Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135352e302f32342d3234203d3e20383334.roa
File: 3138382e3136342e3135352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: pILhU78XJ32Wn+0BJ48xzyxlg7YzytTOUdnVsr4El1k=
Subject key identifier: 57:86:74:76:37:23:D8:D1:69:BE:57:D1:C5:75:5A:E7:E8:59:9D:62
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 71CC5B71DA12949C289BED3711B2BA51116EA3F9
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135352e302f32342d3234203d3e20383334.roa
Signing time: Sun 25 Jun 2023 00:00:09 +0000
ROA not before: Sat 24 Jun 2023 23:55:09 +0000
ROA not after: Sun 23 Jun 2024 00:00:09 +0000
asID: 834
IP address blocks: 188.164.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:cc:5b:71:da:12:94:9c:28:9b:ed:37:11:b2:ba:51:11:6e:a3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Jun 24 23:55:09 2023 GMT
Not After : Jun 23 00:00:09 2024 GMT
Subject: CN=578674763723D8D169BE57D1C5755AE7E8599D62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:c4:0c:2c:47:ca:83:14:94:1d:87:57:c1:
97:33:53:69:5b:e1:3a:3c:9f:37:d5:fa:7f:c9:52:
00:e8:b4:83:f7:19:e8:bc:d5:f7:6c:74:1a:be:49:
79:b5:de:18:09:65:12:5e:92:5c:3a:0a:1d:94:47:
47:4e:75:ae:3e:6f:f3:12:b9:48:a3:da:95:bc:bb:
5f:cc:11:14:4e:0d:09:30:bc:e2:54:e5:9b:10:3d:
b8:84:95:60:63:f5:15:80:a3:b7:5e:d7:08:71:03:
c3:90:06:79:9b:47:20:e3:56:58:b5:d2:97:be:4d:
72:de:4f:e6:ef:2e:bb:71:56:97:d7:c5:92:82:48:
61:ea:b3:ee:1e:d0:40:eb:de:21:5e:22:ac:80:c7:
47:cd:4d:c7:73:3e:e9:fb:ba:5f:2b:aa:90:bc:89:
00:82:31:0c:78:d5:5e:46:7d:bc:e7:7e:7e:74:d2:
61:b9:be:44:62:f2:a9:87:d7:5d:a2:b6:9a:96:4a:
9f:40:40:a7:7b:f0:39:b8:ae:27:66:0e:0e:e4:df:
e1:28:4c:78:c4:45:e7:31:42:b0:81:30:5a:ae:35:
1b:7c:f9:cd:af:a3:e9:e9:58:68:37:2c:91:0e:0b:
0f:bd:cb:01:2e:4c:c5:c2:87:94:15:15:42:88:81:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:86:74:76:37:23:D8:D1:69:BE:57:D1:C5:75:5A:E7:E8:59:9D:62
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.155.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ba:05:56:d7:5b:b6:3b:a7:df:71:51:6b:73:5e:5c:0d:58:
fb:ce:98:c5:c2:7c:a7:02:8e:c5:10:d0:34:a4:bf:28:52:3d:
a5:5f:26:9b:06:a4:a5:3c:9c:0f:1b:d2:38:35:29:aa:d9:7e:
10:14:c2:c0:6c:e4:58:45:58:a6:30:3a:97:3d:2a:32:45:4e:
78:42:30:07:2f:02:a7:88:b1:d5:07:3f:a5:55:ae:fe:34:6a:
c6:0b:25:a9:9d:15:ed:de:fc:7a:dd:e0:40:da:a5:59:46:e8:
cb:05:d2:af:59:82:c0:33:8d:6a:49:dc:35:fd:f1:07:2a:6f:
f5:44:38:f9:0b:cd:a4:59:ca:c4:45:e1:35:f5:f7:c7:6e:47:
c0:da:da:c6:86:22:df:4b:c2:12:81:d1:ed:c8:33:22:e3:20:
99:1a:fa:89:a5:05:c7:f9:36:96:81:53:0f:57:73:ca:f3:c6:
d0:0a:58:20:e3:0e:fa:24:b8:88:01:d1:08:67:cf:f3:90:d6:
e9:10:d7:1e:21:b1:f7:49:b2:7d:a6:3b:9a:95:7e:97:06:39:
39:6a:b8:b6:8b:e1:de:1b:cc:a2:d0:17:75:1e:c5:7a:92:4f:
a2:20:66:3f:74:5c:ae:0e:3b:94:54:89:b2:6e:46:4f:1b:64:
44:7a:83:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:17 2024 by rpki-client on console-fra.rpki-client.org