Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e2038313030.roa
File: 38302e37352e3232312e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier: ChQfyUiLsLaJ3jeU8mHfheOs1joT9wCc8PfvxanzQOk=
Subject key identifier: F5:43:0E:55:38:9E:4D:E7:80:68:94:5D:91:8E:DF:6E:74:BB:AC:C7
Certificate issuer: /CN=4acd2d51922b2e1612e5f82c394f2d19800d1ddf
Certificate serial: 5005100531D190C8FB6B9129CDEDFA2738AB9DA1
Authority key identifier: 4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e2038313030.roa
Signing time: Mon 19 Feb 2024 14:06:10 +0000
ROA not before: Mon 19 Feb 2024 14:01:10 +0000
ROA not after: Mon 17 Feb 2025 14:06:10 +0000
asID: 8100
IP address blocks: 80.75.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 13:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:05:10:05:31:d1:90:c8:fb:6b:91:29:cd:ed:fa:27:38:ab:9d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acd2d51922b2e1612e5f82c394f2d19800d1ddf
Validity
Not Before: Feb 19 14:01:10 2024 GMT
Not After : Feb 17 14:06:10 2025 GMT
Subject: CN=F5430E55389E4DE78068945D918EDF6E74BBACC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:2d:98:99:be:c7:7d:b8:29:5d:e2:53:27:
62:bb:90:ae:f0:de:52:bb:34:e4:85:92:8a:53:6c:
bb:95:d9:c6:64:f4:fe:d7:22:b1:09:be:04:42:48:
d3:7e:02:7c:3e:60:06:cc:29:c5:01:8c:3e:5e:5e:
9e:1d:ca:20:0e:08:7b:6d:04:6b:10:60:ae:e0:77:
ee:1f:db:14:6d:7b:1c:18:6f:2f:4b:3a:17:d2:a3:
32:e2:33:59:d6:8d:fb:2b:e7:52:c9:02:c9:4e:10:
00:98:80:d9:26:7f:77:82:1a:6b:37:c4:e5:0d:75:
2b:6d:cb:30:19:af:60:d1:da:ed:ae:04:fc:03:fa:
29:3a:52:ff:80:d0:90:84:53:f5:e9:92:60:ec:bc:
84:e9:08:e6:a8:f8:99:43:79:03:46:ee:79:db:fb:
ec:cc:4e:26:c6:6d:2d:f0:a1:08:ab:af:4d:39:a2:
5e:3c:4f:31:17:ac:6e:95:a4:c4:ed:65:6e:c5:70:
6c:e4:fa:fa:77:b7:17:50:14:54:f8:8e:de:0c:e9:
38:77:c2:53:a3:0c:1e:85:46:d8:02:8b:50:05:8b:
01:4d:dc:a7:d8:6f:27:b7:43:de:40:4e:74:9f:e7:
ae:32:3e:50:e5:c8:da:85:69:8a:42:58:21:5c:a5:
5c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:43:0E:55:38:9E:4D:E7:80:68:94:5D:91:8E:DF:6E:74:BB:AC:C7
X509v3 Authority Key Identifier:
keyid:4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/4ACD2D51922B2E1612E5F82C394F2D19800D1DDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e2038313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:8d:f5:ba:e4:11:be:ae:fe:94:31:60:db:7c:a2:80:34:de:
a8:bd:86:76:2b:db:1e:6b:c6:71:05:2c:8a:20:c5:50:d1:2f:
fd:ce:be:91:01:23:21:20:92:9f:7c:23:7a:10:8c:de:7a:bc:
1d:21:a4:4e:f2:fb:42:0b:d6:2f:cf:70:98:84:3f:6f:29:8f:
aa:8b:97:95:ac:a8:0e:0f:b6:d2:a3:e9:a7:5b:27:06:f1:0f:
e7:de:c3:f0:9b:1f:77:c9:dc:4e:88:b4:b3:18:1e:22:82:a8:
e9:c8:1b:da:25:c6:88:71:54:60:5b:7e:e2:64:04:30:11:91:
d1:4a:eb:2b:21:73:94:11:8f:f1:18:9a:4b:9c:6a:d6:e4:57:
38:98:7d:fa:2e:aa:96:ae:16:1d:8e:dd:81:be:e4:55:24:36:
21:b0:a5:89:63:14:2b:61:72:25:7e:57:2d:ad:a0:ea:8c:06:
c2:45:43:70:ba:72:f3:81:32:b6:32:09:6e:ba:bf:f4:11:95:
d8:c8:d0:99:3b:65:fb:dc:c5:22:f9:96:ec:82:39:3a:f0:e1:
6f:9d:82:5a:9e:e9:53:68:76:ce:93:c3:25:08:42:62:40:3d:
c4:20:f4:8f:e6:e9:d8:bc:be:9d:b2:0a:28:dd:59:0c:5c:da:
dd:85:14:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 18:17:04 2024 by rpki-client on console-ams.rpki-client.org