Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135322e302f32342d3234203d3e20383334.roa
File: 3138382e3136342e3135322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Y8DyHusdiSS/N12vvHm3SYumqz3RFSc2bWuTBWfTaK8=
Subject key identifier: 2F:5F:68:0A:BD:9F:B0:DC:92:CA:0E:04:BA:83:87:72:63:B4:D5:8E
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 48301304218DA48C8A291EB78A5778685D309BB4
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135322e302f32342d3234203d3e20383334.roa
Signing time: Sat 24 Jun 2023 00:00:11 +0000
ROA not before: Fri 23 Jun 2023 23:55:11 +0000
ROA not after: Sat 22 Jun 2024 00:00:11 +0000
asID: 834
IP address blocks: 188.164.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:30:13:04:21:8d:a4:8c:8a:29:1e:b7:8a:57:78:68:5d:30:9b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Jun 23 23:55:11 2023 GMT
Not After : Jun 22 00:00:11 2024 GMT
Subject: CN=2F5F680ABD9FB0DC92CA0E04BA83877263B4D58E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:b5:5d:7a:f0:a9:68:76:f4:cc:f9:1e:c8:
73:81:f9:b9:03:69:d2:f2:ca:29:8f:f0:83:00:2f:
d6:1c:2c:cf:92:10:e6:a4:9d:04:6d:be:b0:02:8e:
8f:da:2c:e9:b0:bb:05:e5:ef:6f:d6:a3:32:4d:86:
4b:d9:1a:37:3a:7c:2c:de:35:b3:66:8e:9b:d9:71:
bf:b9:95:45:80:cd:ce:64:43:3d:92:cc:3c:fa:ae:
4a:c1:bb:47:bb:b9:53:30:11:33:87:1b:be:93:d1:
4a:bc:40:73:6b:6c:aa:43:cf:cc:57:09:2e:f6:1c:
d6:c3:4e:32:79:61:11:6d:72:ff:04:e5:42:30:41:
19:81:51:a5:a1:d1:a2:0a:b7:fb:a5:73:51:4a:41:
3e:02:2f:2b:8f:22:dc:9f:4f:a0:56:bb:e4:12:a3:
43:17:9d:00:f2:a3:ca:ec:91:47:dd:80:fd:ba:49:
d0:15:36:61:6a:91:82:c7:7a:87:22:5f:dc:2a:ae:
2e:b8:d6:36:92:2b:d1:d0:91:9d:81:0c:3a:19:6d:
a2:63:9b:f6:56:64:74:f6:3c:bb:af:b7:f3:98:1c:
1f:00:4d:ab:30:9d:c2:f3:f5:ea:74:04:f1:6c:02:
7a:e9:56:f5:14:ba:90:c2:3e:aa:6b:93:23:0f:67:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5F:68:0A:BD:9F:B0:DC:92:CA:0E:04:BA:83:87:72:63:B4:D5:8E
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.152.0/24
Signature Algorithm: sha256WithRSAEncryption
40:dd:84:b5:5b:7f:b8:2d:f6:22:5e:2a:a5:32:9b:95:a4:89:
f7:66:7a:5d:43:93:b1:56:c6:8e:df:ae:9e:29:5c:87:92:80:
53:bb:6b:69:ab:cc:27:e9:9a:4e:d6:8b:62:7d:b7:54:fd:b2:
c1:a9:21:8d:9c:ce:eb:12:2a:f5:00:33:61:e9:ff:e9:ce:ca:
6f:e7:c8:67:51:f0:14:1f:5b:40:b9:5d:d9:a9:e4:9b:69:64:
eb:3d:f0:d1:0b:4f:5e:07:c7:92:25:59:18:81:31:d2:bc:2b:
62:87:4a:4f:d9:35:5f:c2:ac:32:62:69:c1:33:5f:de:3d:9c:
56:08:2e:ed:b3:a8:b3:de:a0:bc:8c:97:ea:91:cb:c6:b6:91:
2f:60:97:9e:9e:1b:c2:0a:7b:c3:0d:9d:cd:8f:85:7c:ec:a7:
68:be:29:2b:2a:8d:e6:90:02:71:17:3f:6f:19:a7:ac:f1:a6:
fe:d0:89:2f:98:74:52:8c:e3:1c:aa:ab:20:df:11:12:3a:cb:
e9:66:1a:11:63:63:f9:d6:10:73:59:dd:c3:d5:39:9b:a1:d6:
b3:50:f2:d5:5c:e5:7f:01:b5:d2:40:0f:99:50:39:e6:e5:d8:
cb:84:ac:b4:aa:be:2b:b2:4f:76:0a:58:c0:b5:4e:cd:88:a3:
7c:68:d2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 14:28:02 2023 by rpki-client on console-ams.rpki-client.org