Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233312e302f32342d3234203d3e20383334.roa
File: 38352e3230392e3233312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: nwUl44M8XjRRRKsGXUHjsys6QGLCduB159jjLJvMITk=
Subject key identifier: 42:24:09:ED:15:F7:00:9B:49:32:6D:2B:77:F0:D6:B2:94:71:EB:0D
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 6B44C286534AC79479EEF26C9361F12A671E976B
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233312e302f32342d3234203d3e20383334.roa
Signing time: Sat 19 Oct 2024 00:01:40 +0000
ROA not before: Fri 18 Oct 2024 23:56:40 +0000
ROA not after: Sat 18 Oct 2025 00:01:40 +0000
asID: 834
IP address blocks: 85.209.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 13:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:44:c2:86:53:4a:c7:94:79:ee:f2:6c:93:61:f1:2a:67:1e:97:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Oct 18 23:56:40 2024 GMT
Not After : Oct 18 00:01:40 2025 GMT
Subject: CN=422409ED15F7009B49326D2B77F0D6B29471EB0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:59:a4:ab:9a:93:3a:7d:da:51:65:6a:46:
9c:a3:84:d2:db:ba:5a:c1:db:ab:9c:a9:19:1d:f3:
87:e8:6d:3c:53:96:dc:6e:59:fe:21:46:b3:5e:be:
39:d9:d6:1b:9b:52:2f:b1:3a:86:c5:f2:4e:c9:7a:
09:da:c8:b9:93:ac:d7:ae:70:f7:66:49:b3:5c:ce:
e2:24:f3:b3:d0:47:36:3c:b8:de:ef:99:4c:44:d6:
31:bd:fb:b1:5b:cf:a0:85:21:6e:9a:47:49:ad:06:
af:70:74:b6:66:0a:56:d3:c9:ea:b7:62:67:73:85:
5d:e2:6e:57:46:84:74:e2:6a:43:ed:79:da:7f:a7:
53:7c:e2:5c:8c:c6:1b:12:ec:bc:3b:c5:4d:45:e0:
9b:7b:91:a1:68:23:ae:77:7c:c1:1d:05:3c:14:f4:
97:46:e5:c3:fa:fb:ca:c0:62:7e:64:ef:79:76:5e:
7e:34:af:1c:a1:71:e3:c3:54:56:72:9c:f4:30:10:
94:e1:79:7e:ee:e9:f5:7c:0c:36:e9:ec:12:ef:08:
c7:7e:d5:43:6d:57:1e:48:45:0e:7d:68:33:b4:a7:
1c:0b:26:a9:45:82:7e:69:0a:27:46:32:4a:2e:8e:
c7:8d:29:0e:7f:b3:61:f3:49:3b:76:04:02:45:de:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:24:09:ED:15:F7:00:9B:49:32:6D:2B:77:F0:D6:B2:94:71:EB:0D
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.231.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:62:0f:37:8f:15:70:9c:b1:ef:ed:37:12:14:d9:a5:03:1e:
71:9c:e7:9b:0a:32:c0:69:54:2d:df:52:a4:c4:2e:11:bd:bf:
48:3d:b1:41:46:21:e4:f5:f4:a6:cd:43:60:d3:bb:9a:44:95:
dc:5d:30:13:15:d6:92:27:c3:ec:c2:aa:b4:f8:2e:ae:de:9b:
5c:a2:4c:14:27:9c:36:70:eb:3d:91:9b:12:25:a6:de:98:6f:
ab:9a:9b:c3:b4:f7:97:5d:37:cc:7a:2a:dc:ba:bc:6a:5f:af:
83:98:a8:07:51:41:c6:f1:7e:b9:6f:36:2b:f2:c7:e1:9d:01:
b1:ff:70:6d:9c:b5:00:ee:e4:25:52:21:03:a1:fc:7d:f9:4e:
fb:97:6e:0f:a8:8f:e0:68:2b:53:3a:8c:61:21:dc:a1:18:61:
a8:f0:62:8c:10:87:a6:e7:4f:45:90:54:7b:ea:c4:b1:50:79:
75:b0:4a:b2:f5:69:6b:d8:77:7c:3e:63:f5:d5:0f:c3:a8:96:
59:56:f9:08:18:5a:10:9e:9f:90:84:68:d2:a8:b1:2b:ff:4a:
95:c7:ad:3a:c8:dc:90:21:14:49:c4:de:f5:07:31:81:01:2b:
ab:49:5c:9c:39:db:99:53:c7:f5:a6:c2:78:74:0e:96:bf:78:
47:19:59:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:59 2025 by rpki-client