Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233302e302f32342d3234203d3e203631333137.roa
File: 38352e3230392e3233302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: yZMz0UNDOmY5T0noh9q0NzJ+K2QW+pfhLqAngfnsxs8=
Subject key identifier: 3A:DF:D9:88:69:97:30:27:92:CE:16:5C:95:5B:9B:26:C7:13:A7:15
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 6C3A3463B8A80BF1C4CB3E9D2D5EF18CD6AE7F52
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233302e302f32342d3234203d3e203631333137.roa
Signing time: Fri 20 Jan 2023 07:44:07 +0000
ROA not before: Fri 20 Jan 2023 07:39:07 +0000
ROA not after: Fri 19 Jan 2024 07:44:07 +0000
asID: 61317
IP address blocks: 85.209.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:3a:34:63:b8:a8:0b:f1:c4:cb:3e:9d:2d:5e:f1:8c:d6:ae:7f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jan 20 07:39:07 2023 GMT
Not After : Jan 19 07:44:07 2024 GMT
Subject: CN=3ADFD9886997302792CE165C955B9B26C713A715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b1:ba:a5:0c:b7:77:46:aa:42:4d:31:de:0d:
3f:6c:56:b1:09:3f:61:97:cf:03:16:a0:89:10:1f:
93:72:f8:2b:5b:4c:e0:f1:e5:7c:7a:51:30:af:29:
f8:a1:04:1c:89:0a:94:7a:08:74:a4:f6:bc:49:01:
bd:9d:bf:7d:42:02:32:ac:a8:6c:13:f9:da:3d:97:
08:d8:f8:d0:25:e7:97:b8:20:0d:22:1c:db:48:f5:
d0:f1:e3:2e:af:4e:b1:b0:a7:c7:80:72:d9:1d:0f:
bf:b1:85:b3:0e:3c:b3:c2:7d:f7:6b:14:a0:f8:c5:
90:5d:72:a0:76:65:95:3e:55:8b:5f:68:f9:87:92:
34:49:a4:35:30:29:e0:e1:6b:6a:a2:a9:cc:43:aa:
32:16:27:48:77:d3:3b:46:73:e2:0c:b6:1b:49:99:
41:97:61:52:7a:83:4e:4c:b9:b9:3e:db:dc:22:cb:
1c:41:36:a6:c5:eb:4e:38:33:97:76:57:3d:54:81:
e9:40:a5:fa:87:0c:64:f3:c8:fc:b4:21:04:8d:cb:
95:2c:7d:19:58:19:97:5c:20:a1:5d:4f:5b:c8:db:
d5:b8:04:8f:e5:8c:ee:93:63:8c:34:2b:ba:63:ca:
0b:32:84:a1:19:7c:69:ba:b9:3a:da:87:38:dc:03:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DF:D9:88:69:97:30:27:92:CE:16:5C:95:5B:9B:26:C7:13:A7:15
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233302e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:1d:1c:2b:90:ba:20:51:38:f3:45:fe:5d:14:4e:94:c7:48:
ac:a2:ea:eb:93:5e:b8:7e:e0:95:5e:fc:d2:9f:fe:54:19:eb:
5b:78:fe:62:bf:95:77:41:0e:96:50:d8:5b:8d:a8:05:6c:69:
58:e7:29:e4:38:4d:83:fd:18:68:3b:26:8d:a7:fb:df:0f:79:
31:34:19:27:39:69:9b:da:2e:68:81:bb:df:fb:14:8e:fb:20:
82:06:2e:60:85:1d:bb:fe:86:bc:cf:c7:f4:fe:c0:68:63:17:
36:40:ab:3b:6e:bd:d3:c5:e8:69:4a:e2:1f:3a:64:f7:09:55:
fd:67:6f:48:73:8f:b0:e8:64:76:7f:b0:74:19:3b:89:63:49:
b3:d9:67:61:6b:e1:c5:7c:b2:9d:36:f8:d7:cb:c6:2a:a8:df:
2f:e9:74:8a:8f:1f:1d:54:6e:2e:be:0e:10:25:48:f8:1d:b0:
c1:4c:c4:ff:b5:ec:27:44:a4:12:54:18:6a:0f:1b:ad:33:e8:
90:f7:8c:9a:46:bc:69:11:93:b7:75:5a:f1:96:7b:a8:f7:7b:
1e:2f:b3:9b:54:1b:4c:ef:f4:c8:5a:21:4b:6b:c5:72:2b:21:
69:b5:87:08:0c:d6:27:5a:cd:be:dc:6e:83:1b:ca:c9:f5:b8:
59:ff:f9:61
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 10 00:44:33 2023 by rpki-client on console-ams.rpki-client.org