Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/3138352e3230362e3235332e302f32342d3234203d3e20383334.roa
File: 3138352e3230362e3235332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: yHhvsLvwjzkTN5nthNw9Gap/ptL0GE9MH6e97hnJ+FM=
Subject key identifier: A0:0A:D1:1D:82:DC:C3:04:1F:2E:47:EC:E8:F9:DA:19:87:D5:6D:2F
Certificate issuer: /CN=68d097afd88aef3f10282f3218fc13f01a0de486
Certificate serial: 1D898DBCBB05E67967426C7FB7435D32E4CE28A6
Authority key identifier: 68:D0:97:AF:D8:8A:EF:3F:10:28:2F:32:18:FC:13:F0:1A:0D:E4:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNCXr9iK7z8QKC8yGPwT8BoN5IY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/3138352e3230362e3235332e302f32342d3234203d3e20383334.roa
Signing time: Thu 14 Nov 2024 00:02:09 +0000
ROA not before: Wed 13 Nov 2024 23:57:09 +0000
ROA not after: Thu 13 Nov 2025 00:02:09 +0000
asID: 834
IP address blocks: 185.206.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 12:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:89:8d:bc:bb:05:e6:79:67:42:6c:7f:b7:43:5d:32:e4:ce:28:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d097afd88aef3f10282f3218fc13f01a0de486
Validity
Not Before: Nov 13 23:57:09 2024 GMT
Not After : Nov 13 00:02:09 2025 GMT
Subject: CN=A00AD11D82DCC3041F2E47ECE8F9DA1987D56D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:40:b7:fc:a6:0f:86:42:da:55:9d:61:cd:d0:
9c:e6:90:2e:46:e6:72:a3:9e:27:fd:a7:8d:47:28:
d3:0b:b5:a4:c5:7e:a3:a2:2f:8c:99:1a:99:10:09:
4d:b8:17:d3:17:f1:a2:92:03:da:68:a5:2a:04:fa:
5f:a3:34:87:57:dc:84:42:03:bb:85:aa:fb:ed:89:
25:ea:83:a5:bc:81:ac:ab:f9:e9:e8:23:21:66:c3:
a0:23:38:23:76:9d:be:76:8b:12:39:2f:74:9b:c2:
4d:f6:6b:32:e2:86:42:49:28:02:03:75:bf:10:cc:
3b:4a:94:61:4a:bb:ab:7c:53:bf:38:53:6c:35:36:
5c:58:43:e9:d0:73:aa:d0:5d:67:6e:ce:39:5c:7e:
ea:89:f3:bb:2a:e8:bd:26:87:b1:63:0b:31:7a:e2:
61:87:fc:37:e0:9b:2c:cf:86:c1:b3:c8:bc:d4:c5:
34:d9:f6:d7:f0:2b:bd:16:0e:21:ec:e1:81:7c:49:
14:d6:cd:1d:74:fa:d1:91:2a:44:69:40:b8:60:4a:
9d:88:ed:4b:77:a9:4b:c4:eb:22:ec:a9:f5:5a:2c:
aa:3f:33:ff:e1:fd:7f:04:bc:86:f3:7a:b9:d9:c6:
f7:36:07:3b:c8:a2:2e:20:86:2a:f8:c9:84:f7:19:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0A:D1:1D:82:DC:C3:04:1F:2E:47:EC:E8:F9:DA:19:87:D5:6D:2F
X509v3 Authority Key Identifier:
keyid:68:D0:97:AF:D8:8A:EF:3F:10:28:2F:32:18:FC:13:F0:1A:0D:E4:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/68D097AFD88AEF3F10282F3218FC13F01A0DE486.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNCXr9iK7z8QKC8yGPwT8BoN5IY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7c11b819-d459-4136-9987-f0292a87e640/0/3138352e3230362e3235332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.253.0/24
Signature Algorithm: sha256WithRSAEncryption
57:72:97:72:9f:fd:95:42:70:47:00:b0:ad:ac:9b:32:85:e1:
c6:ee:84:da:6a:70:6a:28:13:e4:1e:08:24:ae:f0:99:9e:a7:
be:8a:c1:9a:42:f3:25:49:07:06:4f:c9:0a:5f:94:26:2b:ed:
a1:61:15:25:64:31:8a:6d:f3:7c:cc:69:a5:06:c0:58:f0:a6:
0d:ce:6d:8a:dd:d7:38:60:52:18:a2:ca:c0:1c:c0:58:a5:87:
73:37:fd:76:55:62:79:88:c4:7c:12:d4:84:74:95:ae:a5:0a:
ae:a9:67:2a:0f:bd:c9:86:a6:21:ce:c5:ab:ea:65:51:b5:6a:
2a:ff:4d:f6:cf:f7:1a:74:31:1a:23:83:62:db:b1:f2:3a:c4:
ab:cf:59:4e:ab:84:df:7d:9a:cc:ac:1e:80:3a:a1:f0:5f:9c:
d3:e3:27:4e:e8:63:b6:83:40:77:38:3b:1b:dc:08:28:fc:12:
39:79:66:04:2a:a2:49:0a:ea:a8:6a:f5:7d:13:9c:4e:2e:2c:
bb:11:41:92:e2:fc:0d:30:0f:58:97:a7:10:b3:3c:1c:7d:14:
0d:8e:d8:1c:1e:63:8f:78:d9:34:df:5c:0c:f1:c6:a9:c3:58:
63:0e:a8:ba:89:9b:64:12:67:bc:cd:ed:74:20:41:9f:6e:33:
44:d9:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 14:43:26 2024 by rpki-client on console-ams.rpki-client.org