Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e33372e3231382e302f32332d3233203d3e20383334.roa
File: 3138352e33372e3231382e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier: ULH6w7Ocjj6TSQlCXqSHpnk6/OKhwKhKFt8tyi/k/4o=
Subject key identifier: 71:9D:2D:1C:51:E1:8A:46:7C:FB:50:DC:A8:C4:34:0C:E7:C4:80:97
Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial: 69AE2700A68ABAE9E7982F35B3027315488FBF55
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e33372e3231382e302f32332d3233203d3e20383334.roa
Signing time: Mon 18 Sep 2023 06:36:37 +0000
ROA not before: Mon 18 Sep 2023 06:31:37 +0000
ROA not after: Mon 16 Sep 2024 06:36:37 +0000
asID: 834
IP address blocks: 185.37.218.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 21 Sep 2023 14:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ae:27:00:a6:8a:ba:e9:e7:98:2f:35:b3:02:73:15:48:8f:bf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Validity
Not Before: Sep 18 06:31:37 2023 GMT
Not After : Sep 16 06:36:37 2024 GMT
Subject: CN=719D2D1C51E18A467CFB50DCA8C4340CE7C48097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:09:2e:54:fa:2e:d3:62:c7:df:2d:5b:13:25:
a7:5e:58:6b:6d:3d:bf:c8:1a:2d:9f:b6:37:46:b9:
98:c1:3d:6c:f6:1d:1b:75:8d:37:e9:6d:33:5a:cd:
9c:d1:d9:dc:b6:30:a4:d7:f7:eb:b5:91:03:ff:01:
45:ab:76:36:62:02:6d:e5:e7:87:d4:e4:63:d1:70:
f5:38:2b:d0:66:ec:97:2e:3f:d9:77:3f:ca:31:0f:
8c:9f:52:b6:f9:78:e0:4d:e9:68:07:28:46:fc:c3:
fb:df:18:28:ac:35:ba:42:76:85:2e:6f:1e:1e:42:
e2:a0:e3:65:06:0a:f0:e2:6c:1c:45:1a:1e:08:44:
d7:41:16:d0:a2:ef:5b:51:5d:af:b9:5e:a1:0e:54:
94:57:a5:6b:9e:53:ec:5c:f4:21:c4:63:c3:22:07:
b3:12:2e:4f:7d:eb:85:b5:d0:bd:5a:17:57:39:fa:
6b:05:98:80:65:04:0f:65:8c:0f:13:4b:93:09:0b:
7d:45:d5:8e:5c:72:eb:8e:eb:d2:a0:0e:a6:67:60:
d7:1d:93:bf:ba:da:d4:22:ba:66:d8:14:b4:c0:99:
87:a8:b4:dd:db:f8:dd:63:cb:ae:b6:d9:d9:d3:20:
eb:95:13:0f:30:03:01:71:da:6b:73:2b:cc:59:78:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9D:2D:1C:51:E1:8A:46:7C:FB:50:DC:A8:C4:34:0C:E7:C4:80:97
X509v3 Authority Key Identifier:
keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e33372e3231382e302f32332d3233203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.218.0/23
Signature Algorithm: sha256WithRSAEncryption
36:b2:d4:ed:3e:76:98:3f:f8:c6:c7:76:fe:30:9e:90:ae:1b:
ba:73:4d:1e:d6:11:e0:26:c2:06:18:b7:bd:ee:1f:3c:36:41:
ac:01:59:c7:5f:8e:e3:c2:3c:a0:aa:8c:41:51:26:8c:f5:5a:
1c:71:6a:be:c2:55:53:22:44:52:09:5f:32:28:16:d8:cb:8b:
99:df:d4:8e:1d:bf:dc:b9:ce:eb:60:e1:47:d9:44:82:30:27:
8d:09:9a:de:10:37:c6:7e:59:bf:0f:e8:3f:88:14:dd:9b:0b:
de:08:d1:bf:92:e8:fb:86:91:e7:ae:bd:4e:03:a5:54:58:9d:
89:68:b3:af:58:98:2e:30:41:8d:50:1d:77:66:9d:6b:0e:d7:
44:23:55:c2:91:a6:32:8b:84:56:4d:67:27:aa:39:c4:93:54:
1f:28:e7:69:22:b5:a9:df:a1:04:39:e0:ca:66:ad:b4:fa:69:
ba:54:cc:45:4c:9c:f5:51:19:ea:7d:23:1d:d1:35:61:7a:d6:
4a:39:3f:75:90:69:83:af:a1:69:03:f1:8e:17:ca:65:d3:d3:
a7:06:6d:54:af:a7:62:44:0f:67:0b:b6:42:7f:f3:66:dc:3b:
56:ee:8f:a5:8c:53:44:9d:e3:8f:2a:2e:2c:70:09:22:a9:72:
36:63:3d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org