Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233302e302f32342d3234203d3e20323032363733.roa
File: 38352e3230392e3233302e302f32342d3234203d3e20323032363733.roa (raw, json)
Hash identifier: oMDsJUaYwRIEV2lqpIbzI+kUy4tTov8EgCT/bzFkpPE=
Subject key identifier: FC:66:B9:37:4A:8E:F3:61:09:D6:C5:B9:2C:AB:47:59:24:62:B7:49
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 12B57FDE3F1BAF5C0E32A53E5CBAC5815520089F
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233302e302f32342d3234203d3e20323032363733.roa
Signing time: Mon 08 Jul 2024 16:51:46 +0000
ROA not before: Mon 08 Jul 2024 16:46:46 +0000
ROA not after: Mon 07 Jul 2025 16:51:46 +0000
asID: 202673
IP address blocks: 85.209.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b5:7f:de:3f:1b:af:5c:0e:32:a5:3e:5c:ba:c5:81:55:20:08:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jul 8 16:46:46 2024 GMT
Not After : Jul 7 16:51:46 2025 GMT
Subject: CN=FC66B9374A8EF36109D6C5B92CAB47592462B749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:56:d7:5b:cf:78:94:04:ef:f2:90:26:fb:
98:86:6e:bd:10:db:e5:ad:b4:cd:d9:b6:8d:3f:99:
51:4f:2b:9f:54:6c:30:2a:d7:25:a3:f9:dc:e7:a0:
80:7a:90:0a:95:10:38:a8:a2:e9:bd:2e:20:ac:e9:
92:71:d1:10:b8:5c:0a:ed:c4:65:af:c4:56:cd:19:
b2:c2:df:b3:94:6d:ec:dc:1b:c3:04:f5:c7:19:dd:
96:90:da:a7:2b:3b:b3:0d:b9:31:93:54:50:33:ef:
0b:fc:4c:d7:8b:78:fe:96:0b:9e:33:35:46:e3:d9:
4d:9d:42:b3:77:65:b7:34:44:af:33:f7:3b:6c:dc:
ca:d1:9d:21:e6:e7:e2:1d:12:bc:65:1b:53:78:fd:
6e:b5:41:9b:7e:47:49:2b:51:e7:a4:d7:45:2a:d8:
ed:b4:92:85:55:4e:e8:aa:48:47:02:f8:05:3a:c6:
21:42:f8:aa:2f:69:ea:35:bf:40:eb:77:12:05:a9:
03:6a:47:25:90:6b:83:69:f3:1b:bb:53:27:5e:55:
54:43:39:2d:58:86:ec:fd:5a:4a:7f:5f:75:54:33:
6a:51:d2:06:ca:a7:cf:54:6a:e8:6f:fe:85:1e:8e:
3a:09:4e:b8:ab:7e:97:dd:44:2c:bd:f2:c0:2d:8c:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:66:B9:37:4A:8E:F3:61:09:D6:C5:B9:2C:AB:47:59:24:62:B7:49
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233302e302f32342d3234203d3e20323032363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:af:3f:2c:24:80:71:55:28:61:8d:a0:fe:f1:18:4d:99:f9:
51:61:d8:52:19:3a:18:ef:d3:97:65:3f:ee:92:fb:ad:41:37:
a9:06:99:1f:5e:4f:25:96:ee:0e:10:52:41:29:6d:8a:36:33:
45:4f:b1:c1:05:0f:29:8c:7a:fb:3a:0e:0c:c5:b0:bb:a8:2a:
39:f2:69:b5:11:85:e3:6e:a5:96:ee:d5:94:25:f0:5e:5c:de:
4b:1d:cc:cc:83:2e:50:09:2e:2b:9a:e5:c4:8c:4c:53:cc:d7:
05:cf:9c:b2:12:05:3c:f5:c1:b2:a5:cc:08:67:ab:7d:c6:a7:
8f:6b:4d:9b:7b:56:ac:af:f6:6c:2d:af:05:f0:a6:83:c1:b4:
d6:a2:2e:b7:c5:d3:e9:70:20:2c:1e:19:f6:fd:ff:1c:71:c6:
bf:39:9c:93:ac:27:65:1d:7d:ea:9e:8e:6e:c8:9e:f0:54:4f:
68:fd:31:ad:30:b5:be:ef:bc:f8:1c:00:2d:42:2d:d8:88:d1:
19:ca:5a:88:3b:27:07:c2:24:f2:e2:81:95:49:91:c0:07:ca:
9a:ac:80:6d:db:63:18:e4:51:ee:8f:5a:05:a4:ed:cc:d2:3c:
fa:49:c3:a4:ea:cd:6a:26:91:24:5f:c7:25:bf:c0:ca:4e:3f:
28:54:c6:9a
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 8 01:16:56 2024 by rpki-client on console-fra.rpki-client.org