Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138352e302f32342d3234203d3e20383334.roa
File: 352e3138312e3138352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: uChM5s/zj4wj9rZ1X/2Od1uKMA9qSE7gCt8H/Bu8jYQ=
Subject key identifier: AE:8F:A8:4E:D5:BE:5D:2A:24:81:EF:A2:D6:BF:8D:79:F4:BE:19:06
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 7564DD80CB4877E1FA17B0CBF4086C2F5B220CB5
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138352e302f32342d3234203d3e20383334.roa
Signing time: Tue 18 Jun 2024 10:04:23 +0000
ROA not before: Tue 18 Jun 2024 09:59:23 +0000
ROA not after: Tue 17 Jun 2025 10:04:23 +0000
asID: 834
IP address blocks: 5.181.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 08:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:64:dd:80:cb:48:77:e1:fa:17:b0:cb:f4:08:6c:2f:5b:22:0c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jun 18 09:59:23 2024 GMT
Not After : Jun 17 10:04:23 2025 GMT
Subject: CN=AE8FA84ED5BE5D2A2481EFA2D6BF8D79F4BE1906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:e2:90:b0:68:19:3f:77:72:17:87:81:85:
f7:47:9c:14:31:ef:b5:de:32:4d:62:06:c5:2c:47:
f8:ff:5c:71:4d:16:0a:3e:5a:69:60:af:fc:ad:f3:
60:27:ed:33:02:27:5a:56:a2:40:81:cb:f9:ec:2a:
88:ea:a2:e2:71:26:6c:c3:2c:a8:1b:e8:25:43:64:
e9:c7:62:a3:4f:06:37:cb:20:76:2b:06:ff:38:f2:
40:23:0a:85:53:cb:05:23:a3:4c:a6:58:3c:59:a0:
b1:f9:6d:c5:e1:94:d3:23:ac:62:ab:bf:8e:c4:72:
d4:00:0e:44:3b:0c:17:4f:ff:55:1c:bf:4a:d9:08:
10:0b:a1:35:04:84:f2:51:58:ce:89:56:5a:1c:6a:
a2:c9:1b:be:9c:2d:e3:2c:26:07:ae:c9:93:83:2d:
ed:df:16:79:95:5d:3d:23:7f:4e:58:9e:5d:f1:24:
a2:a4:c2:f6:c4:e3:37:f2:49:f3:54:1e:9d:3c:66:
82:1d:9e:6d:dd:f2:dc:d2:39:04:47:b3:67:77:a6:
25:8e:ca:2a:25:1e:e2:cd:57:48:53:a1:a4:b5:af:
0e:d0:93:a6:08:75:25:4d:ef:2e:c5:5e:7b:88:d3:
32:b9:99:d3:8c:c1:f2:7f:a3:e1:bf:6e:e4:0f:d3:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8F:A8:4E:D5:BE:5D:2A:24:81:EF:A2:D6:BF:8D:79:F4:BE:19:06
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.185.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:1f:70:ac:92:41:21:80:5e:19:31:e8:fa:0b:d8:52:11:13:
23:61:e6:8f:4d:f6:af:98:66:f4:cf:67:55:22:e9:6b:ed:70:
c5:fa:fc:e1:e1:d5:d2:3e:a1:f8:7e:9a:87:1e:6c:de:47:63:
2d:b4:f8:0c:2c:9f:de:6f:07:66:6f:ed:75:01:23:6d:93:4e:
0c:86:ea:8e:5f:80:e9:2b:0e:8d:5c:cb:7b:2b:96:45:d6:94:
8a:8e:30:d2:c6:18:b9:52:7d:1c:ae:95:a4:0c:3f:cc:0e:bf:
d0:07:c6:34:6e:2b:fb:d7:06:ff:f2:88:ae:e9:0b:1e:60:57:
4f:b0:d6:3c:b3:93:e3:ab:d2:7a:5f:1c:41:e6:9f:43:67:6c:
20:1a:84:e4:43:ec:4a:d7:b3:ab:57:10:ee:f2:a2:1c:a6:3d:
4b:f2:e4:f5:0e:29:6f:b2:75:ee:8f:cd:f6:c8:b6:50:ef:ec:
d0:2c:f6:f4:be:48:d1:f6:2d:f7:98:fe:3e:a5:36:d3:86:da:
9d:91:cd:0e:e4:b5:96:63:ed:f0:be:e9:62:7d:a9:23:b7:14:
b4:83:98:65:1b:89:4f:82:e3:a8:91:a6:37:88:48:89:be:83:
b8:be:35:19:24:0c:99:e2:00:6b:67:9e:f4:f9:3d:8d:0b:ef:
7e:29:39:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:15 2025 by rpki-client