Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e39332e33322e302f32342d3234203d3e20383334.roa
File: 3138352e39332e33322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: A8omODStStHjgwrQd/pnrLfGQ1SgYQjlfngHaUpJVE0=
Subject key identifier: 7D:7F:1F:23:30:D5:10:A0:A5:E6:26:D3:7D:C9:78:1E:7C:D0:C2:75
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 7E67724BC77C86A93E5B37D04C143B41B899F946
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e39332e33322e302f32342d3234203d3e20383334.roa
Signing time: Fri 26 Jan 2024 00:00:07 +0000
ROA not before: Thu 25 Jan 2024 23:55:07 +0000
ROA not after: Fri 24 Jan 2025 00:00:07 +0000
asID: 834
IP address blocks: 185.93.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 00:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:67:72:4b:c7:7c:86:a9:3e:5b:37:d0:4c:14:3b:41:b8:99:f9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jan 25 23:55:07 2024 GMT
Not After : Jan 24 00:00:07 2025 GMT
Subject: CN=7D7F1F2330D510A0A5E626D37DC9781E7CD0C275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:52:ac:4e:bc:ee:b6:12:e6:89:3b:0b:05:
48:ae:c7:fe:b4:fa:4d:c0:01:05:4c:d1:bc:48:d0:
02:1a:df:f0:89:9d:19:b8:e2:b1:46:06:51:54:73:
5b:d4:8d:b1:ad:bc:b2:31:85:29:60:57:7a:c2:41:
6f:3d:00:f8:2f:f4:9a:a5:38:04:f6:1b:96:05:86:
ee:b3:54:85:9d:88:ff:f2:95:49:13:ff:72:24:c3:
21:e5:7f:44:35:c7:ee:76:6f:c2:c7:46:51:6a:a0:
d8:04:cb:f4:38:8f:d7:57:72:c7:a5:64:d4:3d:2e:
8f:fe:94:4b:2a:3b:9c:c3:29:a8:77:c7:82:8b:98:
a4:21:cd:9c:2a:1c:b7:22:c7:5c:53:1b:c5:82:8d:
a0:f0:20:35:e4:c7:77:af:d8:d4:f0:7f:9f:78:e3:
0c:e3:e7:0e:37:e3:9e:78:97:8d:c5:32:43:ee:1b:
47:e6:d5:5a:47:e7:68:82:18:74:6b:34:b4:43:74:
78:64:68:85:5f:c4:1e:2c:40:9a:57:8c:0f:8f:d6:
cc:78:e6:b0:8f:2b:5a:eb:bb:6b:c7:fb:a7:b2:44:
37:e5:c8:f9:db:3d:9f:a6:22:60:10:56:d3:49:87:
68:2d:ab:71:25:82:b3:fc:07:d8:8e:01:ff:7b:81:
9e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7F:1F:23:30:D5:10:A0:A5:E6:26:D3:7D:C9:78:1E:7C:D0:C2:75
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e39332e33322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.32.0/24
Signature Algorithm: sha256WithRSAEncryption
73:1e:90:ec:9f:e1:7d:78:f2:95:2c:50:09:ec:22:73:dc:b6:
64:9b:c7:5e:dd:f3:b8:f9:82:b3:43:d9:d8:74:bb:f2:77:91:
fd:16:26:50:91:99:7b:34:b2:ca:2b:5a:63:17:f9:62:52:b4:
5b:af:07:8c:18:1e:27:ca:ee:fc:87:ba:4a:0c:38:80:a7:02:
e7:58:e9:6c:e2:72:57:7d:1b:7e:19:c8:b9:32:2f:be:af:bd:
9e:97:87:f9:8f:a9:fc:0e:40:09:ee:60:9c:03:6e:f1:9d:7e:
48:5b:bd:f7:8e:c5:ec:10:34:40:53:03:91:6a:1e:58:43:80:
f7:e7:71:a9:d2:46:2d:18:a5:7e:c8:22:b0:1b:2a:5c:ed:95:
e3:2a:92:da:80:68:9a:6a:78:06:fc:77:f0:50:fa:03:2e:c2:
ce:46:8a:4e:a1:f2:21:8a:5f:30:3b:9f:19:ba:0a:b5:74:74:
a1:d5:a5:8e:d1:44:6a:4b:89:d3:68:ef:32:a3:be:66:09:e7:
cb:a6:70:ea:a2:b2:ec:b6:e4:c7:70:3a:05:6e:c3:af:a4:54:
8b:2f:75:f0:be:64:3c:52:c3:30:5f:65:2b:6e:3d:e8:3b:76:
70:78:b0:61:67:e4:5d:c4:a1:f4:95:99:46:d2:27:e3:95:54:
32:93:d2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org