Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135362e302f32342d3234203d3e203439393831.roa
File: 3138382e3136342e3135362e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier: wG57PzcoQvdLOmMqXrZxnk3LsbErOzDu0Z9ufRUZ+Rs=
Subject key identifier: E3:45:AC:5F:D3:F0:0D:00:DC:27:06:F4:ED:3D:D1:02:1B:37:15:70
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 6BEC2B054D814B100C006B930F7C77D36C087207
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135362e302f32342d3234203d3e203439393831.roa
Signing time: Wed 23 Aug 2023 10:44:53 +0000
ROA not before: Wed 23 Aug 2023 10:39:53 +0000
ROA not after: Wed 21 Aug 2024 10:44:53 +0000
asID: 49981
IP address blocks: 188.164.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ec:2b:05:4d:81:4b:10:0c:00:6b:93:0f:7c:77:d3:6c:08:72:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Aug 23 10:39:53 2023 GMT
Not After : Aug 21 10:44:53 2024 GMT
Subject: CN=E345AC5FD3F00D00DC2706F4ED3DD1021B371570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:58:d7:da:8d:cc:1b:fa:4e:5c:83:b8:b8:68:
0e:f2:73:6d:04:e7:ec:61:6c:8c:cd:7b:7d:f3:cd:
3e:22:44:05:da:47:f4:98:61:62:0e:4f:48:2e:eb:
9a:6d:e2:a8:1c:34:bc:ee:00:09:1f:bb:41:f2:6e:
9c:81:a2:15:86:b1:11:4f:ff:73:41:2d:fa:66:05:
c8:a3:49:85:c2:91:39:db:65:3c:a6:69:90:51:e5:
7e:13:d7:42:95:7b:35:0b:5f:3a:c1:a8:29:ce:b3:
b2:80:29:90:d7:9c:67:c0:70:d4:ea:d8:b1:44:36:
f4:6d:0c:1f:ce:09:be:13:b1:60:f1:dd:1f:37:64:
77:3c:02:da:12:85:ab:77:70:42:02:b8:ad:6f:35:
27:ef:bb:1c:89:92:58:22:b4:83:7d:55:bd:a6:a0:
79:cb:7b:b9:5d:81:90:a4:57:86:22:d7:81:e9:1c:
74:69:a7:0c:6f:63:2e:a2:60:f2:8f:10:89:7c:6e:
3d:cf:34:a3:8a:5b:2e:3c:fe:5a:ba:73:f4:8e:ea:
7e:9e:b1:b0:97:6d:2f:95:e1:68:38:9d:0a:ce:5f:
52:12:3c:00:51:c4:0f:bc:de:5d:1c:cb:60:c9:41:
b2:de:28:9f:4f:aa:2d:d2:b2:cd:20:b4:a9:e3:35:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:45:AC:5F:D3:F0:0D:00:DC:27:06:F4:ED:3D:D1:02:1B:37:15:70
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135362e302f32342d3234203d3e203439393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.156.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:09:84:62:45:f8:82:de:57:47:8b:ed:7a:1e:26:5a:a0:34:
c8:8b:3c:0d:f7:64:85:74:8d:d7:7c:78:41:9a:61:f4:ab:51:
25:39:34:61:fb:18:97:13:46:9d:d3:d5:09:84:db:a5:e7:ef:
83:cd:b2:25:e3:b1:92:9d:77:66:84:19:f9:f7:42:14:8d:e5:
fb:b2:9f:47:dd:44:e0:79:b2:a1:81:37:6f:d7:8c:81:3c:d7:
7d:1f:bf:0c:4e:cf:d8:94:7c:0d:4a:0a:14:9e:86:67:34:bd:
2a:aa:b7:f2:fb:ab:ba:67:38:4f:9e:76:00:46:9d:5e:c5:a1:
9a:28:a3:f5:3f:4a:29:53:6f:d3:f7:df:87:6e:6b:2d:a2:e2:
03:b4:da:1b:65:81:f6:26:49:02:59:e8:42:a5:9f:63:8a:83:
42:87:fa:0a:c8:82:a9:01:84:f3:9e:ce:f8:ee:f4:ed:cc:7a:
21:c0:42:a3:cf:56:41:61:28:53:ae:7a:58:a6:44:28:04:29:
1d:74:5a:15:55:06:21:66:39:5d:ef:cc:74:4d:d0:de:af:7a:
42:dc:21:b5:76:2d:16:e5:b2:13:99:c8:57:2a:4c:15:19:22:
7a:b6:22:28:b8:e3:20:c0:32:4e:8f:1e:9e:4a:bb:68:f5:bf:
d5:5f:43:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org