Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e2038313030.roa
File: 3138382e3136342e3135342e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier: lVvg5BweBXawdVOaG22Pm9qF++fPhw0IK6nnVIw3saU=
Subject key identifier: 24:B7:61:D7:E1:D4:32:E0:D0:7E:24:A5:B8:4F:AE:C2:B9:92:B0:10
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 7D8403DF32F57B7CF044799114A31B38AC0A0004
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e2038313030.roa
Signing time: Fri 16 Feb 2024 14:59:39 +0000
ROA not before: Fri 16 Feb 2024 14:54:39 +0000
ROA not after: Fri 14 Feb 2025 14:59:39 +0000
asID: 8100
IP address blocks: 188.164.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 13:21:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:84:03:df:32:f5:7b:7c:f0:44:79:91:14:a3:1b:38:ac:0a:00:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Feb 16 14:54:39 2024 GMT
Not After : Feb 14 14:59:39 2025 GMT
Subject: CN=24B761D7E1D432E0D07E24A5B84FAEC2B992B010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:eb:f1:89:e7:08:9a:76:c5:d0:80:c4:b1:
8f:23:dd:19:07:ea:a2:90:4e:87:33:6f:ae:1d:03:
c6:26:93:d9:41:a7:1f:ca:19:cc:25:22:75:e3:02:
61:fd:58:1c:a6:c8:7a:97:f5:35:0b:fd:32:f6:76:
a5:46:ce:4d:ab:26:58:62:4b:c5:9b:d6:19:75:02:
d8:44:34:ac:7f:4a:9b:47:d1:49:8b:a8:8b:c2:6b:
b7:62:84:58:b1:93:66:af:42:81:49:04:c3:e9:72:
86:e2:be:b0:9f:4b:ea:4c:a8:a1:89:7c:8d:9b:a3:
4b:0d:24:0a:2b:9b:1d:fa:65:45:79:94:38:6e:13:
22:fc:6b:78:45:64:38:c3:b1:f1:d9:6c:f4:6c:19:
7d:d7:1b:7d:1e:e5:1b:50:f4:85:2c:0a:72:e1:59:
7a:a1:65:2a:a9:70:bb:36:da:be:2e:8a:9a:3d:ae:
06:79:c5:7c:3e:9a:8b:b4:cb:60:8e:b8:e5:a0:9c:
be:5b:92:4d:5c:ae:15:cd:6c:00:7a:ee:37:56:0d:
88:a5:6a:4b:ab:48:2b:4e:d5:fd:6b:ce:cc:b8:3b:
df:82:43:8b:f3:be:a3:b9:e5:83:85:74:9c:33:9e:
bc:3d:c8:20:c2:f0:4c:53:f9:ad:74:89:f2:b1:4f:
f9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B7:61:D7:E1:D4:32:E0:D0:7E:24:A5:B8:4F:AE:C2:B9:92:B0:10
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e2038313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.154.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b5:8f:3c:7d:d6:7e:32:a4:a1:52:5a:b5:26:f2:ab:e2:4f:
48:42:be:18:c0:0f:d8:1c:5b:e1:54:c5:11:91:57:bc:8d:bb:
6a:64:91:71:22:5b:e8:00:b9:f2:11:9e:8f:9a:1f:e3:03:b6:
26:78:05:bd:55:84:76:94:ed:e9:38:38:ef:34:62:d5:98:e7:
cf:9b:8e:58:c2:dc:ee:4e:6f:7b:b3:37:e6:84:4e:19:19:6a:
26:f9:fa:b6:79:48:dc:32:c6:a2:f2:ea:c5:02:56:db:f1:4a:
32:be:de:b4:84:90:25:b0:b5:4c:47:35:26:8c:93:37:17:07:
8c:02:2e:99:c7:0a:69:df:8e:c0:36:14:77:2e:1a:d7:27:b7:
b0:20:d0:b2:bd:84:ed:a9:63:49:7e:f1:38:57:f9:ef:24:87:
f7:0d:c0:92:e9:ca:b0:a6:92:9e:a4:73:71:d6:37:a1:19:2e:
a3:52:91:00:84:83:ea:fb:e8:f3:37:fa:71:07:ed:43:1e:ca:
cb:03:9c:ff:c7:6a:43:0d:38:f8:ac:79:e8:b9:16:f3:79:19:
38:67:65:a3:6e:e3:f2:ed:d2:b6:f0:ee:a3:3f:20:60:55:24:
f6:f2:c7:af:0d:b2:cd:f8:9f:25:a3:58:89:b0:a7:29:e9:33:
d6:ef:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:17 2024 by rpki-client on console-fra.rpki-client.org