Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231342e302f32342d3234203d3e20323036343436.roa
File: 3138352e3130302e3231342e302f32342d3234203d3e20323036343436.roa (raw, json)
Hash identifier: R2jDvMlPTTDEI/KrI0KIREjSlotefKBSjhqtsqDNDHI=
Subject key identifier: B9:73:8A:F0:A0:CA:88:5F:8A:AB:1F:96:5D:75:FA:61:1D:31:89:80
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 5C3ADEC7183B6BA2DFF262677207588870BED540
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231342e302f32342d3234203d3e20323036343436.roa
Signing time: Tue 26 Mar 2024 16:08:50 +0000
ROA not before: Tue 26 Mar 2024 16:03:50 +0000
ROA not after: Tue 25 Mar 2025 16:08:50 +0000
asID: 206446
IP address blocks: 185.100.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 10:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:3a:de:c7:18:3b:6b:a2:df:f2:62:67:72:07:58:88:70:be:d5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Mar 26 16:03:50 2024 GMT
Not After : Mar 25 16:08:50 2025 GMT
Subject: CN=B9738AF0A0CA885F8AAB1F965D75FA611D318980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:e4:46:9e:58:dd:30:b5:ca:dd:03:37:c7:
0e:23:05:2a:a2:b8:73:b4:de:48:f5:22:18:9b:7e:
06:9b:b1:9e:9b:71:6c:23:09:32:8b:04:22:a6:e5:
5d:43:f5:c6:4c:b1:ab:ef:e7:aa:53:e9:07:71:da:
f6:19:4e:08:91:8b:30:59:4f:99:c2:6d:88:a1:66:
f6:8d:19:68:9d:a5:f8:88:53:71:19:dc:f6:06:66:
0e:ed:2c:21:66:86:62:be:d7:4d:9f:e3:78:28:76:
ef:7c:d7:91:6d:ec:c8:1a:11:52:fc:11:24:b4:b2:
5a:c4:a6:3e:62:60:9c:d1:a7:d5:5a:05:5d:85:29:
0f:6a:11:cb:6d:72:48:7f:a2:72:d2:d8:97:05:c3:
ad:01:1e:ac:db:5a:e2:69:18:a4:fe:08:bf:f0:9a:
14:5c:34:a9:f2:e5:75:9c:66:75:ed:0a:86:ac:b5:
cb:6f:5e:4a:1f:e0:36:90:54:a9:1d:ce:5c:e6:23:
98:89:46:04:11:03:7b:d1:2b:d8:24:c2:30:1a:98:
22:fb:a9:66:e7:37:f1:ab:cd:3b:60:84:e8:61:b1:
37:af:c5:88:09:c9:bd:2f:0e:8e:6c:7d:66:91:8f:
7a:80:69:d5:00:c0:f5:ea:71:68:7e:15:64:a1:d0:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:73:8A:F0:A0:CA:88:5F:8A:AB:1F:96:5D:75:FA:61:1D:31:89:80
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231342e302f32342d3234203d3e20323036343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.214.0/24
Signature Algorithm: sha256WithRSAEncryption
51:52:36:29:79:03:f3:0c:ea:26:4a:b3:de:63:f5:7a:65:1b:
41:38:e7:8a:5b:d2:70:4b:07:2b:f2:c8:df:fb:6f:e8:40:fb:
c4:ce:dd:8a:f2:15:1c:c8:2e:2f:19:50:12:15:67:d3:73:89:
be:55:f2:7c:92:5a:0a:44:24:4e:5b:70:e1:21:f7:0d:ef:a5:
21:08:e3:38:be:55:76:5a:16:16:3d:92:7a:bc:72:73:8f:c5:
7f:b7:82:e6:fc:60:1f:e8:82:33:d4:ae:57:d9:58:f2:22:8f:
bb:1d:2f:a2:96:f6:6f:d6:12:35:c0:0a:77:7d:24:7c:1a:e7:
12:1d:e8:ea:3a:3d:27:e0:70:0f:16:ed:0f:ae:ea:42:49:23:
49:9c:18:b0:44:1d:66:81:0c:38:bf:31:18:86:a8:3b:11:dc:
2a:a0:00:bc:15:d1:2c:ce:42:b7:dd:d2:80:cd:28:64:07:bf:
98:ca:27:79:3f:94:04:60:43:7a:f5:2e:02:64:c7:2d:8d:f3:
c1:4f:3d:a0:57:e9:e2:39:22:72:72:fd:a2:f7:11:5b:0f:82:
c2:f8:ef:dc:b4:0f:71:3b:2e:e1:ff:2a:9c:78:a4:54:00:5c:
5f:01:e0:5e:e3:a7:99:aa:8c:63:77:f2:67:38:28:cc:e1:af:
00:d7:c2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org