Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135382e302f32342d3234203d3e20383334.roa
File: 3138382e3136342e3135382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 88GwLoRLiNCOqocJ0yxX/721R7KpHy6MqfqSZjW7Mvs=
Subject key identifier: EA:85:4A:BC:5D:F2:89:E9:75:8D:BC:A9:0E:72:20:5C:28:2A:08:DF
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 3F6A4F188D17892963E3690821D99D582BBAD6F8
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135382e302f32342d3234203d3e20383334.roa
Signing time: Thu 07 Sep 2023 11:00:07 +0000
ROA not before: Thu 07 Sep 2023 10:55:07 +0000
ROA not after: Thu 05 Sep 2024 11:00:07 +0000
asID: 834
IP address blocks: 188.164.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Oct 2023 13:55:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6a:4f:18:8d:17:89:29:63:e3:69:08:21:d9:9d:58:2b:ba:d6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Sep 7 10:55:07 2023 GMT
Not After : Sep 5 11:00:07 2024 GMT
Subject: CN=EA854ABC5DF289E9758DBCA90E72205C282A08DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:e1:ea:4a:79:63:41:d3:5a:7b:8f:fb:cd:
b1:52:3a:9c:fe:7a:75:04:ef:b1:46:0c:6b:cf:18:
9f:5e:82:cc:f3:14:dc:e7:7f:5d:ac:f8:58:97:18:
b1:dd:80:2c:1d:9c:14:d6:85:6b:89:32:33:09:d3:
d5:f7:81:cc:fb:9d:35:46:c5:7c:2c:a7:fa:38:e6:
08:4c:28:37:a4:5d:63:d2:76:f0:f9:e4:30:89:26:
fc:96:20:11:5c:67:d9:55:6d:59:ff:60:1c:36:23:
31:e0:14:9a:9c:cf:63:1a:5c:36:93:92:61:9d:22:
87:5b:ef:03:22:54:3b:6a:41:b4:03:50:03:29:4d:
b3:88:c1:ec:72:15:e7:52:d3:a5:0a:f5:5b:75:9a:
83:84:bb:43:c4:05:36:03:16:be:25:82:95:b6:d4:
d5:5e:14:db:e4:1b:d1:4d:0d:84:7c:11:cc:6b:f7:
39:5e:1f:f2:58:c6:f6:0c:e8:d2:8d:4b:c5:ba:b6:
f8:2e:b2:90:ba:9f:bb:36:3e:70:be:eb:c7:5d:1e:
20:40:b9:f4:c1:ef:ae:b7:53:5f:1b:26:e7:89:f9:
ab:57:b5:48:6d:b8:44:c7:94:ed:34:45:31:28:16:
f0:62:55:c6:e6:55:e4:35:ac:72:6d:1c:b8:32:d8:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:4A:BC:5D:F2:89:E9:75:8D:BC:A9:0E:72:20:5C:28:2A:08:DF
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.158.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:36:61:0f:76:bb:66:80:6a:9d:c5:7a:6f:4d:29:c5:5e:ed:
57:b5:0f:6a:ab:03:3c:09:cc:41:84:0f:42:c4:2f:1e:94:cc:
3d:5e:b6:91:e4:45:ff:91:87:7c:32:55:00:15:14:6d:e9:5e:
6a:b1:bc:87:fc:23:06:66:34:d8:10:26:ad:e9:55:00:6c:c8:
93:59:05:a1:69:1c:07:8c:cc:bd:9e:1e:66:52:ca:73:80:2d:
18:37:59:75:e8:36:a6:e3:5e:a0:b5:54:ba:a5:e0:ba:ac:54:
c4:1c:a1:cc:a6:40:97:2a:f7:76:9c:57:4c:82:c1:c5:c2:f2:
44:fb:68:98:24:58:d4:2d:fb:48:2d:28:ca:22:83:9e:9a:d7:
99:64:89:cb:37:7b:bc:fd:bb:33:6a:9c:e7:9c:3b:fa:01:48:
6b:67:ca:38:ff:ac:73:73:b8:ea:7e:69:76:49:cc:08:8c:b8:
32:e4:3a:3c:65:af:14:31:99:f4:99:60:2f:13:2a:62:a6:20:
a4:7b:b8:4d:76:cb:08:6d:13:fc:b5:08:1e:90:6a:71:8e:56:
aa:37:97:37:5b:82:a1:6d:5a:b8:9c:4c:10:ce:c8:a5:60:30:
7e:cf:96:8e:d5:91:e5:2e:0d:ff:2b:2e:39:43:df:87:a9:59:
c6:61:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org