Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230312e302f32342d3234203d3e20383334.roa
File: 38352e3233372e3230312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: aDBzZx/9yLgq5g5HjgUcaDQVo8nJOlydj4vW3aWu++Q=
Subject key identifier: 30:66:D1:44:FD:25:35:38:12:D4:96:F2:BD:9F:2A:0D:0F:56:72:35
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 23ADEAA93A49FD40681CB6DC928EB1BF8989156B
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230312e302f32342d3234203d3e20383334.roa
Signing time: Sat 25 May 2024 00:02:31 +0000
ROA not before: Fri 24 May 2024 23:57:31 +0000
ROA not after: Sat 24 May 2025 00:02:31 +0000
asID: 834
IP address blocks: 85.237.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 06:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ad:ea:a9:3a:49:fd:40:68:1c:b6:dc:92:8e:b1:bf:89:89:15:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: May 24 23:57:31 2024 GMT
Not After : May 24 00:02:31 2025 GMT
Subject: CN=3066D144FD25353812D496F2BD9F2A0D0F567235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:41:92:5b:52:f1:cd:09:98:84:fb:8e:6a:
aa:af:30:8a:73:31:88:2d:96:32:97:d0:98:08:00:
19:ac:19:c2:63:7e:ea:54:01:b4:e9:db:c5:07:a1:
3b:ec:cf:f3:35:ed:88:b4:18:82:54:f3:01:cb:b8:
64:80:20:90:06:ab:07:eb:32:e6:34:e4:38:9b:14:
c8:1c:79:f4:52:a1:ba:54:7d:86:a9:34:58:7a:d2:
9a:3d:78:2c:c7:12:eb:ff:fe:88:cb:df:1f:dd:58:
91:fd:13:fb:b8:6a:fe:a7:0a:1b:88:4c:32:47:1c:
38:7d:6c:d1:79:d3:a9:de:b0:0a:6e:76:f3:ab:35:
e6:d4:53:86:c1:d5:3a:83:6a:21:50:b3:a5:91:e1:
f8:f4:3b:66:06:9d:a8:5d:dc:8b:0b:8d:0f:10:cd:
48:89:c5:77:7a:1b:4e:ac:fd:ae:74:a2:c2:67:c4:
c7:9a:8f:22:60:90:d3:56:b9:76:1f:14:b9:44:71:
1d:6f:89:cf:29:d7:99:4a:52:ae:d9:54:73:2d:58:
56:2d:a6:a6:26:19:49:04:8c:e7:e9:ec:07:1d:8d:
6c:de:cf:6e:85:46:0b:e7:0a:33:87:48:5f:75:b8:
0a:f3:12:1f:f6:29:ee:d9:64:bb:92:bf:6c:52:aa:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:66:D1:44:FD:25:35:38:12:D4:96:F2:BD:9F:2A:0D:0F:56:72:35
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.201.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:49:60:86:3f:72:ad:9b:26:bb:bf:10:cf:f7:d6:af:2f:09:
db:eb:2f:d6:d6:60:87:6c:5d:5b:b7:ff:40:59:d9:d6:c1:18:
c7:c0:5d:3d:25:e6:b0:8a:2b:5b:c5:bc:f1:2f:c9:ab:2f:84:
66:bd:14:a9:c7:f7:1e:c2:98:5b:f7:13:fc:af:c1:1f:c1:ac:
7c:55:b2:2e:d6:1a:21:e2:db:a6:e9:81:19:5d:ec:cd:14:1e:
e4:d0:94:8d:12:0e:cc:f5:b4:03:38:b9:70:86:3c:1e:f4:23:
63:e8:1b:03:13:0c:7c:61:03:3b:07:fe:10:45:3d:57:f2:df:
56:3b:8b:78:d3:41:26:e7:83:e0:4f:01:eb:79:1b:90:86:67:
aa:30:03:72:bb:f8:f1:ce:eb:4b:72:5c:85:bb:8e:61:ed:78:
ec:7d:ff:ea:d5:7d:11:2d:49:12:23:11:f4:88:f2:25:a2:8b:
99:22:7b:8e:70:56:42:f1:fa:fe:84:af:c4:de:53:1e:4c:a7:
51:21:70:b8:bf:72:e0:06:40:5b:9f:d6:2a:b5:5f:ba:5b:7a:
10:99:c2:03:51:6b:e2:6e:e8:ae:3a:5c:7d:7d:83:60:ce:0b:
7e:2f:01:fb:68:fe:a8:6b:f3:9e:06:a2:09:6c:8f:75:d1:69:
0e:dd:ad:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:54:52 2024 by rpki-client on console-fra.rpki-client.org