Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230322e302f32342d3234203d3e203236303432.roa
File: 38352e3233372e3230322e302f32342d3234203d3e203236303432.roa (raw, json)
Hash identifier: Qn/TeZJaxLpTWsKB98VKXM3z3eXmBeFkSRIjkvmFSek=
Subject key identifier: 7B:8A:1F:C7:6D:8D:9F:7D:D2:12:CE:23:BB:F9:BA:AD:8C:4B:CF:DB
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 1D8A1C453CE65D48F32D0E2AC359FFDFD854D8AE
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230322e302f32342d3234203d3e203236303432.roa
Signing time: Wed 06 Mar 2024 04:46:50 +0000
ROA not before: Wed 06 Mar 2024 04:41:50 +0000
ROA not after: Wed 05 Mar 2025 04:46:50 +0000
asID: 26042
IP address blocks: 85.237.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:8a:1c:45:3c:e6:5d:48:f3:2d:0e:2a:c3:59:ff:df:d8:54:d8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Mar 6 04:41:50 2024 GMT
Not After : Mar 5 04:46:50 2025 GMT
Subject: CN=7B8A1FC76D8D9F7DD212CE23BBF9BAAD8C4BCFDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:68:50:a4:a0:84:7c:6d:ce:9b:30:bf:4c:c3:
b1:d7:d9:7c:29:aa:11:25:61:9b:3f:15:10:37:99:
d3:18:a4:fa:98:ba:1b:50:03:bd:33:06:5e:1e:86:
3f:a0:ce:ed:47:45:be:30:95:86:de:ba:06:6c:8e:
98:d7:d2:f9:df:2f:62:c9:d7:0c:6d:a6:ff:fc:58:
e1:60:78:da:65:ad:99:0c:96:4d:5a:55:2a:cd:7e:
b6:cb:31:0b:50:76:0b:93:f6:f0:16:36:01:95:26:
27:88:de:b6:7d:09:8e:dc:a3:64:4c:b6:60:2c:18:
8a:e8:dc:5b:2a:43:c8:da:80:1e:72:9e:a6:a5:10:
91:8d:a1:02:6e:77:26:d9:12:f9:5a:a0:9d:20:18:
e0:da:7c:41:ee:c0:ec:a5:17:7a:46:01:f8:61:b4:
96:55:f8:70:4f:6d:b8:54:b8:7d:75:52:27:97:ce:
d2:9d:49:c1:5a:86:f7:2e:4c:d1:57:67:9d:63:96:
69:cd:f1:67:58:fe:a0:ec:3c:29:dc:5a:ab:74:cd:
ea:15:97:dc:ef:1a:c7:b2:92:0b:a1:95:8d:59:75:
b3:fa:03:26:18:16:c9:2f:4b:ba:6b:6f:07:62:25:
4d:25:ec:44:31:53:34:0c:37:42:aa:49:93:c0:4d:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8A:1F:C7:6D:8D:9F:7D:D2:12:CE:23:BB:F9:BA:AD:8C:4B:CF:DB
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230322e302f32342d3234203d3e203236303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.202.0/24
Signature Algorithm: sha256WithRSAEncryption
19:69:00:0f:50:d9:21:28:5d:d5:f8:b1:dd:76:55:98:3f:ad:
fe:98:4b:5b:f6:e1:ba:22:92:51:bd:6e:41:31:f2:cf:34:73:
de:24:28:af:61:81:03:f6:b0:eb:a9:38:f3:9e:2f:44:db:92:
ab:dc:3c:15:e0:e0:89:c2:6e:7f:da:7a:ef:70:12:9a:25:15:
f9:0a:72:2c:1c:65:9a:9f:07:72:41:42:e5:2a:7e:c6:9c:ec:
9e:38:bf:9b:5c:ac:39:ae:2c:f5:8d:d2:bc:91:9f:d5:a4:fc:
7f:c1:7e:96:3d:64:c0:fb:f3:04:03:16:06:04:a8:ef:79:94:
c3:62:54:1a:80:bc:a5:b8:d4:9e:04:81:a7:20:7e:8d:21:8b:
fb:4d:6b:7d:12:b8:a2:fd:9d:9f:9b:f0:cb:b2:6a:ce:64:9b:
2f:5c:8a:83:bc:e5:27:47:2c:35:d0:d7:c7:33:fd:3a:81:f5:
8b:fd:d9:6a:16:1f:ae:bf:ce:1a:aa:96:94:04:4f:29:d2:9f:
8e:3a:ff:10:62:eb:5a:ba:28:ad:b8:cc:4d:1c:92:35:92:14:
ca:fe:3d:9f:07:74:1b:23:33:cb:8a:b5:cc:74:19:46:4c:27:
d1:4f:26:ea:02:4a:e6:51:36:86:27:6b:b5:30:f1:93:df:da:
c9:db:64:dc
-----BEGIN CERTIFICATE-----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Generated at Sat Apr 6 01:03:52 2024 by rpki-client on console-fra.rpki-client.org