Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231362e302f32342d3234203d3e203631333137.roa
File: 38352e3233372e3231362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: FCYr8eX7H411feAeY+Q+Hx7aTVFwkMAlD0/ejYTGjKk=
Subject key identifier: 75:64:F5:C9:3B:E7:84:CC:1D:22:2D:CF:B1:87:EA:9E:95:6B:52:F6
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 294DE8359C3E4B6F4008272D3F92034759ED6EA7
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231362e302f32342d3234203d3e203631333137.roa
Signing time: Wed 08 Nov 2023 09:22:05 +0000
ROA not before: Wed 08 Nov 2023 09:17:05 +0000
ROA not after: Wed 06 Nov 2024 09:22:05 +0000
asID: 61317
IP address blocks: 85.237.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 17:28:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:4d:e8:35:9c:3e:4b:6f:40:08:27:2d:3f:92:03:47:59:ed:6e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 09:17:05 2023 GMT
Not After : Nov 6 09:22:05 2024 GMT
Subject: CN=7564F5C93BE784CC1D222DCFB187EA9E956B52F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:fd:d4:ca:ed:c7:72:20:0f:ef:43:c3:9e:
87:77:6f:14:d7:c7:14:ca:d2:63:ea:1a:ca:5e:51:
4f:5d:3e:27:3f:db:1c:b1:d5:83:e1:82:05:98:cb:
dd:a2:d3:94:ed:2c:11:27:03:3a:e5:4d:09:b2:38:
c2:39:59:0c:a3:f7:aa:8c:38:8c:64:d2:b5:e5:97:
5a:ea:56:e4:b3:a7:fe:a1:4b:48:f0:b1:e2:a5:ef:
0a:8d:fe:5f:54:11:24:5b:f0:86:d7:2e:73:76:b6:
bc:4c:c2:0a:bd:3e:2d:24:d8:6a:a0:d3:5e:b3:30:
63:da:5d:d1:cf:d7:07:e1:09:02:8e:2f:3a:40:b8:
7f:10:dd:31:47:3b:12:f1:ca:9a:5d:10:06:41:4a:
22:9b:b5:67:6e:4e:de:bd:ec:3c:00:30:23:72:d0:
57:22:d2:df:8e:56:73:6e:25:20:fe:27:e1:86:42:
71:48:bb:29:eb:d9:5a:28:f3:f6:3d:eb:bd:a3:d0:
71:7d:0e:d3:47:98:90:75:2e:db:04:61:81:0b:7e:
3b:11:65:0a:69:5a:19:d0:23:da:6a:0f:c3:14:76:
e6:3e:ef:e0:86:62:dc:eb:60:c6:2b:35:1b:7d:ee:
d3:86:52:41:48:a5:a4:6a:fd:a5:90:d9:4b:56:8a:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:64:F5:C9:3B:E7:84:CC:1D:22:2D:CF:B1:87:EA:9E:95:6B:52:F6
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231362e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.216.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a8:b4:d4:31:13:3e:19:10:ba:fe:ae:89:d3:04:3b:c6:52:
17:8a:d3:9d:77:14:dd:e1:fb:e8:82:0c:3b:4c:30:de:8c:15:
db:5f:7b:ca:b1:bc:43:be:c6:9c:0e:5a:a2:76:c8:ec:ff:27:
c8:ac:cb:7a:17:bc:9a:9d:74:ee:7e:ae:81:3a:a3:f9:b2:1c:
14:bf:b9:c3:10:41:f2:ba:70:88:00:cf:f6:ea:0c:6e:e7:52:
68:2f:9e:08:16:c5:6e:c9:3f:eb:3e:75:c3:81:c5:58:37:d2:
ad:51:7b:8c:a3:1b:07:d6:26:2e:03:88:0e:91:fa:76:2d:bd:
3a:10:87:ac:36:95:31:e8:00:67:01:2d:69:fc:aa:32:c7:1a:
ad:d5:54:df:8c:ab:92:be:db:e7:4e:51:60:bc:ca:1f:30:45:
e3:26:75:1c:47:d0:10:83:ef:47:13:59:8b:f9:ff:b3:22:20:
78:88:6c:13:e8:2d:e3:92:03:38:61:c7:9f:19:9b:b1:5d:d5:
aa:f2:e0:92:5c:ab:c9:f4:89:29:a4:7b:4d:33:da:e7:0f:16:
3f:c9:6f:c7:b3:3c:5d:f4:74:5c:48:b5:82:30:75:2c:04:9e:
4f:43:17:00:fa:c5:81:41:ea:cf:56:4e:2a:e9:8d:d5:96:29:
d0:2a:e9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org