Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32342e302f32342d3234203d3e203539343236.roa
File: 3138352e3133392e32342e302f32342d3234203d3e203539343236.roa (raw, json)
Hash identifier: Ka0k6M6W/tXL6BPDATo6pUwAAQ6yMPUyYu9Xsq8DXOU=
Subject key identifier: D9:F4:4F:A5:97:8E:74:BB:61:FA:23:27:5C:73:4F:13:60:50:87:79
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 040CD7D3CB7AFB266E8929B4E38913C9670476A3
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32342e302f32342d3234203d3e203539343236.roa
Signing time: Wed 08 Nov 2023 09:21:32 +0000
ROA not before: Wed 08 Nov 2023 09:16:32 +0000
ROA not after: Wed 06 Nov 2024 09:21:32 +0000
asID: 59426
IP address blocks: 185.139.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:0c:d7:d3:cb:7a:fb:26:6e:89:29:b4:e3:89:13:c9:67:04:76:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 09:16:32 2023 GMT
Not After : Nov 6 09:21:32 2024 GMT
Subject: CN=D9F44FA5978E74BB61FA23275C734F1360508779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1e:38:78:d8:16:3d:78:23:3b:07:4a:43:2a:
27:b1:0c:3d:d4:7b:a7:e3:80:c9:10:ec:89:0e:47:
d5:67:17:3a:36:fc:4e:d4:af:c8:aa:3f:36:87:54:
75:bb:31:8d:49:ad:27:0a:e4:d7:72:11:a8:b5:37:
46:02:fb:d7:53:f2:5b:ce:47:13:c8:93:a0:7e:ee:
32:76:d5:02:df:48:ac:5d:65:89:ea:bd:35:42:18:
fb:c6:78:d4:02:ca:35:80:a3:f7:0b:3b:33:f8:96:
8b:20:f4:12:dd:d1:06:0e:08:05:bf:02:15:5a:7a:
49:6e:93:ad:ac:13:56:a6:18:da:70:15:1e:c4:8a:
b9:fc:48:4e:00:1e:6c:3e:81:e2:e8:b7:d3:0c:cf:
b9:c1:0e:cd:20:f9:e9:0b:52:2a:bb:3a:cc:86:da:
bc:c1:d7:c4:84:a5:01:1b:37:e6:23:71:41:1b:f1:
5a:27:c1:7c:30:36:f5:fa:2d:4d:bf:c9:63:77:e5:
5e:ce:67:e5:c9:e1:3b:77:55:23:ad:6f:b1:fe:c5:
6f:cd:3f:b3:d6:c1:1d:cb:de:f2:70:7b:9f:b3:01:
5f:ff:53:3f:8d:d8:06:8a:cd:9d:47:d0:9b:f6:33:
05:5a:26:05:6d:a9:09:ca:2c:8e:80:93:ac:be:96:
93:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F4:4F:A5:97:8E:74:BB:61:FA:23:27:5C:73:4F:13:60:50:87:79
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32342e302f32342d3234203d3e203539343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.24.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ff:c1:22:c4:30:7c:3b:62:d8:5b:27:48:69:2d:3c:38:ad:
60:e5:c3:29:7f:fe:97:42:d3:f6:d9:b4:3a:92:40:08:0c:f8:
5a:1c:c3:25:52:ea:6d:1f:45:10:94:b7:c6:48:30:94:3e:92:
1c:bf:3b:09:4c:9c:8e:85:5a:57:a4:d2:16:bb:0f:4b:ad:7f:
a9:ff:a6:56:af:6f:d0:f7:24:cd:b2:83:de:d3:e3:08:9a:d0:
2b:83:2b:c4:7b:c9:86:d6:6e:4e:5e:4e:1e:74:7a:3b:46:87:
9b:dd:60:d8:71:ba:15:b0:06:a9:54:41:1b:fc:3f:cd:ed:54:
ad:f8:1f:a3:82:6a:c8:0b:b8:b0:d0:d0:73:ab:13:f2:d7:32:
4a:12:ed:69:20:65:a3:2c:b7:52:fc:72:c2:28:60:1f:0f:cd:
b6:b8:57:9d:41:65:51:61:fc:59:ec:ba:8e:5b:e6:2c:72:00:
c4:57:09:68:c6:3f:59:b9:ba:d4:f5:1d:fa:11:31:d4:f3:cd:
ac:b6:40:7f:51:a6:37:b2:b4:4e:35:5a:35:b9:de:fc:1d:6e:
b2:fb:bd:ea:ea:a2:e3:81:2a:b8:3e:a5:cf:73:73:1c:2c:b9:
f4:22:df:3b:a3:33:52:82:f6:50:e7:a0:f2:4d:40:db:4a:2a:
c4:fd:3d:c4
-----BEGIN CERTIFICATE-----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Generated at Sun Nov 19 06:46:21 2023 by rpki-client on console-ams.rpki-client.org