Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231312e302f32342d3234203d3e20383334.roa
File: 38352e3233372e3231312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: n8JWpsrIafy4G1H3klOyrhklboSZsQk1Murla3es720=
Subject key identifier: BB:01:A9:69:77:BB:11:10:D2:FC:62:23:9A:82:E7:72:3C:E7:99:67
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 64FDAD21BE6497BB75D0D62856A502ECBC8D9270
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231312e302f32342d3234203d3e20383334.roa
Signing time: Mon 01 Jul 2024 00:03:09 +0000
ROA not before: Sun 30 Jun 2024 23:58:09 +0000
ROA not after: Mon 30 Jun 2025 00:03:09 +0000
asID: 834
IP address blocks: 85.237.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 06:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:fd:ad:21:be:64:97:bb:75:d0:d6:28:56:a5:02:ec:bc:8d:92:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jun 30 23:58:09 2024 GMT
Not After : Jun 30 00:03:09 2025 GMT
Subject: CN=BB01A96977BB1110D2FC62239A82E7723CE79967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:78:de:99:36:f9:de:c9:93:6b:81:d5:f2:
21:43:09:06:ef:74:b5:f6:87:34:79:1a:3d:30:29:
73:19:49:76:13:dc:8f:4f:11:c7:07:69:eb:67:43:
86:2c:6c:33:d1:af:2f:02:58:8e:80:f2:5c:83:fa:
a0:f0:7b:92:49:da:bb:0e:e0:fc:a6:c7:41:a7:ec:
1f:d5:5f:d0:89:81:9c:ec:92:2f:55:2f:11:fb:f8:
cc:b6:71:e4:6c:d2:99:91:b5:ef:ce:9c:a4:be:58:
09:22:43:fd:f1:75:15:bb:86:32:ea:18:12:94:f4:
ac:cd:3d:f1:67:b4:63:c5:33:ad:88:a4:7c:b5:4c:
34:44:2c:b0:06:89:71:e3:68:27:88:45:c5:3e:ad:
eb:6d:13:6e:59:42:53:9a:48:f3:55:0b:ad:d3:c7:
b3:8e:7e:14:db:94:ae:b4:45:88:c5:9a:78:65:e7:
b9:43:95:89:e4:45:41:e0:33:e3:8f:8b:1d:dc:b8:
d0:b3:84:0e:07:e4:6c:a2:49:28:5f:36:1f:59:f1:
fe:c9:45:9e:e2:a2:78:a0:c2:f0:0d:8d:cd:d2:26:
98:e3:28:df:6d:5c:d2:77:4b:ca:ee:ac:42:76:11:
b2:05:68:c3:f8:bd:35:71:74:c9:a3:94:22:45:9e:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:01:A9:69:77:BB:11:10:D2:FC:62:23:9A:82:E7:72:3C:E7:99:67
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6a:10:2f:63:d3:ca:8a:b7:e1:74:a1:f9:d2:32:33:0f:f6:
3b:3b:68:26:0a:ed:54:5f:fb:c9:45:6d:ea:28:26:e1:bb:3c:
7c:d9:b0:66:1e:6f:3f:52:2b:ac:e2:48:59:96:30:3f:ae:98:
a0:2f:4b:5c:32:33:5f:c0:34:fd:3e:0d:12:fb:05:7b:fa:24:
06:2f:d8:34:ea:03:86:1d:fb:bf:8a:82:a0:58:84:43:40:ba:
51:44:58:34:11:48:2f:34:b6:a0:b0:df:d7:eb:bc:3f:e5:68:
10:44:0f:fd:eb:75:87:80:2f:c2:81:2e:e2:2c:30:a2:32:1a:
a0:db:67:81:04:dc:26:fb:fa:96:8a:6a:70:97:25:1f:0c:88:
bb:dd:b0:99:7d:19:1f:ac:1f:3f:e9:ef:c7:62:f4:c7:08:1d:
ce:d3:06:23:f2:d0:d9:aa:a2:98:66:f1:ff:81:c7:4d:21:05:
9e:9f:c7:0b:89:4c:b3:49:0a:f1:57:22:03:b8:0c:1f:e4:5f:
c6:ac:38:ec:b0:59:9b:09:bb:0e:1e:61:7d:16:fa:f6:73:79:
cb:42:ff:f7:f6:78:08:ba:87:f5:8c:2f:a1:a6:f1:56:38:b6:
f2:ad:a4:4f:e2:37:bd:68:89:6d:2c:14:3d:6e:0f:85:8b:7f:
76:04:38:86
-----BEGIN CERTIFICATE-----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Generated at Wed Jul 10 07:28:09 2024 by rpki-client on console-ams.rpki-client.org