Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e33372e3231362e302f32332d3233203d3e20383334.roa
File: 3138352e33372e3231362e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier: 0JPmlCJSCcKhygQ6EazxhEm+OHITekG0lDIDOrjh0wA=
Subject key identifier: 9A:BF:3C:3A:03:D8:FB:EF:CF:37:AE:60:E8:1B:CA:5A:34:FD:C8:92
Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial: 3C272DB4C238203BB876DE342A3335084F07A2FF
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e33372e3231362e302f32332d3233203d3e20383334.roa
Signing time: Mon 18 Sep 2023 06:36:33 +0000
ROA not before: Mon 18 Sep 2023 06:31:33 +0000
ROA not after: Mon 16 Sep 2024 06:36:33 +0000
asID: 834
IP address blocks: 185.37.216.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 21 Sep 2023 14:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:27:2d:b4:c2:38:20:3b:b8:76:de:34:2a:33:35:08:4f:07:a2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Validity
Not Before: Sep 18 06:31:33 2023 GMT
Not After : Sep 16 06:36:33 2024 GMT
Subject: CN=9ABF3C3A03D8FBEFCF37AE60E81BCA5A34FDC892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:0d:be:77:e3:bf:f1:a3:21:d6:36:78:f6:
af:07:75:a3:cb:89:7d:72:1f:90:a9:4e:26:e1:00:
e4:b3:a5:f6:37:a1:ea:b5:e5:3e:ba:00:36:40:01:
18:e6:f0:3e:a5:3d:fa:62:5c:3f:a2:e6:b2:84:b6:
f3:6c:5c:cf:e9:a0:11:d8:98:58:d3:e3:d3:28:7a:
0f:7e:89:34:5d:63:2c:cb:55:17:74:f1:8c:5a:1e:
3a:5b:44:ee:0a:98:45:aa:3f:40:78:e8:9e:d4:f1:
c5:87:5b:3a:64:70:05:3b:90:3b:e0:4e:7e:aa:9e:
d5:7d:45:c0:3e:fb:48:4d:19:8d:57:06:10:27:16:
e6:af:43:45:68:75:0e:4f:32:49:59:61:fd:23:53:
0d:ba:1c:71:12:45:3b:d9:2a:51:f9:0a:e2:9e:03:
2b:5d:df:7e:34:c6:f5:bd:eb:bd:4f:d9:04:d5:5c:
ae:0e:e6:1d:cf:56:81:93:56:ba:7b:4d:19:07:cc:
ea:33:7f:66:2a:c1:89:00:f0:4e:c5:b4:68:8f:05:
3b:5d:b6:5f:a6:c6:de:76:f5:33:c7:21:e7:93:7f:
a9:a4:b1:b7:d1:9b:55:be:31:d5:6c:33:a4:57:a7:
7f:58:f0:aa:b0:53:85:d0:f8:7b:04:f6:38:ad:f7:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BF:3C:3A:03:D8:FB:EF:CF:37:AE:60:E8:1B:CA:5A:34:FD:C8:92
X509v3 Authority Key Identifier:
keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e33372e3231362e302f32332d3233203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.216.0/23
Signature Algorithm: sha256WithRSAEncryption
24:ff:e2:cb:83:09:d0:65:37:da:eb:e9:bc:c0:f7:28:f0:c6:
c8:7b:55:26:e1:06:26:21:72:9f:79:3c:98:55:8f:c4:63:4d:
ed:3e:e9:8d:5c:ef:09:c0:8b:a4:19:bf:37:81:ec:a1:00:65:
3f:29:02:aa:65:d1:56:34:d3:a9:6a:e3:f5:8e:86:c1:a5:b9:
a9:81:63:cc:58:31:43:35:18:65:8f:38:33:58:b7:d3:42:1a:
04:e8:4f:05:ab:09:36:f4:cf:d1:ad:d9:b0:a6:8a:85:fb:b1:
1a:2a:41:45:91:13:8b:08:dc:40:5a:c4:47:27:bb:0c:98:78:
72:12:8a:85:86:ad:f0:ff:83:50:45:74:92:e6:d0:63:93:ec:
8b:6d:d2:7e:13:d5:a9:70:79:1c:eb:19:d3:82:ba:e3:87:35:
62:50:d4:d0:bd:d3:c9:52:7b:5a:bb:fc:bb:c0:af:92:c4:38:
1a:05:67:a7:e3:d7:21:b8:06:7a:fc:76:6c:f8:0e:97:ce:f1:
ca:2d:fa:bd:3a:c1:8a:91:d7:7a:fd:10:74:19:14:67:ee:e9:
4c:1d:a5:dd:f8:48:14:a1:0c:e0:cd:46:fb:65:4a:28:e1:9c:
07:da:5f:e8:dc:0d:d2:e4:ec:c2:44:46:01:25:14:ff:58:5b:
9f:c7:13:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org