Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231312e302f32342d3234203d3e20323035373333.roa
File: 38352e3233372e3231312e302f32342d3234203d3e20323035373333.roa (raw, json)
Hash identifier: qpuwJKVKoavbUjHL+SmTKZpxIPVcR1CNlmwNGxXtxtI=
Subject key identifier: EC:55:84:0F:78:87:38:09:A4:21:22:24:13:E2:7C:76:98:F3:5C:23
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 70C28EB51144AAA1C103E0B083A7740A498EF36F
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231312e302f32342d3234203d3e20323035373333.roa
Signing time: Wed 22 May 2024 22:23:56 +0000
ROA not before: Wed 22 May 2024 22:18:56 +0000
ROA not after: Wed 21 May 2025 22:23:56 +0000
asID: 205733
IP address blocks: 85.237.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 00:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c2:8e:b5:11:44:aa:a1:c1:03:e0:b0:83:a7:74:0a:49:8e:f3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: May 22 22:18:56 2024 GMT
Not After : May 21 22:23:56 2025 GMT
Subject: CN=EC55840F78873809A421222413E27C7698F35C23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:ae:16:85:e8:1c:68:7e:bb:6d:ea:e7:68:
04:81:1a:24:d6:08:2d:fa:99:ae:38:1d:a9:99:34:
5d:89:45:62:7b:ba:3f:b5:48:4e:a2:80:60:18:09:
f8:61:a9:2c:bc:08:1a:c3:d4:65:68:e1:e1:01:77:
98:61:c4:14:1d:e1:56:4b:d9:73:16:1b:f8:0a:f5:
da:4d:78:a9:b2:1d:18:b6:2d:aa:99:cf:45:d8:41:
90:db:ef:73:4a:01:fd:02:5b:af:5c:8e:85:e1:bd:
9a:3d:70:ac:fe:f7:99:15:58:ff:a2:69:54:2c:06:
4d:41:4e:15:1f:d4:16:cb:d9:de:2c:fb:7a:b9:74:
1d:16:b4:76:27:5c:f0:b1:ca:3d:b6:75:73:19:d4:
0b:92:82:b7:5b:25:5e:de:01:97:9e:7d:19:12:bd:
21:6f:68:21:91:2b:0e:91:b8:af:50:94:51:a7:c5:
87:5f:6e:25:c2:09:c7:16:32:a4:a1:04:96:53:b9:
35:9f:58:6f:62:77:3d:4f:ea:b5:33:1a:4c:dd:9c:
ed:3c:d3:cf:dc:55:38:1a:cf:f4:83:c0:5b:48:98:
ef:a8:ee:32:f4:e6:dd:ae:9d:6d:ca:51:88:07:6f:
3e:c4:b0:db:66:89:25:5d:be:ef:ff:0c:b3:d1:f4:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:55:84:0F:78:87:38:09:A4:21:22:24:13:E2:7C:76:98:F3:5C:23
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231312e302f32342d3234203d3e20323035373333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:4b:46:a6:a0:4d:e9:65:27:2f:4c:9c:5e:52:64:ab:be:f3:
95:1d:a0:e4:58:3a:ee:de:73:25:52:82:8c:f0:1e:82:08:57:
76:9a:5d:bb:b4:79:6e:99:e8:f3:a4:dd:17:15:cb:4d:f0:6d:
7c:b6:3a:a0:0b:79:59:09:a7:9b:40:e7:30:52:f4:71:f2:a4:
33:ee:25:eb:41:61:23:bf:37:f8:f8:bd:be:e3:ff:bf:20:53:
3b:57:d5:64:fd:43:18:43:09:60:e9:f7:5f:a6:14:8f:e0:30:
75:21:12:37:64:8e:5b:24:44:ce:05:9f:e7:f3:46:44:50:97:
26:0e:1d:b9:89:43:56:29:52:8d:97:00:fb:22:dd:a3:df:93:
8e:9f:f8:c4:e0:3e:97:7f:e3:be:58:95:ce:4f:c4:49:31:9e:
a0:d9:98:8a:f1:9f:ea:69:7c:96:35:88:42:4c:f4:cd:1f:d2:
6f:ea:43:b1:04:6b:48:ef:a6:8a:3e:c0:f3:d1:30:7d:76:e7:
10:b3:0a:19:18:2c:e5:da:68:f3:2b:c0:2e:77:5d:c3:7f:52:
b1:58:0f:9e:10:a4:64:a9:3f:52:93:3b:96:00:5d:75:89:ed:
30:00:46:39:45:31:c7:e0:45:42:58:de:34:78:88:2a:3b:57:
0e:f5:ae:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 02:02:48 2024 by rpki-client on console-fra.rpki-client.org