Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230322e302f32342d3234203d3e203231383539.roa
File: 38352e3233372e3230322e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: d3UiSuil6zXTaCuIEoAfi2bwvafdJf5LaPY9JEtfnMw=
Subject key identifier: 90:EB:BC:C9:24:B3:38:22:40:51:E2:C3:E8:26:E5:49:B8:A6:78:60
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 66CC50D45E008AC6EE8279F095FA6A6BE8797325
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230322e302f32342d3234203d3e203231383539.roa
Signing time: Fri 20 Dec 2024 09:48:36 +0000
ROA not before: Fri 20 Dec 2024 09:43:36 +0000
ROA not after: Fri 19 Dec 2025 09:48:36 +0000
asID: 21859
IP address blocks: 85.237.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 00:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:cc:50:d4:5e:00:8a:c6:ee:82:79:f0:95:fa:6a:6b:e8:79:73:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Dec 20 09:43:36 2024 GMT
Not After : Dec 19 09:48:36 2025 GMT
Subject: CN=90EBBCC924B338224051E2C3E826E549B8A67860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:3b:c2:ee:b0:2a:19:1b:c9:2f:d5:9b:c5:
b1:13:ef:37:03:07:97:9a:50:c4:97:8b:f8:18:1f:
7c:17:de:c2:b0:d7:fb:04:4c:a1:7c:bf:34:ae:be:
58:7c:6e:65:1a:b8:3c:ce:6f:f6:2b:4a:c2:0d:87:
71:c4:00:ed:76:90:b8:76:94:ae:45:ed:b8:63:28:
aa:a1:e1:ee:d6:9d:ef:50:30:7d:6d:91:ba:3b:d3:
a9:29:76:ee:0d:ed:9a:48:df:7c:b8:36:ee:c2:a5:
ff:3b:0f:34:63:d7:d2:7f:19:a1:f6:4e:bd:72:02:
3f:09:47:00:0f:53:dd:84:c2:b2:35:44:3d:ff:20:
66:da:a9:57:6f:98:db:ae:75:d9:52:fa:c9:c9:a6:
9b:be:8f:03:7c:5c:d3:21:35:94:cb:3b:ff:bd:11:
af:34:35:cd:52:fc:a0:d4:ad:53:ba:09:54:99:df:
ff:27:6e:b3:aa:de:1c:6a:6a:7f:32:3d:c7:ca:67:
8c:a1:79:4b:81:e9:d1:8d:17:82:26:27:8e:2f:35:
d0:8a:46:e0:17:c2:46:4b:41:a7:bd:61:93:1d:70:
d0:8a:bf:50:bf:5d:be:73:06:f9:05:8c:51:0b:f9:
6e:d0:8a:6a:ef:31:1e:ec:5d:84:ad:02:bd:39:82:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EB:BC:C9:24:B3:38:22:40:51:E2:C3:E8:26:E5:49:B8:A6:78:60
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230322e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.202.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:62:a1:a0:7c:7b:ec:90:a5:06:d4:fd:9d:11:49:2e:32:e6:
68:2d:19:31:6c:7b:30:40:48:0b:e2:94:53:8d:b0:33:ad:b9:
8d:53:f9:d3:1e:4d:01:9a:6c:f2:5a:81:f2:6c:56:56:37:2d:
d7:61:f3:c5:fd:da:c7:da:c4:6c:04:44:4e:ce:95:05:a5:2d:
7c:48:22:8c:bd:c1:60:06:37:c8:88:d5:dc:69:bc:68:7a:1c:
dd:58:ff:97:6b:02:e5:24:c2:36:5c:1a:e5:9f:3f:db:66:fe:
e9:fc:4b:be:d1:dd:a3:d0:9c:1a:03:e8:41:01:d7:ac:eb:cf:
da:41:f8:f1:fd:ea:a2:90:7c:85:27:28:10:71:0d:df:4c:93:
e5:a9:ac:1b:54:e3:99:86:09:d9:6c:5e:a7:3c:84:d6:8f:af:
ba:0f:5d:d5:4f:eb:3e:d0:6c:ae:67:52:22:59:e7:2f:d9:a9:
28:d6:a5:0f:83:b0:14:45:2a:6c:a2:71:03:6f:c3:84:42:83:
26:f2:18:7f:54:ee:0a:6c:f1:7d:db:6c:5e:1d:ec:19:d9:d1:
18:93:62:7e:fb:e9:f8:64:86:8e:a0:7e:5b:95:7b:b3:67:7f:
6d:f8:93:d6:e8:fa:1c:47:a0:e0:a6:6c:b1:a5:ff:21:37:22:
4a:47:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 04:38:13 2025 by rpki-client