Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232322e302f32342d3234203d3e203231383539.roa
File: 38352e3233372e3232322e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: 8HaPCMYg1dzDXYLzowiTIlSANW0xkHF6n2Ky+ImQgc0=
Subject key identifier: 02:50:D8:41:5E:30:C5:BC:96:2A:E9:11:1B:FC:26:1B:95:B8:CD:91
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 4AE2648CD5117BDCD0C5E42AFCBC59D6A888CF04
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232322e302f32342d3234203d3e203231383539.roa
Signing time: Wed 31 Jan 2024 10:46:20 +0000
ROA not before: Wed 31 Jan 2024 10:41:20 +0000
ROA not after: Wed 29 Jan 2025 10:46:20 +0000
asID: 21859
IP address blocks: 85.237.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 00:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e2:64:8c:d5:11:7b:dc:d0:c5:e4:2a:fc:bc:59:d6:a8:88:cf:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jan 31 10:41:20 2024 GMT
Not After : Jan 29 10:46:20 2025 GMT
Subject: CN=0250D8415E30C5BC962AE9111BFC261B95B8CD91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c8:d3:f3:ad:89:ca:23:1a:a9:3f:00:4e:15:
fe:b0:9a:43:a8:3b:60:be:52:85:ff:64:03:74:0b:
6f:24:37:f1:e5:d5:eb:a6:b9:b0:5a:e0:6b:d2:d8:
4a:e7:53:dc:5e:bb:b5:7f:b1:95:9c:7f:28:68:71:
a0:d3:c9:83:c6:0d:7a:a9:20:7f:41:1b:43:06:09:
bc:34:20:42:57:e2:8f:72:61:e3:2c:27:04:d7:b4:
51:c0:99:83:d6:6b:29:c1:cc:f5:45:64:52:4c:9c:
06:c4:71:c1:2f:f7:f4:75:94:ff:22:44:6f:15:d0:
01:30:89:dc:2b:c5:b7:29:ba:70:1d:65:61:46:f2:
46:21:68:d0:69:e4:c6:72:de:cb:99:b2:44:15:42:
5b:3c:8b:7f:3c:ca:98:90:27:c9:c9:08:dc:02:94:
11:d6:c6:28:83:b9:05:d4:90:82:f5:7d:b5:c2:88:
6c:97:1a:85:1b:c7:53:44:48:32:88:ac:04:0e:e2:
ea:94:af:74:ae:ca:d3:fe:0d:36:05:93:ba:4b:10:
b3:40:57:07:53:c9:9c:9d:41:f2:cf:af:4a:f1:f3:
17:03:87:a4:8c:bc:58:34:3a:b0:e9:a3:82:b8:35:
f1:ed:79:ed:a7:1e:2a:bd:9b:3b:05:56:d6:75:54:
75:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:50:D8:41:5E:30:C5:BC:96:2A:E9:11:1B:FC:26:1B:95:B8:CD:91
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232322e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.222.0/24
Signature Algorithm: sha256WithRSAEncryption
93:58:30:e2:83:00:1f:c9:2c:b6:eb:be:6e:6f:92:96:91:57:
17:bf:ae:96:26:6f:ce:b1:eb:c6:ab:c6:f2:55:8f:28:fd:11:
22:5e:67:44:9e:57:fb:e9:a5:26:fd:eb:ba:e3:22:05:c4:7f:
c0:83:08:c2:fa:17:92:27:bd:c5:02:ea:dc:82:5a:c8:46:db:
b9:06:2c:04:25:d4:6c:08:fc:cb:15:3c:50:40:e9:eb:9f:04:
ba:75:31:c1:ae:5c:b2:17:45:ff:06:38:84:34:97:b7:d2:40:
8c:01:9b:bc:32:da:98:26:b6:3d:01:cb:05:71:ff:f3:d1:c5:
83:6c:61:95:f9:f1:b1:2a:57:40:61:5b:e1:0d:f9:09:62:57:
30:ed:da:29:7f:dd:89:ae:53:1f:1a:23:c8:83:dc:bf:a2:fa:
92:8a:56:39:6e:4c:4a:f2:7f:3e:96:dc:60:36:9e:2e:3d:39:
14:ed:cc:6c:1b:e5:7c:59:19:c5:b6:66:ef:a0:f8:a5:30:2d:
b6:64:2c:1d:11:7a:26:28:c4:56:71:75:d0:71:5a:b3:15:3a:
66:96:c5:69:c4:cb:ab:b0:e9:27:7d:07:14:88:98:7f:a2:22:
87:bd:72:9d:16:85:e8:cd:e0:aa:24:e1:8f:3c:67:e2:b8:8e:
b4:d9:23:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:11:17 2024 by rpki-client on console-fra.rpki-client.org