Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e20323031363730.roa
File: 352e3138312e3138372e302f32342d3234203d3e20323031363730.roa (raw, json)
Hash identifier: uAVYWWQnKAShCj2wNKCxJdIU230XQpoE97dwvi5TPIY=
Subject key identifier: B3:28:BF:FC:54:11:F2:01:33:0F:2A:B4:2A:95:D4:8E:AE:EF:5B:31
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 03D7D9B5E361C68E456861ABA2705720CE89D3F3
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e20323031363730.roa
Signing time: Thu 07 Mar 2024 16:03:05 +0000
ROA not before: Thu 07 Mar 2024 15:58:05 +0000
ROA not after: Thu 06 Mar 2025 16:03:05 +0000
asID: 201670
IP address blocks: 5.181.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d7:d9:b5:e3:61:c6:8e:45:68:61:ab:a2:70:57:20:ce:89:d3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Mar 7 15:58:05 2024 GMT
Not After : Mar 6 16:03:05 2025 GMT
Subject: CN=B328BFFC5411F201330F2AB42A95D48EAEEF5B31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:fe:cd:fb:9d:1f:3f:65:d1:96:98:d9:ad:
58:69:3e:c0:26:89:8d:d9:05:97:91:fc:48:db:6b:
fb:9c:bc:30:e0:c0:09:f5:cc:a1:0f:5b:85:93:9c:
dc:4f:d9:0f:5c:6a:17:52:e2:bb:3a:c0:cf:7b:ad:
85:0d:91:d5:8e:83:b6:d9:df:12:df:ea:04:8c:ea:
6a:f7:95:fb:bb:5e:d3:51:ce:7f:68:e0:2e:b5:8d:
98:90:b3:e6:f9:dc:e9:58:eb:0f:a7:e4:c0:28:2f:
06:54:d9:20:8b:42:fc:45:dd:d1:f2:03:fe:bc:66:
f2:be:5f:67:cb:50:5e:64:ec:c7:ce:ac:21:4e:4a:
4b:e3:1f:07:02:55:98:17:12:0a:96:02:cf:8e:a1:
7a:08:79:c0:71:8f:24:a9:20:01:af:07:31:a3:f8:
58:eb:fa:3a:ed:ba:80:71:0e:91:0b:16:46:6a:31:
79:b3:88:1a:d9:a5:f0:cd:c9:91:83:da:dc:f7:ee:
7d:39:d2:05:0b:60:5f:b1:d1:84:84:44:0a:50:7d:
e2:fd:72:75:5d:58:13:7f:e1:45:95:21:98:1b:63:
02:e2:95:47:fa:35:8a:7e:58:1e:90:5c:53:b8:99:
e6:d5:b5:37:84:86:cd:53:24:22:37:d5:f3:82:fc:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:28:BF:FC:54:11:F2:01:33:0F:2A:B4:2A:95:D4:8E:AE:EF:5B:31
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e20323031363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.187.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d0:b2:6b:c5:32:4b:77:c8:94:12:d0:30:f1:cc:8b:a9:75:
46:7f:64:c5:c4:38:92:c9:6c:99:76:fd:1b:58:b7:95:8f:c0:
56:b1:a2:81:74:67:96:8a:c6:08:1d:05:d8:05:91:98:35:1a:
67:47:1f:c8:c6:07:aa:49:5d:95:da:a7:29:c4:02:7d:e3:cf:
6d:fe:31:16:67:ef:99:e5:ce:89:0b:46:a0:74:65:aa:88:89:
f9:22:3b:42:a7:17:d7:a0:00:37:97:5a:f2:7d:89:83:48:4b:
af:77:15:76:23:65:56:01:80:65:9d:cd:64:61:5f:b6:8e:5e:
3b:e6:82:5d:8a:ac:53:72:9d:dd:32:9b:8e:60:f6:15:8a:e8:
17:01:f3:78:ce:e3:06:be:35:4f:b9:ef:93:25:0a:50:f3:02:
17:3e:de:68:11:c7:25:98:48:7e:d9:14:95:2c:0d:f5:15:1d:
09:bd:5b:5c:fa:3b:b7:c9:63:02:5f:fb:6d:43:10:ca:f9:59:
da:37:b8:44:cd:2c:67:6d:c0:f4:3d:de:f7:8f:11:1d:2e:62:
3b:b6:3d:38:ac:c4:a6:d2:4e:b1:6b:4b:90:a9:c5:56:eb:2a:
15:42:49:d7:28:0d:81:79:49:8e:cd:e0:eb:85:c2:bc:1f:78:
af:b3:25:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:10 2024 by rpki-client on console-fra.rpki-client.org