Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231352e302f32342d3234203d3e203239383032.roa
File: 38352e3233372e3231352e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: QY3X9fRv+rfZXxZm61IWUfh73VvPD/lsdGunPAYpLa4=
Subject key identifier: 34:F8:06:07:F2:9B:62:EE:B7:1A:37:D4:E7:75:57:DE:DA:FA:9F:0E
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 506E25DBC4BA9E7B4895D7F36ED32A8430073D66
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231352e302f32342d3234203d3e203239383032.roa
Signing time: Wed 08 Nov 2023 11:33:18 +0000
ROA not before: Wed 08 Nov 2023 11:28:18 +0000
ROA not after: Wed 06 Nov 2024 11:33:18 +0000
asID: 29802
IP address blocks: 85.237.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:6e:25:db:c4:ba:9e:7b:48:95:d7:f3:6e:d3:2a:84:30:07:3d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 11:28:18 2023 GMT
Not After : Nov 6 11:33:18 2024 GMT
Subject: CN=34F80607F29B62EEB71A37D4E77557DEDAFA9F0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:80:10:a5:14:a5:a7:18:36:ef:42:38:7a:
4e:4a:3e:5f:75:0a:24:c1:32:97:ae:96:12:9b:74:
eb:9a:23:e7:4f:ba:15:0a:1b:aa:3d:ee:74:78:52:
61:3c:c2:50:b5:9b:73:10:79:b2:c5:8a:81:c6:48:
e1:68:77:42:d8:06:78:a4:b5:cf:0e:5b:e5:30:f8:
52:3d:d9:b5:b9:f9:5b:c4:5d:86:49:ce:94:32:87:
8c:e8:8c:12:2d:3a:d6:36:9c:09:52:2a:6e:9c:99:
2a:bc:eb:93:58:70:fa:65:bb:bb:85:f9:11:7f:b0:
71:56:d0:a6:86:f5:de:69:1e:1e:e2:eb:20:b2:ab:
a4:72:7c:0a:f9:3a:ca:9a:81:cd:49:25:61:dc:3c:
e7:14:15:c8:78:76:c9:4f:49:19:84:16:ee:d2:39:
86:d6:d3:4f:be:18:c9:08:a1:5f:e4:9d:b8:f8:ed:
92:f9:11:f6:46:a7:f4:2b:d0:46:8a:ce:62:02:67:
2b:37:5e:d8:a2:99:31:e7:70:45:b7:1b:2b:e4:03:
89:f0:27:0a:8f:e3:b5:25:c9:61:81:f7:72:21:e1:
86:31:a4:6e:4e:bf:2b:23:8c:b0:09:bc:8c:0a:e8:
5f:87:b5:49:6d:53:cc:bf:50:74:7d:73:db:35:d7:
b0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F8:06:07:F2:9B:62:EE:B7:1A:37:D4:E7:75:57:DE:DA:FA:9F:0E
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231352e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.215.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fb:f0:18:61:21:60:8f:02:e8:40:dc:b3:0f:db:17:05:bd:
7a:05:db:8a:9a:1c:d1:a9:82:21:55:b2:8d:6d:0d:a8:17:8d:
24:5a:5e:e8:41:9a:45:42:ec:76:1a:cc:4f:12:e5:ab:fe:ed:
8a:20:97:27:0b:a8:ad:58:67:a8:e9:e8:98:53:4c:6f:57:33:
5a:ed:8e:24:ee:c9:fe:80:25:48:3d:84:a1:e0:3d:44:8c:4a:
c3:f7:67:53:5d:6e:b4:a5:4a:9b:ed:41:06:12:ba:5f:81:b1:
38:f1:c8:c3:81:24:33:da:27:ff:be:ba:e4:a5:b1:5e:c7:3f:
df:47:bc:f2:47:c5:a0:fe:b4:7f:7c:d2:12:b6:99:52:e4:ca:
b5:71:07:e6:a2:bb:bf:11:a4:08:a5:06:80:61:e1:27:c2:25:
9b:e8:c7:fa:df:36:18:f0:e4:a1:61:d3:2b:9d:bc:c4:9e:ab:
8c:79:e8:9e:21:13:63:aa:dd:84:30:42:00:a8:c4:2a:b9:db:
fe:c1:6a:ab:9f:4f:64:86:28:f6:0a:97:33:02:00:01:af:5d:
f7:e1:34:77:bb:d4:02:ee:a8:f9:e5:7e:ac:a4:4a:26:00:d1:
d6:4b:72:4a:9e:e9:1b:6f:88:74:0e:86:6e:16:ca:20:de:ce:
2f:c4:b2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org