Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/3138352e33312e3230322e302f32342d3234203d3e203437353835.roa
File: 3138352e33312e3230322e302f32342d3234203d3e203437353835.roa (raw, json)
Hash identifier: rmsxBkIekhE7SRKXb+aeH92LzaXmpXcscjIcAXOP4Eo=
Subject key identifier: B6:24:33:E1:99:46:C8:AD:E6:9F:15:2B:BF:AF:CF:EA:77:7D:F1:39
Certificate issuer: /CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Certificate serial: 05A922F634B4F305D233E3A23BCA145442FAC974
Authority key identifier: 64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/3138352e33312e3230322e302f32342d3234203d3e203437353835.roa
Signing time: Wed 29 May 2024 07:47:19 +0000
ROA not before: Wed 29 May 2024 07:42:19 +0000
ROA not after: Wed 28 May 2025 07:47:19 +0000
asID: 47585
IP address blocks: 185.31.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 00:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a9:22:f6:34:b4:f3:05:d2:33:e3:a2:3b:ca:14:54:42:fa:c9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Validity
Not Before: May 29 07:42:19 2024 GMT
Not After : May 28 07:47:19 2025 GMT
Subject: CN=B62433E19946C8ADE69F152BBFAFCFEA777DF139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:5e:1c:fc:f3:ae:ac:19:7f:62:8e:4f:b1:
f3:60:94:fb:0c:e3:4c:16:57:6c:d4:a1:33:83:26:
a7:8e:c3:ab:a6:20:0e:5b:0e:6d:b6:6d:95:77:17:
a2:0c:de:50:6c:22:5b:00:b0:75:c3:22:71:6a:a3:
05:fe:1c:a5:30:f3:e6:01:82:d2:b6:db:e3:49:68:
53:be:af:cf:34:e7:01:32:90:7c:21:77:c4:32:c5:
a9:10:b5:22:68:95:2c:b6:b5:7a:00:7b:bf:2c:76:
48:23:b9:31:c1:53:9b:da:ce:a8:b8:b6:22:06:e2:
f3:c7:cb:c7:2b:4f:61:76:8e:41:f7:f8:ca:b1:20:
e2:47:a0:8c:3e:37:20:e9:d6:b2:14:19:0f:bc:93:
3e:2c:68:bd:c9:4b:78:ff:58:83:ce:d6:21:a9:75:
3e:fc:26:bf:99:f6:03:b2:f1:31:44:b2:f1:9e:4b:
d8:b6:2a:7b:f5:53:e5:47:6b:4d:f5:d2:c3:72:61:
22:0f:bf:b3:61:61:08:2e:00:f7:60:b3:1e:9f:0d:
28:e0:4b:81:cb:21:66:28:be:b4:3a:c2:9f:58:1e:
66:ef:1b:9f:67:3a:f8:49:2d:0d:f0:f5:fb:74:ad:
97:a3:be:3d:fc:ec:1e:57:3c:f7:2c:df:ae:42:d7:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:24:33:E1:99:46:C8:AD:E6:9F:15:2B:BF:AF:CF:EA:77:7D:F1:39
X509v3 Authority Key Identifier:
keyid:64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/3138352e33312e3230322e302f32342d3234203d3e203437353835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.202.0/24
Signature Algorithm: sha256WithRSAEncryption
13:4f:d8:2a:75:3f:ea:32:73:3e:53:51:6c:37:a9:2d:f5:93:
a8:c7:63:84:15:27:85:46:86:c5:fc:28:96:71:3b:3b:7d:47:
59:44:73:85:7b:ee:47:0a:bd:80:8c:b0:88:f9:f1:0f:40:aa:
2a:02:61:c9:ef:ec:8b:c5:d3:9b:37:0d:65:d3:0f:fc:90:cc:
5b:4e:fc:7f:d5:af:f3:b1:96:59:38:a3:a4:d0:be:07:e1:39:
db:29:ab:f8:d5:98:23:30:fb:4a:5c:f7:a1:48:28:81:84:57:
f5:a0:5b:cb:7f:66:ad:8f:1e:c0:89:ac:0b:f6:18:ff:8a:2a:
e9:5a:5c:13:a9:ba:16:23:f2:9b:2c:52:fb:dc:08:3f:49:8a:
45:97:2e:e9:9a:c8:53:cb:cc:df:13:9d:dd:79:82:cb:82:ce:
e4:f6:da:eb:7d:56:32:ee:e3:ae:8b:84:3d:ff:07:b1:fa:c4:
49:cc:25:ee:07:c2:54:2e:6c:79:30:bc:bd:46:3b:86:90:d6:
af:54:5e:b5:e1:e6:b1:c2:3a:c2:7d:21:d7:df:04:81:fc:4c:
d0:a9:b6:fa:14:f6:30:c9:5d:69:79:f2:09:0c:1c:c4:22:60:
f9:3c:1e:71:39:0d:a4:1e:a0:9a:40:8f:ee:3c:e1:17:6a:99:
7c:df:c1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 02:21:59 2024 by rpki-client on console-ams.rpki-client.org