Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135382e302f32342d3234203d3e2037303239.roa
File: 3138382e3136342e3135382e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: buk2FI8OTcoT5QNuCX59FfZXI68aEyRuruVskf430Yo=
Subject key identifier: C7:5E:A6:26:B0:DB:EF:25:FC:E5:C3:B9:4E:E7:13:FF:48:52:02:D4
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 76D68EE1FDB8E34122E3F688E9C72E89B2C43386
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135382e302f32342d3234203d3e2037303239.roa
Signing time: Fri 23 Jun 2023 15:06:16 +0000
ROA not before: Fri 23 Jun 2023 15:01:16 +0000
ROA not after: Fri 21 Jun 2024 15:06:16 +0000
asID: 7029
IP address blocks: 188.164.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Sep 2023 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d6:8e:e1:fd:b8:e3:41:22:e3:f6:88:e9:c7:2e:89:b2:c4:33:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Jun 23 15:01:16 2023 GMT
Not After : Jun 21 15:06:16 2024 GMT
Subject: CN=C75EA626B0DBEF25FCE5C3B94EE713FF485202D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3f:cd:eb:b7:6c:9d:85:e4:90:2c:e4:25:69:
32:55:12:98:ee:ac:27:d6:e8:c3:e0:19:01:d2:bd:
19:97:aa:99:77:54:84:02:04:a9:bb:86:ea:de:05:
f2:d7:c8:1e:2d:cb:28:74:5d:84:08:a5:7c:13:12:
03:c8:78:c9:d3:5b:c4:7e:15:25:85:15:93:54:72:
44:8b:11:9e:e9:7a:d3:0f:7e:5e:d6:91:ff:f9:d3:
fc:70:2b:93:9f:7c:c6:de:86:48:41:f3:3e:1f:a8:
1d:47:a5:6b:a2:e0:7a:d1:ee:d6:ae:56:13:3c:e0:
9c:9c:c2:f1:bc:66:46:e5:49:b1:52:8c:d6:f2:3a:
ba:10:78:aa:98:6f:19:f6:b8:35:48:0f:39:e3:e7:
cf:12:5a:bc:9d:0b:ea:32:e8:20:46:bb:84:ff:7e:
3e:7c:01:66:52:e6:1e:36:47:db:e3:57:2e:fa:7f:
c1:8a:e2:65:ce:7c:52:8c:c6:dc:f1:89:f9:ab:38:
65:fb:46:23:9f:47:32:fd:e0:17:2b:92:85:42:dc:
6e:27:c6:a2:97:8b:eb:f0:84:3e:66:cf:1e:14:5c:
a7:93:67:43:44:61:b6:b9:75:ea:66:9f:61:f1:f2:
9d:99:c6:00:02:f5:55:1e:41:5d:81:09:be:79:86:
af:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5E:A6:26:B0:DB:EF:25:FC:E5:C3:B9:4E:E7:13:FF:48:52:02:D4
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135382e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.158.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:61:7a:45:20:f3:8d:4d:7a:ca:87:a8:37:d5:f9:fe:46:1a:
e9:78:a1:54:15:0f:1c:56:3a:fc:35:78:17:e5:c8:30:3c:03:
22:64:c7:30:19:f4:04:44:69:02:a9:e6:e0:2e:d7:25:e0:eb:
80:35:ec:18:1d:fb:11:72:29:a3:f3:0b:86:4f:55:bb:66:df:
93:1b:d6:61:39:22:d6:ab:de:96:7f:4d:3b:4f:79:e1:85:63:
ca:04:d9:4a:17:82:99:27:26:af:68:f9:e5:f7:18:10:e5:60:
1c:2d:98:3f:77:b6:85:b6:54:e1:6f:ed:5f:7f:27:82:f5:fc:
50:8c:ed:8e:d3:21:88:75:ca:ed:f4:f7:98:8a:0e:c2:8e:89:
ca:ff:d4:8f:75:6b:e0:4d:43:86:c5:9a:4a:e3:14:09:56:10:
ff:ec:09:e1:25:b8:40:c6:e8:dd:ed:15:26:01:db:71:2e:70:
f0:33:8f:be:7d:92:08:74:a4:2f:c9:3f:7b:98:e4:a9:f6:16:
9c:39:5f:11:34:58:5b:83:28:bb:3d:2b:75:57:5c:0a:02:2d:
c2:8d:80:0b:70:57:93:88:2f:7e:34:0a:d0:9e:d9:ae:4c:f5:
12:28:23:d7:64:70:d5:39:de:cc:61:26:d3:fb:c8:ce:0f:5b:
f1:b0:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:17 2024 by rpki-client on console-fra.rpki-client.org