Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e20383334.roa
File: 352e3138312e3138372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 2pMlrsXaa2iF6BOfiJmtHbnJc9rncCUjex/RQtb04IA=
Subject key identifier: 8F:95:82:44:3E:70:12:59:73:CE:48:8F:5E:70:BE:B0:55:48:73:6E
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 54ED02CD78795319D30AADAA7C669A53D9C158
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e20383334.roa
Signing time: Sun 07 Apr 2024 00:01:00 +0000
ROA not before: Sat 06 Apr 2024 23:56:00 +0000
ROA not after: Sun 06 Apr 2025 00:01:00 +0000
asID: 834
IP address blocks: 5.181.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ed:02:cd:78:79:53:19:d3:0a:ad:aa:7c:66:9a:53:d9:c1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Apr 6 23:56:00 2024 GMT
Not After : Apr 6 00:01:00 2025 GMT
Subject: CN=8F9582443E70125973CE488F5E70BEB05548736E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:e6:98:b4:0a:a3:92:f2:1f:a4:d2:7f:03:
0d:7f:4b:df:62:17:43:c4:05:4f:c9:35:ef:1d:06:
d5:0b:d1:c4:ea:b3:2c:b4:f3:00:6c:8a:e1:71:87:
aa:de:8b:04:50:fa:55:ec:ac:6d:f4:1b:30:54:5e:
39:a6:a2:8c:c3:d4:a2:8c:9a:d9:3e:50:5a:c8:73:
ee:24:a4:38:11:18:92:02:a0:db:71:e6:92:7d:4c:
75:2f:b4:37:9d:f0:ef:9c:28:7c:28:69:d5:9b:83:
09:72:95:ad:6a:ad:96:84:9e:40:14:17:ca:df:20:
9a:bb:41:6e:f3:0a:6c:8e:6c:dc:3d:f1:61:f7:2d:
8e:33:74:c4:ee:34:d0:ff:1e:28:ed:3d:6c:e6:e6:
f6:9a:18:53:49:6d:8a:45:79:14:0e:2b:43:12:63:
5e:47:7a:fb:a2:0f:69:b3:c4:e9:d1:6a:2f:09:3f:
a9:89:8b:d2:19:2f:db:3f:f7:bf:fb:7b:2b:13:97:
e8:57:97:fe:27:8c:0d:f4:7d:86:46:34:41:df:35:
3d:c4:35:f8:8a:0c:e4:94:17:50:1a:f9:a2:a9:d2:
67:ad:65:fe:51:b5:89:fc:d9:3f:81:83:53:33:0e:
6b:e0:54:5e:04:4e:9b:76:6a:59:4c:bf:c9:2e:97:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:95:82:44:3E:70:12:59:73:CE:48:8F:5E:70:BE:B0:55:48:73:6E
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.187.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:cc:d4:b4:b6:45:c0:67:fc:35:3f:f5:40:03:4f:51:43:17:
ce:07:25:c2:c2:e0:25:3b:87:f9:64:8a:96:70:ee:3e:3f:5d:
8e:c3:3d:d4:b0:09:35:a7:57:1c:d7:0d:19:c8:21:88:d6:1c:
24:ab:a1:f8:8e:83:4d:f7:93:7c:f2:a2:ed:c4:6f:61:47:76:
28:03:37:95:58:48:68:07:7c:91:81:af:de:ac:6d:38:15:3a:
b2:5c:2c:55:51:33:58:c3:b0:7c:39:9f:84:47:20:72:0a:77:
52:b6:00:63:82:c4:4a:77:81:7e:58:d3:f9:f5:ff:8e:d6:95:
11:ce:d3:44:9e:51:4b:04:27:20:57:88:bc:2d:04:99:1b:48:
c6:83:fa:db:9a:ac:58:b6:8a:80:f7:bd:2b:26:fb:ac:a1:83:
b3:5b:10:b5:a8:de:67:c7:f3:9a:97:14:01:ac:f9:80:bc:51:
f1:83:d3:57:7a:c7:08:78:2a:2e:5b:41:b3:1b:a7:af:f2:6a:
53:1e:6e:6a:af:e0:93:5d:60:b8:09:54:11:19:52:90:09:c5:
c8:6d:20:a1:d4:94:cd:7e:2f:44:70:73:25:3c:1e:38:24:bd:
82:71:c2:b4:1c:fb:18:8b:9c:23:e1:8e:a8:1e:bc:be:51:65:
4e:e5:6f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:10 2024 by rpki-client on console-fra.rpki-client.org