Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34322e302f32332d3233203d3e20323132323338.roa
File: 3138352e3235302e34322e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier: vKegEKYMUetuXExqiZCdbxwvNnGoTyRBufujxZJ/MVE=
Subject key identifier: 00:B1:3D:F4:BE:A2:A3:77:88:64:F2:A4:CD:3B:40:2B:8D:90:BB:95
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 6FC86C2AEDCFAEF305E5B5D74936E55DD6AABA48
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34322e302f32332d3233203d3e20323132323338.roa
Signing time: Tue 28 May 2024 02:45:20 +0000
ROA not before: Tue 28 May 2024 02:40:20 +0000
ROA not after: Tue 27 May 2025 02:45:20 +0000
asID: 212238
IP address blocks: 185.250.42.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 28 Jun 2024 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c8:6c:2a:ed:cf:ae:f3:05:e5:b5:d7:49:36:e5:5d:d6:aa:ba:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: May 28 02:40:20 2024 GMT
Not After : May 27 02:45:20 2025 GMT
Subject: CN=00B13DF4BEA2A3778864F2A4CD3B402B8D90BB95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:69:d1:e3:23:a4:ea:0e:f7:54:f0:92:cd:
e1:7f:11:61:e2:b7:2e:37:c0:e3:c0:12:9b:80:88:
27:0b:13:1e:6b:36:4a:52:16:de:26:8c:07:65:b1:
9b:eb:67:94:7e:f2:84:e6:df:ad:75:93:99:ba:77:
46:80:48:3c:ee:1f:37:75:3a:58:6f:25:28:ce:72:
4e:9a:de:ca:f2:ef:38:b3:09:77:b7:6d:b3:a2:be:
23:bf:d2:64:94:3f:55:f8:b1:2b:e5:42:ae:79:74:
05:8f:bd:c6:20:1a:39:cb:78:39:58:c6:49:fb:93:
ea:d1:98:e9:1e:b9:5d:a9:db:28:ba:9c:ea:81:46:
c2:60:fc:d6:7b:dd:54:0b:b4:3a:5d:b2:b0:d7:48:
7c:92:68:46:0d:32:a0:3e:61:09:0d:b6:0d:b4:ca:
17:26:00:cd:96:5c:69:af:94:68:7c:ff:4e:14:ee:
ed:f2:b2:07:fd:0e:3f:f5:3c:f1:55:ad:0d:87:59:
48:d5:56:fd:a9:5d:ed:6c:3d:a9:92:98:f6:c8:db:
54:65:fe:a9:92:3c:87:a1:8b:fc:0d:55:81:b9:af:
2f:da:fa:a7:19:c1:78:b1:66:f8:e3:1e:48:37:1f:
bc:dd:3c:ff:dd:5b:5e:ab:e7:dd:1f:ed:9b:92:66:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B1:3D:F4:BE:A2:A3:77:88:64:F2:A4:CD:3B:40:2B:8D:90:BB:95
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34322e302f32332d3233203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.42.0/23
Signature Algorithm: sha256WithRSAEncryption
85:14:9a:e8:48:ff:05:41:85:fd:9f:c6:d8:87:d0:60:96:f5:
b8:83:01:3c:de:79:55:01:2c:2c:62:7f:e0:a0:f7:40:12:66:
9b:1b:4f:b7:6c:8e:bb:6e:ae:25:b9:e4:e4:b0:85:52:76:e6:
1e:df:29:c7:07:7f:05:d6:00:6f:e6:50:8a:aa:e7:de:40:98:
38:8f:39:8e:e1:98:86:af:1f:58:b5:8c:c2:69:ee:70:e8:c8:
0e:fe:11:26:0d:12:b7:2f:96:d2:28:86:31:46:fc:40:5f:87:
90:bf:fb:d2:f8:f4:23:4e:7c:ca:53:66:bf:58:c8:c9:08:d4:
77:2a:80:55:f8:87:0e:36:65:53:83:40:8d:40:19:64:32:0f:
7f:cc:28:14:0e:6e:82:54:ed:81:57:2d:22:80:a5:45:1f:b9:
04:4a:3b:93:18:72:d5:2f:ba:65:17:12:d4:7e:19:cf:57:2c:
b1:0a:81:93:34:5c:e0:a0:69:e2:2f:e8:19:52:22:8e:86:8a:
85:88:b9:b0:6f:86:b1:d7:d6:90:4d:b8:a6:c9:e4:8a:42:41:
68:7f:b7:9e:72:a9:6b:6b:34:e7:46:31:ad:97:97:99:3a:76:
7a:9a:b0:f1:20:d1:54:3a:79:e6:a9:bc:b5:ed:69:68:8a:55:
8f:90:eb:19
-----BEGIN CERTIFICATE-----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Generated at Fri Jun 28 02:14:12 2024 by rpki-client on console-fra.rpki-client.org