Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32342e302f32342d3234203d3e203231383539.roa
File: 3138352e3133392e32342e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: 4UZVs4OHbEkxKiZxEOiI1S/hbI0YLVokdYna1Rlzj1Q=
Subject key identifier: 30:48:9D:8A:31:FE:8D:70:12:08:8B:9D:02:F1:98:D1:F4:90:1C:28
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 16C6E7FE1EC68FAD42DE75F37D9E8C8BC04157B0
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32342e302f32342d3234203d3e203231383539.roa
Signing time: Wed 31 Jan 2024 10:44:41 +0000
ROA not before: Wed 31 Jan 2024 10:39:41 +0000
ROA not after: Wed 29 Jan 2025 10:44:41 +0000
asID: 21859
IP address blocks: 185.139.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 00:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c6:e7:fe:1e:c6:8f:ad:42:de:75:f3:7d:9e:8c:8b:c0:41:57:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jan 31 10:39:41 2024 GMT
Not After : Jan 29 10:44:41 2025 GMT
Subject: CN=30489D8A31FE8D7012088B9D02F198D1F4901C28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:22:58:d6:33:89:d2:50:ba:6c:42:74:46:
53:8e:3f:9d:22:96:53:7b:a4:6f:cf:f2:3a:75:d3:
30:1a:64:b2:59:aa:0a:28:3c:39:e2:7d:ca:7c:60:
94:81:91:de:88:14:8d:ee:19:dc:a8:f6:49:3e:b7:
f3:3a:65:eb:39:e8:dc:d6:01:3d:41:23:18:40:f7:
a9:f5:eb:9c:2b:00:72:17:8c:46:e0:49:6e:30:d9:
30:35:79:fd:ad:7c:6e:fd:d1:8a:23:61:54:1c:3b:
3d:71:71:3c:1e:b8:a4:3b:38:ca:52:37:bb:42:0c:
54:8b:38:d2:f5:81:76:5f:3b:c4:7c:ef:86:d5:c1:
cb:69:b2:41:5b:63:b1:f4:4c:92:1a:10:5f:90:42:
77:c8:fe:47:8f:e1:5e:a2:4a:9a:4d:0e:47:57:28:
f2:70:12:d7:bc:05:35:bc:da:4e:c2:e7:42:35:d9:
86:9e:0a:82:f9:5f:0e:05:a2:c3:7c:a5:e4:7a:da:
f7:02:6f:ec:75:af:86:dd:17:78:f5:09:3f:fc:cb:
7e:75:b5:85:af:30:a7:21:c1:b8:30:bc:22:0b:f0:
50:d6:a1:01:6f:5d:7e:71:29:ad:db:b6:b5:96:2c:
d6:bf:28:61:21:77:96:2f:27:f4:38:38:c5:ae:76:
9b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:48:9D:8A:31:FE:8D:70:12:08:8B:9D:02:F1:98:D1:F4:90:1C:28
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32342e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.24.0/24
Signature Algorithm: sha256WithRSAEncryption
68:64:20:c2:82:46:26:3f:96:bf:24:9d:46:9c:c8:af:84:aa:
8d:28:e0:50:0c:e4:b8:03:0d:ff:c1:6b:05:11:a2:00:b7:1a:
4d:c5:95:a2:7b:5b:ef:59:ac:d7:da:64:da:15:c8:aa:19:41:
7f:b2:b1:f5:75:d7:47:00:7d:78:26:91:eb:e5:e0:cb:c9:6a:
d8:67:8b:63:3c:e4:43:a8:b0:43:8f:b9:61:57:2b:8c:5e:f4:
c3:ea:e8:7b:f3:1a:b0:75:a9:c7:96:26:e8:75:a2:72:bb:d7:
70:91:d5:35:fc:4f:6a:fe:34:a8:f2:1e:be:f8:50:43:c0:87:
8c:fd:43:45:62:75:7b:47:f5:da:63:ba:f6:13:d5:92:4e:11:
7d:04:f6:10:ce:35:14:9d:9c:52:ed:2d:61:eb:ea:c6:01:6f:
67:93:84:e5:93:39:b6:b8:bc:7f:f2:a1:63:30:99:f6:18:86:
f8:5e:b5:49:b2:6f:6f:a8:3e:81:83:14:a8:bb:37:73:d6:d2:
fb:bd:87:b2:e9:ab:b0:a6:47:06:dd:e6:c7:c5:c1:0f:6d:84:
10:95:5e:f4:fd:06:d8:53:58:4d:51:64:66:b8:af:71:42:88:
a3:8f:db:5a:61:35:55:f3:5f:d0:1e:3a:42:05:c5:b6:a5:d4:
d7:67:73:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 01:22:48 2024 by rpki-client on console-fra.rpki-client.org