Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231342e302f32342d3234203d3e203231383539.roa
File: 3138352e3130302e3231342e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: 2OP3Kmtrvhsw2Fya0+togmjKSale1Nr8sOeiKlVUZ9k=
Subject key identifier: 01:58:D9:37:49:16:CA:89:1B:84:86:CC:60:53:AD:BB:51:FE:D6:03
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 491BFCDD4625E6EF8347556ED148FDFBA21EFF87
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231342e302f32342d3234203d3e203231383539.roa
Signing time: Wed 31 Jan 2024 10:46:53 +0000
ROA not before: Wed 31 Jan 2024 10:41:53 +0000
ROA not after: Wed 29 Jan 2025 10:46:53 +0000
asID: 21859
IP address blocks: 185.100.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:1b:fc:dd:46:25:e6:ef:83:47:55:6e:d1:48:fd:fb:a2:1e:ff:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jan 31 10:41:53 2024 GMT
Not After : Jan 29 10:46:53 2025 GMT
Subject: CN=0158D9374916CA891B8486CC6053ADBB51FED603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:d9:75:fc:8e:64:83:ca:ec:87:21:f5:2c:
dc:a7:13:af:4a:d0:a9:5d:b9:c1:49:4d:79:2b:2f:
c6:da:0b:84:c7:8a:77:52:f2:c2:90:f5:f2:24:19:
60:d6:fe:62:8f:37:c7:cc:f3:b9:b3:e7:04:8b:7a:
38:9e:7e:b1:d1:19:ca:c1:9b:8a:c9:05:05:16:94:
12:a2:72:0a:6e:20:5f:1d:39:ed:96:e1:f0:26:59:
e8:d8:6a:9a:33:ba:cc:fc:db:1a:52:e3:80:47:e8:
bb:0a:c9:89:5f:86:4d:e6:8d:f8:27:c4:12:29:c2:
d0:53:e6:dc:17:69:94:67:a0:7f:0e:bd:67:23:d8:
fe:02:fc:22:30:5c:73:fc:a5:b6:07:e4:35:d1:b5:
04:98:74:f8:71:f3:3c:1d:bd:7f:f0:3d:4a:2f:1b:
1f:95:a6:a1:34:04:0b:0d:bc:f6:a9:1f:d5:87:d4:
8e:3f:1b:a3:1d:b4:ba:78:fb:e2:68:5c:de:0b:b8:
6a:de:da:29:3a:3c:72:83:44:98:cd:f9:eb:a3:2a:
75:52:bf:9c:46:e6:c1:5a:6a:26:3d:01:cb:8f:4f:
62:b5:ff:de:0a:55:35:26:d2:17:bc:a1:2d:1b:32:
43:d6:06:5f:69:c8:64:20:2d:66:cb:9d:fa:d4:a0:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:58:D9:37:49:16:CA:89:1B:84:86:CC:60:53:AD:BB:51:FE:D6:03
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231342e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.214.0/24
Signature Algorithm: sha256WithRSAEncryption
30:7c:e5:ed:46:10:f8:83:4f:cf:09:64:2e:bf:9a:c7:03:af:
96:7a:e4:8e:8a:b3:1e:15:4e:64:03:c8:bc:6b:9d:d2:cb:1b:
29:9e:c0:63:2e:71:c6:59:19:e2:b8:5b:13:37:df:12:84:ad:
0f:88:18:f7:66:92:d2:4b:ac:f4:61:85:37:23:4e:2f:b4:03:
1b:21:a6:91:28:01:5b:60:9d:09:27:1b:ea:d0:14:a2:f9:d5:
01:b7:b8:bf:e6:03:10:21:1a:3c:36:c3:a4:39:3c:99:b6:32:
45:26:09:01:66:6f:2e:6c:e0:d5:1f:db:bc:81:09:e9:99:44:
16:11:85:87:68:61:d0:63:20:e9:eb:5c:e6:81:7e:40:1f:a6:
54:2a:40:25:d9:52:73:f5:ec:96:29:35:f4:6d:c9:24:fc:34:
9f:cf:dc:31:bb:c6:2e:f9:de:e1:d9:07:f3:05:5a:42:b6:53:
b1:81:53:1f:8a:00:f5:5a:2f:83:0e:fa:73:8e:2a:58:44:99:
a5:2c:d0:c5:a5:b5:93:ec:7e:86:3d:40:4e:20:15:8c:17:e9:
ff:ca:9e:52:94:a4:d6:69:59:35:62:9e:36:37:80:cd:e5:32:
7d:59:4a:90:a1:5a:6e:4e:4b:96:1e:7d:5b:ff:9d:5f:b3:0b:
86:65:34:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:11:17 2024 by rpki-client on console-fra.rpki-client.org