Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135392e302f32342d3234203d3e203433363431.roa
File: 3138382e3136342e3135392e302f32342d3234203d3e203433363431.roa (raw, json)
Hash identifier: nsgZmuzBuNu7mRyhs1YM/iGfch5F9OeYRc0WZLqG+OQ=
Subject key identifier: 7B:3F:43:6A:0D:4F:57:40:50:79:53:2E:50:83:67:28:9D:5B:54:5E
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 37A2646E9F3D4F78EEEB88DAE406C8BE17047304
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135392e302f32342d3234203d3e203433363431.roa
Signing time: Tue 22 Aug 2023 09:20:18 +0000
ROA not before: Tue 22 Aug 2023 09:15:18 +0000
ROA not after: Tue 20 Aug 2024 09:20:18 +0000
asID: 43641
IP address blocks: 188.164.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a2:64:6e:9f:3d:4f:78:ee:eb:88:da:e4:06:c8:be:17:04:73:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Aug 22 09:15:18 2023 GMT
Not After : Aug 20 09:20:18 2024 GMT
Subject: CN=7B3F436A0D4F57405079532E508367289D5B545E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:3b:4b:1d:df:25:04:4b:e8:54:ef:af:77:
43:18:17:32:e4:f0:0d:a1:45:57:be:08:11:43:0c:
a5:bd:fb:11:d0:fe:2f:ef:c1:e6:64:1a:96:a6:58:
17:b9:c2:24:c9:de:14:51:83:69:8a:32:8e:18:c7:
e2:a9:62:d0:e7:a9:93:b8:87:59:07:e7:84:4f:bb:
5c:cc:97:a2:09:6b:54:5d:82:1c:d3:ab:70:37:dd:
03:01:de:c7:80:ef:11:07:29:ca:57:20:45:ba:80:
f7:61:95:ba:ae:3b:1c:5f:da:bc:e2:9d:cb:f1:a0:
d6:3b:3f:e9:80:e6:5b:57:bc:77:68:31:d9:26:60:
84:82:d9:5b:bf:64:9a:71:10:33:8f:3d:15:c3:88:
b8:2b:20:58:e1:db:28:47:26:6a:2c:ab:f8:41:5a:
b7:68:43:12:60:7f:ee:92:f5:24:40:43:fc:0d:a1:
92:b8:d8:77:9c:7e:3e:2c:9c:ca:a6:ed:cc:09:8f:
bc:9c:74:3e:48:bf:94:cc:fd:9b:49:ae:22:8f:bb:
8f:72:08:ac:d9:1d:08:f0:0b:ff:37:ef:74:c6:d0:
24:e1:ac:6a:a2:68:6a:fb:e5:e9:e2:85:3f:4d:dd:
21:1c:6c:41:27:9e:f9:ae:f8:69:57:e8:f0:da:1d:
1f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3F:43:6A:0D:4F:57:40:50:79:53:2E:50:83:67:28:9D:5B:54:5E
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135392e302f32342d3234203d3e203433363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.159.0/24
Signature Algorithm: sha256WithRSAEncryption
48:64:25:45:c6:b4:d4:5d:a9:31:3c:d2:e1:bc:e4:75:f9:1f:
97:da:1f:54:7f:7a:48:49:7a:a6:7b:b7:72:aa:eb:ed:84:47:
e8:26:fa:13:bf:41:8a:b0:ca:fb:67:2b:d3:19:3b:8e:7b:d9:
f9:0d:dd:a8:f9:83:15:61:92:ca:38:5e:82:33:e8:08:09:bf:
a3:57:c5:0f:87:3c:7f:e6:bc:5a:f3:3c:24:58:b1:cf:82:43:
48:f6:3a:2b:ba:78:23:ff:5a:70:4c:c2:c4:0d:d4:7a:b0:d0:
e7:08:9c:f4:28:00:39:9d:81:bc:39:b4:d8:d3:2e:51:31:c8:
8e:d5:54:1f:49:25:2f:d5:22:ac:95:17:2b:7e:5b:95:7e:f8:
72:98:75:ba:6d:2a:6b:48:83:ee:6a:8a:e3:38:02:c0:cf:35:
5f:8c:c4:82:bd:76:a3:d4:0b:64:c1:30:f6:46:78:bd:2a:a1:
a8:fd:ed:7f:67:2f:4c:2c:17:d5:ce:c5:37:d7:1f:25:a7:c5:
17:1e:43:3c:60:20:53:a8:3e:d6:e4:d0:f0:7b:70:16:ee:a1:
03:43:f0:50:5c:7b:bb:e4:0c:a6:1f:ed:c2:ce:45:fc:38:cd:
79:8b:dc:1c:27:36:02:7c:34:7c:9c:dd:54:54:76:c0:12:e9:
44:8b:ad:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:17 2024 by rpki-client on console-fra.rpki-client.org