA not before: Sun 02 Jun 2024 06:50:03 +0000
ROA not after: Sun 01 Jun 2025 06:55:03 +0000
asID: 20473
IP address blocks: 5.181.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jun 2024 10:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:6e:ee:78:11:63:94:09:18:dc:44:9a:f2:78:63:5d:3e:70:68:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jun 2 06:50:03 2024 GMT
Not After : Jun 1 06:55:03 2025 GMT
Subject: CN=4986A1A8C02C122A5534A388AC777F272E72C353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:0c:af:ec:da:42:63:ae:21:5b:fa:ce:36:
fd:81:a0:65:51:0d:c3:7b:39:f5:25:0e:df:bb:50:
18:56:5a:1d:d9:e1:b9:83:0e:01:a2:b5:6c:e8:8a:
1c:e2:74:af:d6:98:84:76:95:ec:03:3c:3c:cd:d1:
f7:67:f8:a4:fa:5b:18:cc:46:d1:ed:1d:99:5b:5a:
26:47:c5:f3:e7:ac:76:e9:05:c4:df:32:1a:b7:09:
62:5a:91:2b:aa:c2:46:51:2a:ec:81:9b:81:7b:71:
e2:cd:19:8f:30:2c:41:d5:1c:c2:75:ee:51:20:54:
80:ff:e8:79:d6:5f:a8:4b:b0:a7:73:8a:2e:92:e0:
a5:9b:52:6f:41:fe:ab:c9:c9:41:69:cc:5e:6c:4c:
83:e5:5a:07:a4:75:8e:81:d5:49:42:d0:f1:56:73:
ea:a8:1a:dc:4f:7a:40:69:f9:55:0e:cf:a0:9d:a7:
43:20:40:f9:4c:ca:49:59:46:79:1d:99:e6:14:ce:
bc:11:3b:b6:28:24:5c:1a:d1:51:fc:0c:8b:1a:9b:
8c:8f:21:36:88:f3:7e:ab:5c:b1:78:5d:3f:78:ab:
f6:63:37:0a:87:76:85:77:39:e8:6d:1c:6b:40:1d:
98:69:0c:46:68:39:a5:b9:d5:d8:e7:cb:f7:1e:24:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:86:A1:A8:C0:2C:12:2A:55:34:A3:88:AC:77:7F:27:2E:72:C3:53
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138352e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.185.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:1c:9c:60:08:70:f3:43:52:b8:5d:0d:16:1a:cf:b0:70:3e:
ca:76:54:c7:41:66:f3:42:9f:56:52:3f:f2:e4:af:c5:a9:5f:
17:67:67:80:db:18:31:93:b8:8c:a9:c2:d3:1b:d9:e1:dc:8f:
11:b2:ac:6b:db:7d:8d:89:8b:99:da:a4:24:22:da:a6:e9:1e:
45:d7:1a:d7:d4:44:60:97:b8:66:f7:6b:fe:a9:d5:8a:c1:d9:
51:0f:1f:95:d5:98:8e:37:0a:58:46:29:31:98:ac:5d:00:df:
d1:47:ac:44:bd:db:33:24:06:f1:75:b6:64:b4:8f:d0:c4:03:
f3:89:5a:ba:1e:8a:e5:e7:91:48:b2:fb:ee:bc:7e:2a:c7:bf:
c0:4d:20:ea:9e:64:53:cf:dd:9c:31:eb:6b:61:fc:08:bf:c6:
5a:06:7b:1a:e8:39:69:5b:f2:e9:bc:24:89:a8:e5:8c:c6:3e:
d1:e8:e5:00:da:55:25:66:7a:6b:d7:a0:e7:00:4f:10:46:f6:
b6:15:66:70:40:32:0a:21:a4:05:2b:15:e1:f9:48:f1:1e:6b:
8d:89:ba:ef:46:35:77:51:e1:df:4f:26:03:02:54:24:27:a8:
71:6f:73:d3:1d:f4:e9:dc:b4:d5:d8:37:2a:16:c6:a8:fc:d7:
3b:64:ab:1f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUD27ueBFjlAkY3ESa8nhjXT5waHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNDA2MDIwNjUwMDNaFw0yNTA2MDEwNjU1MDNaMDMxMTAvBgNV
BAMTKDQ5ODZBMUE4QzAyQzEyMkE1NTM0QTM4OEFDNzc3RjI3MkU3MkMzNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Dwyv7NpCY64hW/rONv2BoGVR
DcN7OfUlDt+7UBhWWh3Z4bmDDgGitWzoihzidK/WmIR2lewDPDzN0fdn+KT6WxjM
RtHtHZlbWiZHxfPnrHbpBcTfMhq3CWJakSuqwkZRKuyBm4F7ceLNGY8wLEHVHMJ1
7lEgVID/6HnWX6hLsKdzii6S4KWbUm9B/qvJyUFpzF5sTIPlWgekdY6B1UlC0PFW
c+qoGtxPekBp+VUOz6Cdp0MgQPlMyklZRnkdmeYUzrwRO7YoJFwa0VH8DIsam4yP
ITaI836rXLF4XT94q/ZjNwqHdoV3OehtHGtAHZhpDEZoOaW51djny/ceJCtzAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUSYahqMAsEipVNKOIrHd/Jy5yw1MwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt
MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzUyZTMxMzgzMTJlMzEzODM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAW1
uTANBgkqhkiG9w0BAQsFAAOCAQEAwxycYAhw80NSuF0NFhrPsHA+ynZUx0Fm80Kf
VlI/8uSvxalfF2dngNsYMZO4jKnC0xvZ4dyPEbKsa9t9jYmLmdqkJCLapukeRdca
19REYJe4Zvdr/qnVisHZUQ8fldWYjjcKWEYpMZisXQDf0UesRL3bMyQG8XW2ZLSP
0MQD84lauh6K5eeRSLL77rx+Kse/wE0g6p5kU8/dnDHra2H8CL/GWgZ7Gug5aVvy
6bwkiajljMY+0ejlANpVJWZ6a9eg5wBPEEb2thVmcEAyCiGkBSsV4flI8R5rjYm6
70Y1d1Hh308mAwJUJCeocW9z0x306dy01dg3KhbGqPzXO2SrHw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:31 2025 by rpki-client