Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231352e302f32342d3234203d3e203631333137.roa
File: 38352e3233372e3231352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 9pR8gaSlqQrwQZ+tb/hYLXr8dMh5m9ulj939zD0Rvo0=
Subject key identifier: CB:41:75:46:97:74:92:1E:58:72:94:43:CB:91:03:6E:C7:E0:A1:39
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 15E2969239245C1DA25E817981E80A16E8C4CC98
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231352e302f32342d3234203d3e203631333137.roa
Signing time: Wed 08 Nov 2023 09:21:57 +0000
ROA not before: Wed 08 Nov 2023 09:16:57 +0000
ROA not after: Wed 06 Nov 2024 09:21:57 +0000
asID: 61317
IP address blocks: 85.237.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e2:96:92:39:24:5c:1d:a2:5e:81:79:81:e8:0a:16:e8:c4:cc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 09:16:57 2023 GMT
Not After : Nov 6 09:21:57 2024 GMT
Subject: CN=CB4175469774921E58729443CB91036EC7E0A139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:72:31:29:2e:2f:07:2f:5f:60:70:ad:5d:
50:5b:36:e1:e5:f2:f0:74:45:2b:94:eb:49:75:2b:
62:17:c6:37:ff:29:f3:4b:f6:4c:6e:c1:e8:57:42:
1b:5f:42:c0:85:60:76:a6:e4:d1:68:a7:07:55:b2:
9f:b2:d4:d9:43:9b:9a:30:76:e1:e6:af:f0:0e:0f:
34:f2:14:55:42:c2:00:9f:fa:74:76:e7:0f:3d:e3:
ef:0e:5a:71:26:1b:2c:33:8c:7a:e2:a6:7d:63:21:
36:e1:98:31:6f:96:a4:0b:ad:5c:26:df:92:ea:9a:
1b:2b:92:b0:4a:38:9f:ec:84:6e:c6:c4:4d:e2:b5:
67:df:1f:90:0b:a3:28:81:38:8c:be:69:d5:bb:8a:
23:fc:63:b1:2c:5f:ca:61:0f:ac:59:62:2a:91:e8:
d2:13:2b:db:4d:22:85:2d:7d:98:bb:b0:65:71:9e:
85:f3:6f:dd:30:99:c6:4d:fe:0e:0f:c5:79:9c:34:
2b:fd:8c:7f:6c:45:d3:f1:e9:d1:a2:78:4a:36:59:
11:d7:b0:10:6a:59:df:7b:56:28:65:06:69:28:31:
4c:ac:22:57:ed:78:d2:c5:4e:fc:a9:c5:b8:b8:ed:
91:86:bd:df:94:8d:d6:ec:6a:01:f9:5e:6c:42:93:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:75:46:97:74:92:1E:58:72:94:43:CB:91:03:6E:C7:E0:A1:39
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231352e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.215.0/24
Signature Algorithm: sha256WithRSAEncryption
86:94:92:b9:57:3c:d1:5c:92:7e:c8:c9:95:db:c8:6d:2a:db:
73:d1:41:6b:35:8e:c9:7f:02:32:e9:75:e7:67:1f:7d:f4:5e:
a9:e1:29:e5:32:d0:90:b7:d8:b3:a2:7a:83:18:07:1b:cd:54:
2b:5c:e4:f3:75:60:7b:4e:e1:0e:4c:43:05:3a:c1:92:1f:f2:
91:3f:13:8f:50:82:d3:66:c5:02:66:4c:09:f9:8b:5d:5e:4d:
43:84:2b:09:be:b9:63:29:3e:8a:df:75:52:df:a5:6b:e9:62:
94:9f:ac:70:02:59:35:e6:2e:f8:bb:e5:16:d6:a0:54:1f:0c:
cd:de:2d:e8:8c:89:58:7d:c3:29:c5:99:6c:8a:a7:d3:1e:46:
9c:85:bc:ec:15:24:99:0f:4f:ee:64:02:8c:51:b9:3c:93:67:
33:3c:1f:4d:7f:74:0e:b1:9f:02:78:4e:9f:e3:cb:fa:02:a8:
06:38:2d:e6:eb:5c:f4:81:92:2d:42:96:d3:ed:f5:58:02:b2:
b9:56:98:1b:3d:8a:30:a7:17:7b:fd:75:c3:e4:b2:65:53:dd:
cb:2f:18:30:18:91:99:76:ce:cb:aa:58:73:c9:5b:cb:ab:0d:
26:c0:6a:99:37:94:22:65:2e:7e:eb:5c:ce:88:dc:47:dd:6c:
3e:19:ec:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org