Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e302e302f32342d3234203d3e20343030383636.roa
File: 3138352e3138312e302e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: JRFDiR1iPXimM5nvtkpVrb+CLihb5XWYRJjINVnlyoA=
Subject key identifier: A1:CF:1D:50:3B:F4:AA:20:C6:BB:06:6E:7C:92:9D:0A:FF:66:A5:9D
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 1877092D42B1BC93502F9834851EFFFC1189CAB3
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e302e302f32342d3234203d3e20343030383636.roa
Signing time: Mon 27 May 2024 07:58:10 +0000
ROA not before: Mon 27 May 2024 07:53:10 +0000
ROA not after: Mon 26 May 2025 07:58:10 +0000
asID: 400866
IP address blocks: 185.181.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:77:09:2d:42:b1:bc:93:50:2f:98:34:85:1e:ff:fc:11:89:ca:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: May 27 07:53:10 2024 GMT
Not After : May 26 07:58:10 2025 GMT
Subject: CN=A1CF1D503BF4AA20C6BB066E7C929D0AFF66A59D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1f:b8:ed:47:0a:c1:8c:4f:7d:13:ed:d0:4a:
19:0e:36:7d:9f:b5:3a:50:71:43:08:23:df:59:51:
51:42:e2:d3:a5:c5:62:54:71:6e:e5:82:09:19:a8:
d9:64:cc:0e:02:b6:48:b6:38:74:ee:27:ce:80:49:
78:72:9f:84:0f:51:3b:81:a9:03:eb:5a:e7:12:21:
74:e0:20:5f:6a:14:f3:8c:a9:a5:1a:6a:df:9a:69:
e4:30:cf:16:69:5e:52:54:5b:d4:e1:a9:7e:1e:f9:
26:32:5f:b1:cf:23:c1:35:09:25:67:5a:20:52:c5:
87:7f:dd:52:ef:23:b1:d1:2c:51:d2:0c:a8:72:ed:
76:ef:57:20:3e:22:34:f5:92:bc:7b:9a:a3:95:e2:
08:af:fc:03:c8:d1:17:73:7e:b4:44:ac:04:15:be:
ec:40:06:6d:9d:84:a4:c0:9b:a3:f1:19:6f:4e:32:
d0:47:52:9e:a1:47:aa:11:8b:87:1e:cb:01:1d:bf:
f3:23:ac:66:3f:56:84:72:30:58:6d:40:b0:ef:8f:
3e:c3:98:78:ac:b8:73:5d:62:a6:bf:6d:21:d8:8b:
92:e9:51:76:cd:0c:0e:36:e4:24:0c:38:2f:e5:d5:
83:49:db:6f:cd:5b:31:5f:1a:9b:32:c3:ff:4f:79:
2c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CF:1D:50:3B:F4:AA:20:C6:BB:06:6E:7C:92:9D:0A:FF:66:A5:9D
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e302e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.0.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:7b:7b:7d:73:07:c5:fd:b2:6d:7d:ee:08:d8:58:bf:5a:39:
ab:75:8a:f5:80:d3:5d:fc:a8:43:be:10:49:ac:01:7f:72:8d:
c1:73:2e:fa:26:88:e5:02:56:31:ff:72:7b:9e:42:b1:3b:fa:
2d:29:c4:93:cf:8d:b6:ab:cd:59:c3:1d:0d:62:15:d8:21:5e:
e0:8c:84:e2:1a:23:c6:f8:07:fb:49:57:aa:01:23:ae:af:54:
5e:a2:e3:0d:bb:3e:3a:70:be:0e:13:af:e0:8c:db:65:ec:e8:
1e:8b:12:5f:30:05:ad:d3:be:80:58:44:f1:27:dc:13:60:5d:
59:f8:ff:4a:29:91:55:da:d7:e0:01:10:74:c4:be:66:5e:40:
97:c8:63:7a:a7:fa:40:73:ec:fa:03:11:25:e4:12:28:22:12:
f6:2c:ad:8b:f1:33:5e:8a:d4:66:0c:10:e6:ad:81:41:78:2c:
da:55:18:8e:90:23:50:ea:51:9f:32:cb:5f:d7:7d:a2:ef:a2:
e5:80:f9:c5:c1:d9:7f:9c:78:06:37:0f:bf:93:45:a2:ce:92:
81:79:e4:ef:a4:66:39:a9:75:85:95:39:49:b9:89:96:34:8e:
8d:a7:5e:ed:b9:f5:ea:e3:6d:05:ce:a4:23:d9:84:c3:a5:1e:
5a:ea:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 01:54:33 2024 by rpki-client on console-ams.rpki-client.org