Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232332e302f32342d3234203d3e20323031383134.roa
File: 38352e3233372e3232332e302f32342d3234203d3e20323031383134.roa (raw, json)
Hash identifier: LlMEiQ6Dv40krIR9NY9Jh1ldMaGrvzS8Zr8Cc3gcxWs=
Subject key identifier: 0B:91:C5:FB:6A:0D:C5:3D:7A:F6:07:1D:44:F1:D3:5A:17:D8:B5:C9
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 074E58AA00D40469C09C9C726F0481B2C89D0F74
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232332e302f32342d3234203d3e20323031383134.roa
Signing time: Wed 08 Nov 2023 09:23:14 +0000
ROA not before: Wed 08 Nov 2023 09:18:14 +0000
ROA not after: Wed 06 Nov 2024 09:23:14 +0000
asID: 201814
IP address blocks: 85.237.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:4e:58:aa:00:d4:04:69:c0:9c:9c:72:6f:04:81:b2:c8:9d:0f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 09:18:14 2023 GMT
Not After : Nov 6 09:23:14 2024 GMT
Subject: CN=0B91C5FB6A0DC53D7AF6071D44F1D35A17D8B5C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:1b:de:c1:9c:29:81:ee:41:d9:c5:2e:95:
58:b4:19:58:02:87:50:83:ba:19:e2:fc:77:86:55:
9e:ae:89:0f:5f:e7:95:50:bb:d2:63:4c:fc:e8:e6:
bb:8c:f9:d6:3a:d7:29:9c:64:48:37:0f:54:b9:28:
a0:d1:44:06:f6:53:85:45:c6:98:63:b8:e3:0f:5f:
74:f7:2a:9b:f6:e0:fc:f5:7a:b0:01:0a:02:92:1c:
d0:1f:5d:d7:1f:2c:14:9b:80:88:5c:1f:92:c3:85:
e7:d7:ab:68:2b:36:2f:bc:5e:79:34:45:3d:2f:c9:
c8:7e:6b:65:aa:7f:54:d4:95:be:7e:e1:11:35:84:
8c:7e:57:79:7f:6a:30:11:08:67:e6:a4:d2:27:ba:
48:34:6b:74:85:7d:6c:ca:34:6a:b7:1a:58:c7:b3:
b4:0f:bb:df:5d:98:38:4d:ee:67:a5:30:ea:54:4f:
6f:24:62:50:ab:b5:a9:1d:4b:fe:fb:16:36:9a:3b:
88:c5:44:ef:54:71:6f:3f:72:9e:51:fd:9f:55:05:
64:7a:3b:31:ad:b0:e8:8e:07:83:61:11:a7:1e:c1:
62:85:42:15:82:f7:23:8e:b9:4a:fd:15:c4:29:48:
5e:55:45:39:41:eb:d2:4d:ba:67:0e:ee:47:78:e6:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:91:C5:FB:6A:0D:C5:3D:7A:F6:07:1D:44:F1:D3:5A:17:D8:B5:C9
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232332e302f32342d3234203d3e20323031383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.223.0/24
Signature Algorithm: sha256WithRSAEncryption
23:00:aa:f8:5c:ed:73:78:0c:7a:a4:02:36:9f:6b:24:fa:63:
15:77:3f:ad:9a:9c:5f:c0:e3:34:13:d7:0d:12:4d:ce:73:ac:
21:58:e4:2a:58:6f:52:49:26:d4:4f:6e:62:ec:d8:22:a7:aa:
aa:a3:79:c2:a6:09:a1:ce:76:15:99:50:d3:87:4e:9d:aa:c1:
69:7c:91:cb:02:81:57:cc:32:df:2a:6e:a9:41:a3:e7:1f:71:
0f:28:d5:fb:d1:f6:b4:8a:ef:35:69:9d:2e:7e:da:8b:25:30:
0e:58:47:81:c8:ab:a9:70:3d:b2:04:a4:9f:74:f1:1c:a5:00:
98:55:8a:ae:fa:d5:56:1a:23:01:d6:10:d9:29:58:3d:a8:5c:
d2:55:42:5b:8f:55:e6:ff:ad:9b:8d:e3:85:35:e4:8e:b5:ba:
08:f1:15:23:fe:c5:71:cb:b9:9b:80:90:c6:7c:e6:fc:ca:c3:
94:f4:f4:f8:01:16:95:f1:1f:5e:b0:c3:a2:82:d1:3d:63:f9:
0d:86:89:67:47:55:a2:50:a1:6b:de:15:d2:9f:ab:1a:23:bb:
22:48:40:31:43:d7:1d:aa:54:15:73:6d:76:3d:55:31:23:88:
18:07:ee:c5:70:23:cc:2d:74:67:d9:15:a3:f8:7b:e6:8c:04:
45:0e:8f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org