Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/5/32332e3137372e38382e302f32342d3234203d3e20313938393830.roa
File: 32332e3137372e38382e302f32342d3234203d3e20313938393830.roa (raw, json)
Hash identifier: 8axq5lKXAEG05/jsG9RsuE/J/iTb2Yie0UH3J3cTNwc=
Subject key identifier: 03:8C:33:C7:93:7F:88:D5:9D:66:63:40:E6:E4:95:41:D4:27:E1:65
Certificate issuer: /CN=96a2b0e2d1ed38ae6fa24f6e3eae4950e503abf9957077da6e
Certificate serial: 3EC10F1A48078FD132FAF9F48A3151E83E09432B
Authority key identifier: 80:2F:06:87:6C:FA:0F:E0:30:90:97:CF:7C:0C:EE:45:53:D2:D2:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c85ceae-9f38-49c6-ad1e-39e9bfeab158/96a2b0e2d1ed38ae6fa24f6e3eae4950e503abf9957077da6e.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/5/32332e3137372e38382e302f32342d3234203d3e20313938393830.roa
Signing time: Fri 07 Jun 2024 21:41:53 +0000
ROA not before: Fri 07 Jun 2024 21:36:53 +0000
ROA not after: Fri 06 Jun 2025 21:41:53 +0000
asID: 198980
IP address blocks: 23.177.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jun 2024 21:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c1:0f:1a:48:07:8f:d1:32:fa:f9:f4:8a:31:51:e8:3e:09:43:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a2b0e2d1ed38ae6fa24f6e3eae4950e503abf9957077da6e
Validity
Not Before: Jun 7 21:36:53 2024 GMT
Not After : Jun 6 21:41:53 2025 GMT
Subject: CN=038C33C7937F88D59D666340E6E49541D427E165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:ed:38:4c:72:6e:30:b9:a6:5e:47:50:81:
65:f0:b4:46:7b:da:4e:0d:65:91:58:68:b0:c6:63:
27:bf:96:f6:68:13:b2:27:ad:86:43:5b:73:cf:a3:
eb:4b:45:fc:56:a8:33:97:ab:c7:34:79:6c:74:40:
52:73:f5:a6:e7:8e:0c:a8:06:74:ce:12:87:36:52:
99:e3:9c:aa:1d:3f:e7:51:d2:aa:02:a7:79:59:80:
92:b6:29:00:4a:93:d5:e3:4e:79:23:6d:9d:65:9c:
be:ee:9e:53:4c:1b:1c:4e:e1:3e:f9:e2:a4:34:db:
b6:ca:4f:9c:dd:7b:c7:50:8c:34:b9:bd:26:5e:ab:
1f:85:2e:c4:a8:cb:f2:c7:cb:09:c0:e9:49:20:c4:
06:df:2f:e9:68:08:84:58:86:e0:65:d2:f8:20:da:
d1:98:13:67:aa:36:bb:d0:1b:0a:23:fb:de:90:b5:
11:2d:f7:72:8d:d3:46:bc:39:c0:4f:31:ad:e1:47:
29:a2:42:85:0d:33:8d:4d:bb:19:31:83:76:54:c5:
73:86:ae:24:10:71:5e:e6:94:ee:e4:32:39:7c:ee:
ca:1f:a4:3b:2e:86:8c:c2:e1:72:8e:1f:ba:65:fd:
04:31:e7:ff:45:78:eb:02:69:24:33:13:b0:75:fc:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8C:33:C7:93:7F:88:D5:9D:66:63:40:E6:E4:95:41:D4:27:E1:65
X509v3 Authority Key Identifier:
keyid:80:2F:06:87:6C:FA:0F:E0:30:90:97:CF:7C:0C:EE:45:53:D2:D2:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/5/802F06876CFA0FE0309097CF7C0CEE4553D2D215.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c85ceae-9f38-49c6-ad1e-39e9bfeab158/96a2b0e2d1ed38ae6fa24f6e3eae4950e503abf9957077da6e.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/5/32332e3137372e38382e302f32342d3234203d3e20313938393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.177.88.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3f:2c:88:68:7e:69:2e:5d:bb:8e:83:7a:e4:b0:9e:6f:60:
95:16:e8:c7:27:3a:83:7d:3e:8a:7c:10:39:a3:b1:f0:fc:3e:
4d:7f:cb:c3:45:54:e5:c8:b0:77:9c:f5:d3:06:db:97:88:7f:
6e:bd:f4:e1:c1:7d:e1:d7:22:34:7e:6d:ef:b3:be:c9:95:9f:
43:a4:1f:f9:1a:2c:ae:cf:89:c0:c8:32:fe:1f:68:b0:56:fd:
04:fa:db:89:b7:bd:e7:dc:4b:3b:95:50:a0:43:ad:c8:95:da:
1a:4a:30:ed:63:2e:6e:b7:af:ef:40:22:ee:ab:7e:f3:2b:35:
92:d4:64:35:58:7f:40:09:89:d9:e2:ba:97:bd:58:6f:ef:15:
bd:97:8d:f6:87:6a:e7:32:8a:86:74:41:bf:40:4f:0d:20:aa:
03:33:0b:71:22:58:f4:58:b9:76:67:1e:10:cd:db:2a:d7:05:
04:b7:4a:23:6b:a1:25:04:d8:6c:08:e9:18:ef:a2:aa:72:89:
3a:f0:89:a7:74:49:05:bd:66:3d:cb:43:ef:6e:8d:ce:b7:9a:
7d:c3:2d:14:89:45:45:48:b2:c7:03:03:6f:e1:cb:0e:27:ea:
2f:49:79:dc:72:b5:30:83:62:b8:0f:6f:b2:0b:03:7d:39:e7:
e1:2b:c2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:54:24 2024 by rpki-client on console-ams.rpki-client.org