Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135392e302f32342d3234203d3e20383334.roa
File: 3138382e3136342e3135392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 5WFeWTGgc4uPD1yHXkqEzmGchFAwPASqInROLUh5UiQ=
Subject key identifier: C1:F5:6A:A6:3A:4D:7B:C9:87:12:17:FB:78:05:77:F0:E0:37:71:54
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 66272D40A9C31256B18F8B58597B1CDF2ABF4C05
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135392e302f32342d3234203d3e20383334.roa
Signing time: Mon 18 Sep 2023 00:00:07 +0000
ROA not before: Sun 17 Sep 2023 23:55:07 +0000
ROA not after: Mon 16 Sep 2024 00:00:07 +0000
asID: 834
IP address blocks: 188.164.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Oct 2023 13:55:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:27:2d:40:a9:c3:12:56:b1:8f:8b:58:59:7b:1c:df:2a:bf:4c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Sep 17 23:55:07 2023 GMT
Not After : Sep 16 00:00:07 2024 GMT
Subject: CN=C1F56AA63A4D7BC9871217FB780577F0E0377154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:16:86:4b:92:e9:85:2a:dc:54:68:e6:03:a2:
eb:ca:c0:e7:a0:f1:54:62:6c:9a:98:d0:0d:a3:ed:
cc:9a:95:f4:50:5d:9a:46:fa:ff:87:1d:3f:a5:9f:
95:c7:f7:53:49:d3:13:fb:fb:43:cd:5f:7a:12:fe:
03:c6:62:9c:ea:70:c9:d4:16:f7:6e:ff:d7:84:89:
0a:c7:bc:4d:53:a6:10:6d:cc:20:9f:26:e0:50:13:
c1:d8:71:e4:24:d0:bb:41:ef:bb:88:b7:3d:7b:79:
4c:20:60:17:6a:71:69:aa:5a:c2:71:c8:f9:0e:c1:
ec:f1:4b:78:06:d1:33:41:0f:99:45:5a:09:ed:12:
06:bc:01:61:e2:ac:b5:d0:e5:e4:ce:aa:c6:b0:75:
99:7c:38:7a:32:8e:33:49:99:26:8c:64:a7:b5:17:
ec:d7:9a:4a:7e:85:c6:1c:1e:f5:9c:62:71:ff:1d:
3b:e3:cf:ed:5e:42:0c:93:27:a9:59:07:5e:31:03:
fe:6a:da:5a:ae:67:25:6a:1c:99:20:4b:1a:99:e2:
ee:f1:ad:62:b0:b1:2a:21:c2:73:c4:f4:6d:4f:07:
75:f7:6c:f9:10:e7:33:cd:ce:4b:9f:ee:d5:08:ed:
e9:db:2e:b5:0d:56:f2:36:80:5b:f8:10:db:ee:d7:
8c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F5:6A:A6:3A:4D:7B:C9:87:12:17:FB:78:05:77:F0:E0:37:71:54
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.159.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:20:fe:c3:bb:ef:97:48:37:a6:6f:0e:bc:a9:da:74:9a:df:
14:cc:4e:0e:63:e7:53:72:cb:ed:bc:39:97:3b:ba:31:3c:6f:
9e:ab:9f:1b:76:ed:99:eb:8f:f0:7b:88:84:bb:01:0c:c0:a5:
9b:a1:65:9a:80:0d:15:af:81:43:ef:18:1f:97:aa:55:86:d2:
b0:60:b6:e6:69:5c:e1:ee:41:60:88:10:c9:76:64:00:26:aa:
cc:b7:be:fb:06:bd:21:37:bd:19:6a:61:bc:4d:8a:aa:f1:b9:
d0:8c:6c:c1:88:a1:29:3d:28:96:38:19:b9:dc:d9:77:1e:ce:
18:90:69:02:0c:0c:50:0e:27:9a:41:82:ca:d5:f9:82:3a:52:
90:0d:2d:fb:f6:b7:3b:85:bc:3b:00:50:72:cd:a9:e2:58:eb:
d5:04:11:0b:fb:37:22:51:87:04:6d:16:ab:b5:5f:df:a7:85:
71:60:b3:ca:aa:f8:ec:83:f0:f8:46:45:0d:1f:d8:2f:39:fc:
3e:7f:08:47:73:0e:a4:a5:2a:63:08:a0:75:38:ec:f9:67:85:
45:e5:23:fd:7d:8c:df:07:91:5d:98:bf:25:1c:7c:22:ab:50:
ad:d3:ca:42:80:d6:8f:28:81:6c:a4:d4:6b:b7:c7:0b:eb:3c:
3c:12:17:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org