Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138342e302f32342d3234203d3e20383334.roa
File: 3137382e3230382e3138342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: bKopfdBy+12EPCXpkY0hEzwgzEsyx882igCbGKm9VIU=
Subject key identifier: C7:A5:36:E8:8C:DC:C6:36:4C:4A:95:01:74:1B:E7:1B:57:E3:5A:D8
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3B009C52E69BB1C886FCCCB52D1538BA0BD40C91
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138342e302f32342d3234203d3e20383334.roa
Signing time: Fri 23 Feb 2024 18:34:28 +0000
ROA not before: Fri 23 Feb 2024 18:29:28 +0000
ROA not after: Fri 21 Feb 2025 18:34:28 +0000
asID: 834
IP address blocks: 178.208.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 12:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:00:9c:52:e6:9b:b1:c8:86:fc:cc:b5:2d:15:38:ba:0b:d4:0c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Feb 23 18:29:28 2024 GMT
Not After : Feb 21 18:34:28 2025 GMT
Subject: CN=C7A536E88CDCC6364C4A9501741BE71B57E35AD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:b1:6f:44:78:44:02:0f:5f:13:ab:35:a5:
5f:0f:e3:eb:9b:47:4b:00:1e:4e:d1:05:9b:5a:43:
77:fa:5b:d4:39:62:8c:9c:8f:a5:45:ab:8b:01:dc:
09:98:1d:41:b3:7c:e6:78:7e:6c:9d:f6:50:3f:fb:
ce:72:ae:0c:ea:1e:cc:c8:5b:3b:33:6c:94:08:1b:
55:44:a1:1a:62:83:66:16:e9:96:83:36:7d:7e:6d:
eb:f7:ba:c8:71:94:78:1e:51:8a:13:de:8e:77:f1:
c1:29:e9:68:a2:d4:46:28:cc:47:59:e1:ff:ba:7c:
b0:68:a6:09:3f:0d:87:b1:9f:5a:b5:fd:34:d7:e6:
1c:11:90:ad:12:d3:d2:51:1a:0c:ce:d2:99:a0:f9:
04:1f:61:32:89:93:e3:fc:22:5c:f3:d1:2e:bb:cf:
d2:2b:d8:8d:16:c3:13:9d:82:f8:a5:fe:67:4d:65:
3c:ff:f3:31:7b:79:64:89:ca:ad:7e:21:1a:cd:83:
cf:90:2d:a4:f8:22:72:a0:55:00:1f:1a:fc:c9:00:
3a:51:48:90:e7:8c:9e:f2:2f:92:ed:a8:eb:42:51:
7c:c3:ae:f7:0a:c4:30:06:e5:bb:b1:55:0c:ec:eb:
20:d9:d7:dd:4b:ab:9a:35:59:74:b4:2c:c2:1c:ff:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A5:36:E8:8C:DC:C6:36:4C:4A:95:01:74:1B:E7:1B:57:E3:5A:D8
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.184.0/24
Signature Algorithm: sha256WithRSAEncryption
79:71:77:d3:7d:78:a4:c6:8a:4e:c2:93:c4:99:9f:85:d4:c6:
4c:4a:4f:69:52:b0:53:5e:56:7a:77:50:28:b4:bb:8f:2b:cb:
01:d0:32:e1:07:4c:3f:59:f2:82:45:a5:02:2f:e9:62:b9:9e:
7d:6e:aa:77:03:20:03:1d:78:60:7b:83:c9:cb:34:b1:1c:96:
08:46:2c:20:70:57:10:73:ed:68:25:b5:27:7d:3e:6d:77:a5:
12:c1:b3:47:34:4f:38:e3:29:79:a1:31:2b:bd:cb:6e:82:3d:
42:ca:11:6b:d6:40:80:51:67:59:22:4e:3b:52:02:10:2d:3f:
b6:8e:c1:30:80:52:a9:95:cc:65:15:be:e2:61:63:99:75:c1:
ed:05:9b:03:36:a6:1e:09:7c:a3:89:03:81:c2:6c:16:4d:8a:
64:17:73:57:3a:e0:bc:d5:33:81:7f:92:bb:fe:23:53:12:40:
cf:5a:9c:c2:fd:a1:8c:ba:a1:a3:9b:63:aa:39:ef:e9:d9:67:
22:50:4c:a4:22:68:15:84:11:d1:80:74:73:0e:a9:9e:49:2d:
61:b8:51:51:62:5a:95:4e:64:4b:be:92:7c:da:8c:41:72:34:
18:b9:f3:32:7f:ca:6f:cc:af:55:02:99:78:28:0a:d7:3a:19:
14:3c:6c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:00:27 2024 by rpki-client on console-fra.rpki-client.org