Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3138342e302f32342d3234203d3e20313339363630.roa
File: 3137382e3230382e3138342e302f32342d3234203d3e20313339363630.roa (raw, json)
Hash identifier: +lMOMCa4oFPhtofsd0nbpItScsNDAnK/itfRmLIVzq8=
Subject key identifier: EB:9A:57:C4:29:42:2E:F5:13:46:EC:31:71:6C:53:AA:07:88:FC:1C
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 41EFFCC8898774C23A0912E603357B8512A9E415
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3138342e302f32342d3234203d3e20313339363630.roa
Signing time: Wed 22 Mar 2023 15:29:40 +0000
ROA not before: Wed 22 Mar 2023 15:24:40 +0000
ROA not after: Wed 20 Mar 2024 15:29:40 +0000
asID: 139660
IP address blocks: 178.208.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ef:fc:c8:89:87:74:c2:3a:09:12:e6:03:35:7b:85:12:a9:e4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:40 2023 GMT
Not After : Mar 20 15:29:40 2024 GMT
Subject: CN=EB9A57C429422EF51346EC31716C53AA0788FC1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:86:bc:80:e7:70:60:a8:2c:4a:97:94:4e:
6a:02:e6:73:65:41:76:fb:c7:42:f7:6f:39:2f:bc:
8b:22:5e:06:6c:46:1f:0b:df:9f:20:6a:25:96:de:
67:ba:e1:a4:43:d1:5a:56:3f:7c:74:d7:13:a8:d1:
5c:35:c9:8d:fd:26:40:f0:7d:b2:f5:bc:e0:31:1b:
c4:b1:c4:c4:77:dd:67:22:60:23:63:b0:69:8b:54:
9f:51:7c:69:af:07:0d:19:d1:09:d3:7e:1a:19:01:
0d:b8:8d:51:3e:64:ed:8a:49:19:7e:9e:01:e4:4d:
e3:94:77:97:4b:66:4f:98:4b:53:83:6d:20:3a:35:
74:39:24:7f:2a:60:67:8e:22:d2:1f:89:3b:14:94:
94:1b:ce:f2:e1:a9:76:3e:35:7c:a1:09:fb:f2:ed:
85:a2:78:7d:32:84:79:13:7f:3a:9c:1f:31:93:e7:
31:25:ca:f3:5d:35:55:4e:60:ad:9f:b3:14:d6:f6:
1b:60:02:b2:be:a3:94:a5:16:11:d4:29:e3:c0:7a:
34:67:13:90:ab:08:40:ea:95:1b:42:92:06:99:65:
a5:33:24:a5:6d:0f:31:b6:0a:73:05:fe:c9:dd:4a:
a4:b6:19:05:c2:3d:5a:f1:12:6d:14:9c:61:fd:70:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9A:57:C4:29:42:2E:F5:13:46:EC:31:71:6C:53:AA:07:88:FC:1C
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3138342e302f32342d3234203d3e20313339363630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.184.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2c:97:96:af:8f:31:26:89:60:29:14:06:af:f9:82:54:dc:
d0:7a:3b:bf:99:5b:94:45:c8:05:26:c1:f8:85:c1:9c:16:18:
00:f5:58:e2:85:ad:7e:49:ba:89:07:0e:47:4a:14:a3:80:d5:
6f:cb:61:76:6d:5f:95:9c:c8:02:53:0b:7c:2f:eb:60:dd:e2:
a2:81:92:05:1e:2b:20:34:fd:dd:1d:4a:a5:0f:c7:78:cf:f2:
4a:65:07:cc:17:3c:0f:f7:d5:de:c1:3c:7b:f9:35:d0:6a:91:
d9:8e:f8:64:3c:cb:c8:2f:58:52:71:6a:a5:79:52:eb:ee:44:
9e:5d:e7:6b:06:30:e7:41:f9:57:d1:bb:15:d2:e4:15:42:8c:
b1:87:6a:b3:c9:32:15:86:f9:95:5c:95:81:c2:ce:ca:cd:ee:
bb:ae:cf:c0:a3:82:d4:1b:5b:83:c7:01:de:34:c5:ed:d7:a4:
37:b2:ed:bf:4e:1a:64:2c:9c:c9:df:e1:cd:77:46:24:c9:7c:
c3:6b:e0:74:a1:4f:ae:64:f4:93:46:16:f6:60:25:ac:36:1b:
6f:3f:6a:8b:74:8a:c6:0d:75:57:c7:30:0a:fb:a6:f7:ed:fe:
3c:d8:2e:bf:3d:d8:77:6f:6a:35:8f:27:f4:99:54:16:4d:70:
f2:a0:74:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org