Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137372e302f32342d3234203d3e203539383935.roa
File: 3137382e3230382e3137372e302f32342d3234203d3e203539383935.roa (raw, json)
Hash identifier: ESMx8G6Bm7JcHXmyoyt4qCINWUivtax+odrRK07yU3U=
Subject key identifier: 54:BE:10:80:06:7E:00:64:44:6D:3E:3D:DB:1A:30:1D:32:53:97:0E
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 48D9B59F35F58BB0A03601C13E92C2E9BEBC562B
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137372e302f32342d3234203d3e203539383935.roa
Signing time: Thu 29 Feb 2024 15:08:23 +0000
ROA not before: Thu 29 Feb 2024 15:03:23 +0000
ROA not after: Thu 27 Feb 2025 15:08:23 +0000
asID: 59895
IP address blocks: 178.208.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 00:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d9:b5:9f:35:f5:8b:b0:a0:36:01:c1:3e:92:c2:e9:be:bc:56:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Feb 29 15:03:23 2024 GMT
Not After : Feb 27 15:08:23 2025 GMT
Subject: CN=54BE1080067E0064446D3E3DDB1A301D3253970E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2c:cc:48:e4:81:7b:ff:fd:e9:ab:90:83:cc:
d6:75:b5:75:dc:5f:26:85:32:10:07:79:73:35:14:
a3:00:18:08:34:2d:98:5c:91:18:b7:e6:d2:b9:8c:
42:f9:31:dc:1c:2a:7b:c7:aa:a9:d4:1f:c2:1b:43:
ac:80:a3:c6:5e:43:9d:29:f9:99:6f:ac:85:56:e8:
b2:94:5c:7e:cb:2b:3a:49:ed:7a:86:98:7a:16:48:
3d:9b:b7:5c:25:30:d0:c4:f5:00:8f:28:fe:6d:3c:
d6:5c:11:5b:67:97:da:10:35:22:5b:1f:b5:58:7e:
db:44:c6:64:27:3c:32:8a:e6:1c:46:fd:7c:41:58:
fa:2b:05:f8:86:24:ba:08:4a:cb:b0:1a:6e:d0:b3:
fa:e0:cb:ba:b1:d4:34:95:bb:23:37:23:c6:ab:b8:
b0:19:9b:b8:0e:97:ec:e2:a7:61:0f:f7:37:4e:ea:
39:4b:15:2b:94:c5:06:cf:e8:a8:43:72:48:2e:a6:
a0:c2:bb:a8:9e:dd:65:8e:4a:e4:77:e8:6a:44:a3:
63:fa:09:f6:c6:ec:7d:2c:1d:72:49:2e:55:58:5d:
26:97:8b:e4:b6:b9:a4:79:16:a4:ec:b7:61:2c:f4:
c1:cb:e8:cd:60:bc:b6:11:fe:ad:09:45:ce:68:78:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BE:10:80:06:7E:00:64:44:6D:3E:3D:DB:1A:30:1D:32:53:97:0E
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137372e302f32342d3234203d3e203539383935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.177.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d5:83:57:a9:8e:93:4b:6f:20:2b:2d:3c:b9:ea:4a:c2:2b:
08:87:22:87:c7:64:42:98:4e:19:05:d9:e6:cd:4c:1e:1e:35:
fc:b3:e4:db:d3:0e:b0:7c:9f:a9:99:16:14:be:28:f8:81:17:
74:17:46:33:96:06:bb:aa:a9:74:13:cc:3b:8c:60:77:a3:9b:
7e:24:7e:26:76:c9:bf:ef:91:c8:54:80:92:a9:07:a4:64:d6:
b6:29:dc:3e:d5:56:2d:eb:3c:34:f8:48:df:f3:99:f5:7b:ac:
f4:a1:46:a6:92:c0:18:b6:4a:86:df:7b:00:2b:43:21:5f:77:
ce:46:de:d5:cf:ed:94:49:27:bd:e3:c5:9e:dc:4e:a9:91:46:
16:6a:35:a8:41:a2:9f:db:0b:83:8d:fc:9d:ba:5a:3a:b4:e5:
ca:44:87:cd:8d:64:77:b5:ec:0e:96:ee:1a:ec:9f:b8:0e:01:
1f:5c:1d:dc:71:6e:61:af:e4:55:4c:d5:32:18:d2:b3:9c:5f:
a7:d9:33:9f:6f:e7:4d:bb:cf:61:64:36:f2:ef:d7:90:39:91:
54:b8:28:53:b4:dd:89:a1:77:fa:e3:94:98:51:18:61:6d:e9:
c4:7b:83:69:c8:24:ad:ad:b8:8a:28:75:9d:46:52:46:70:f2:
9e:2e:e6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 00:47:49 2024 by rpki-client on console-ams.rpki-client.org