Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32342d3234203d3e20323135323837.roa
File: 3139332e32342e3233322e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: p2Ly8QKfDiUvWjF0cwB9NGvunNyIl+0HIeyNpHsBbqk=
Subject key identifier: EF:F9:23:83:70:D4:1A:B1:E9:05:E7:6B:D1:E8:1C:C3:BE:6B:F2:17
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 0586187198D3DE77DFFF26DBCCB3FAA0876757D7
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32342d3234203d3e20323135323837.roa
Signing time: Sun 28 Jul 2024 13:10:47 +0000
ROA not before: Sun 28 Jul 2024 13:05:47 +0000
ROA not after: Sun 27 Jul 2025 13:10:47 +0000
asID: 215287
IP address blocks: 193.24.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:86:18:71:98:d3:de:77:df:ff:26:db:cc:b3:fa:a0:87:67:57:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jul 28 13:05:47 2024 GMT
Not After : Jul 27 13:10:47 2025 GMT
Subject: CN=EFF9238370D41AB1E905E76BD1E81CC3BE6BF217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:e4:bf:b7:e2:7a:82:2c:d6:df:95:71:0e:
5b:3a:33:58:be:5a:d0:9f:5d:e6:9f:ba:dd:e8:c2:
66:f0:30:e4:06:98:1e:ad:40:34:e3:75:76:29:8f:
e2:c2:c4:57:4b:f1:bb:48:3b:f1:5e:ff:6d:e0:b1:
fa:d2:86:c4:9d:c3:eb:83:ba:20:a2:1b:ec:35:e6:
6c:d1:53:14:44:fd:0b:f2:37:32:f2:c3:e5:7b:ef:
d2:1d:ed:75:aa:91:1b:66:c4:b8:5b:53:6e:ab:02:
12:eb:89:4c:b5:db:ca:b7:96:44:a5:ce:81:57:fb:
72:7a:d8:e5:8d:23:76:a7:d4:ed:ed:5c:78:57:d1:
38:aa:cf:ab:33:54:21:93:4b:d4:1a:e4:8f:fc:6d:
fb:8c:44:4e:59:26:b7:8e:fb:b0:76:47:10:f6:18:
fa:a0:2f:76:d6:ae:4e:0a:b0:e3:d4:e6:7f:a4:f3:
e4:d0:be:2e:49:79:66:7d:62:f6:b5:44:6b:d4:33:
ef:b5:3a:0a:b5:38:5b:2b:04:0a:59:0e:fb:58:54:
91:a2:1c:d1:75:55:26:dd:e5:49:7f:a9:7b:ab:e3:
e8:72:be:2b:46:af:ff:38:06:83:6b:a5:21:b2:0c:
bc:9b:77:3f:49:35:28:e3:e0:0c:70:74:84:e9:5f:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F9:23:83:70:D4:1A:B1:E9:05:E7:6B:D1:E8:1C:C3:BE:6B:F2:17
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.232.0/24
Signature Algorithm: sha256WithRSAEncryption
18:9f:23:c9:04:0d:81:e7:d0:11:60:9b:b8:b2:44:e2:87:90:
d0:24:20:77:bf:a7:48:19:f0:25:52:4b:80:41:2a:73:0b:5a:
ae:d3:55:e5:1a:27:be:2d:74:14:53:68:b5:e3:57:c3:b5:93:
ba:da:a1:be:e4:37:1d:b1:5e:dc:27:21:0f:a6:cc:34:a0:7b:
0e:94:c5:70:70:ea:0c:17:aa:d2:ff:43:f2:e9:32:48:79:7a:
02:c8:b5:c9:31:87:c4:51:77:0b:18:5e:e7:ed:83:ac:50:d5:
ba:fe:d2:13:2c:26:d1:d7:56:64:12:2e:14:36:48:39:e7:02:
71:20:4c:f6:7e:32:57:02:12:48:c5:ea:a6:e6:93:32:dd:9a:
73:de:b3:c9:25:9b:12:12:f3:2b:7a:ee:dc:31:6e:2c:2b:78:
8b:22:44:71:99:c5:0f:06:2c:8c:70:c4:00:98:9d:68:72:6e:
ab:ee:be:f2:1b:26:ea:30:82:fa:5f:38:e0:33:af:bf:2f:bf:
de:68:af:23:17:ec:e8:bc:e7:a4:d3:8d:cc:2b:b7:d7:18:8a:
26:66:b4:1f:7b:29:fa:20:e2:dc:14:36:b7:29:39:e1:2c:1c:
0d:50:3e:55:16:18:14:2c:2e:2b:ff:37:44:cf:a0:e7:20:fd:
70:dd:c2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 03:06:04 2024 by rpki-client on console-fra.rpki-client.org