Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137372e302f32342d3234203d3e203231383539.roa
File: 3137382e3230382e3137372e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: 1sF4Kl0WwMTnHpsAFuQoCV1smT5yw4aibInvnzbLLCE=
Subject key identifier: 58:B5:7F:42:BC:28:B6:22:B1:F3:D6:AB:D0:00:C6:3B:AA:6F:48:02
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 334D3C08735983396344AA59852AC583C86128B3
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137372e302f32342d3234203d3e203231383539.roa
Signing time: Tue 26 Dec 2023 02:43:41 +0000
ROA not before: Tue 26 Dec 2023 02:38:41 +0000
ROA not after: Tue 24 Dec 2024 02:43:41 +0000
asID: 21859
IP address blocks: 178.208.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4d:3c:08:73:59:83:39:63:44:aa:59:85:2a:c5:83:c8:61:28:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 26 02:38:41 2023 GMT
Not After : Dec 24 02:43:41 2024 GMT
Subject: CN=58B57F42BC28B622B1F3D6ABD000C63BAA6F4802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:3b:1f:b0:76:19:0e:56:6b:6b:26:1c:e7:
a9:4c:ee:5e:5f:ab:dc:d4:56:cd:e4:7e:2a:86:fe:
7c:5c:31:03:82:c3:c6:20:ff:d2:63:be:25:72:c8:
a0:16:d2:99:66:13:70:9d:a4:28:4b:a7:ab:78:95:
a7:b4:28:de:20:95:f7:6e:a5:ff:28:f8:c5:78:61:
6c:9f:2c:7a:a4:59:48:85:8f:53:c8:5c:f0:5b:7a:
d6:30:10:e0:a5:71:66:44:fd:73:e5:d7:4b:d7:36:
19:51:3f:29:4a:ed:36:1a:aa:0b:6f:de:81:92:1e:
8f:8c:38:24:15:33:a7:13:05:18:9f:2d:7f:84:b5:
b7:37:8c:0b:5a:31:75:19:a7:73:a1:c2:3b:78:fa:
69:89:87:9c:24:39:c6:11:6c:e9:3e:51:a8:28:f0:
cb:aa:98:35:67:6f:d2:7b:ae:56:1e:f6:23:34:c7:
2f:02:a4:dd:5a:c7:1e:78:f5:f4:dd:78:2e:1e:ee:
18:6d:e0:37:95:b9:54:3e:0e:15:13:9f:39:d2:98:
f6:3f:a7:6f:5b:78:d1:de:69:19:a0:00:4a:ec:66:
92:20:cd:26:b7:dc:b3:8d:65:6c:be:a6:5d:58:30:
31:4d:81:48:18:fb:77:7c:87:f3:89:b8:ab:c9:74:
f0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B5:7F:42:BC:28:B6:22:B1:F3:D6:AB:D0:00:C6:3B:AA:6F:48:02
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137372e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.177.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:8d:68:4c:12:d5:8e:07:5c:4c:bf:e7:77:0f:fa:35:10:c3:
21:a1:86:61:62:33:09:57:24:64:19:a6:68:c9:fd:d5:c5:57:
02:d9:32:c2:c4:87:a3:52:93:76:0a:1b:64:7c:4a:cb:16:b1:
a7:12:84:16:24:d6:4c:e0:26:7b:72:0c:43:18:a1:81:b7:1a:
3b:e2:af:42:8f:fb:db:3a:89:43:84:8f:e9:72:17:57:ee:8f:
53:b1:92:5e:65:0e:08:e6:bf:b3:9d:79:34:55:80:c8:34:d7:
a9:bc:fe:64:99:44:01:a8:fc:75:21:71:f7:ca:1c:1a:97:08:
3e:fc:da:8b:71:c4:71:04:cf:3d:36:d7:4b:34:c7:36:60:51:
77:ac:4d:a1:6c:72:10:60:3e:9f:01:a3:3a:a2:0f:9d:da:c7:
74:d4:ee:ba:c9:79:42:44:17:92:31:9f:3d:43:25:69:d6:99:
f3:7a:3c:01:ac:f2:ef:f6:e0:5e:41:9a:71:64:dd:bf:56:be:
a1:1b:32:a0:b2:a4:d8:92:b3:4b:5b:a6:a3:8f:dd:a4:19:01:
92:37:72:12:65:70:3b:66:08:f6:60:25:61:6c:d5:9e:3a:e1:
2b:b4:bf:1f:3c:7f:6c:33:a5:87:8a:fd:7b:11:39:e6:ca:3c:
cb:9e:a0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 01:41:52 2024 by rpki-client on console-fra.rpki-client.org