Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa
File: 3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: Af3nYHU2+/wTPxHYfsiTnblbDv/PLciMkO+ThgnmMfs=
Subject key identifier: 80:E7:D0:09:7A:22:BD:36:76:3F:5A:80:51:7E:8F:E3:16:00:7B:BC
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 5355860139B5439ED8700DC88650339564296317
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa
Signing time: Fri 02 Aug 2024 11:41:09 +0000
ROA not before: Fri 02 Aug 2024 11:36:09 +0000
ROA not after: Fri 01 Aug 2025 11:41:09 +0000
asID: 20473
IP address blocks: 185.240.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 10:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:55:86:01:39:b5:43:9e:d8:70:0d:c8:86:50:33:95:64:29:63:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Aug 2 11:36:09 2024 GMT
Not After : Aug 1 11:41:09 2025 GMT
Subject: CN=80E7D0097A22BD36763F5A80517E8FE316007BBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:9b:86:c8:1a:c0:c3:7d:6a:df:f0:ce:68:
4c:fe:aa:08:71:03:9e:52:4b:d1:99:0b:e3:73:94:
83:13:e3:a1:a1:5f:7c:c9:8a:be:1b:12:bf:19:eb:
3f:ed:ff:a2:4f:2a:71:1d:db:31:06:30:ad:5b:65:
e2:24:ad:53:df:c3:a8:5d:a9:3b:fe:3d:b4:18:63:
b2:5e:50:b4:90:ae:d8:16:ab:ed:d2:e6:52:75:23:
f1:b0:78:f4:00:ec:fe:95:86:c5:6f:75:d6:37:ef:
10:78:f4:68:e4:b4:ab:f6:d7:34:7b:e6:36:d0:98:
7d:68:b9:c2:08:f1:f7:4c:ae:d5:d9:40:07:3b:64:
43:90:a8:34:f8:8b:94:da:3e:9d:b3:f3:4f:9a:98:
a5:a8:6a:27:d9:29:14:94:9f:a1:2c:4c:9f:6b:d9:
76:c4:b5:05:af:3c:9c:2c:8d:d7:d2:ad:e0:18:47:
64:10:71:52:b0:ff:69:fb:96:be:ff:d6:af:c2:da:
19:7c:6d:5d:6c:48:76:82:62:7d:78:23:21:91:17:
6c:d1:a1:e6:cb:04:4d:46:d6:b2:b8:50:94:a8:3a:
2b:cb:06:12:be:48:42:37:94:d6:5a:ae:2b:8a:99:
5a:48:76:bb:8b:a2:1b:c0:be:9f:13:b4:3b:90:e6:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E7:D0:09:7A:22:BD:36:76:3F:5A:80:51:7E:8F:E3:16:00:7B:BC
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:37:f8:72:fb:2c:e2:ff:79:07:fe:7b:62:e9:80:cb:9f:f8:
b1:d7:18:88:c5:b4:bc:f2:55:ad:80:28:b4:6c:d1:52:33:3e:
53:18:e5:32:62:c5:1f:16:bf:bd:7e:a6:6b:d5:67:15:07:14:
9b:a3:73:e3:0c:3d:4d:58:f3:a3:30:e6:21:3a:04:e5:9b:7c:
dc:aa:2f:fe:a3:b1:df:2a:8f:a4:4c:24:8b:16:85:d4:18:24:
28:34:1d:75:73:e3:30:ec:cc:ac:a7:44:f7:7b:b6:21:5c:04:
9e:45:88:72:08:13:16:19:2b:d5:e0:8c:b3:78:4d:d5:8a:59:
fd:dc:e6:74:3e:ce:2a:62:56:05:3f:18:ce:f1:64:d8:89:72:
0a:f7:7f:72:1c:9f:90:cc:ca:bc:af:61:50:9c:02:7f:be:ba:
d6:67:64:00:fa:99:fc:f3:8b:40:84:76:aa:cb:1a:06:02:39:
99:63:0d:f4:2e:e8:20:f9:95:8b:6d:ef:ed:06:6d:46:30:c0:
9c:82:6a:0e:81:b6:3d:43:f1:95:07:b3:dd:b4:37:eb:6d:2c:
10:60:66:a2:1a:20:11:42:21:e4:95:72:52:20:1e:1a:c3:63:
07:c4:ce:62:30:73:a6:12:68:cc:55:56:13:34:ae:7e:02:cd:
26:b6:10:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 11:37:23 2024 by rpki-client on console-fra.rpki-client.org