Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e302e302f32342d3234203d3e20383334.roa
File: 3138352e3138312e302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: /LmcFo+qW709lVlhg5F/HbWDTvEd0BAqQfzuOpWLvHQ=
Subject key identifier: 35:07:F7:14:10:D5:F3:11:A7:EC:98:56:49:39:3B:57:0E:90:ED:F9
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 3562AF5D87AD16F79FC45B92159489D2B2C2F9CA
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e302e302f32342d3234203d3e20383334.roa
Signing time: Tue 27 Aug 2024 00:03:05 +0000
ROA not before: Mon 26 Aug 2024 23:58:05 +0000
ROA not after: Tue 26 Aug 2025 00:03:05 +0000
asID: 834
IP address blocks: 185.181.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 11:37:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:62:af:5d:87:ad:16:f7:9f:c4:5b:92:15:94:89:d2:b2:c2:f9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Aug 26 23:58:05 2024 GMT
Not After : Aug 26 00:03:05 2025 GMT
Subject: CN=3507F71410D5F311A7EC985649393B570E90EDF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:a0:c2:3f:4e:44:3a:85:3e:9a:ed:cb:86:
44:8c:1d:04:24:0c:bb:56:7c:10:17:67:5e:be:ca:
59:02:f7:cd:dc:33:e8:ad:40:f1:33:ce:36:37:1a:
65:df:19:2b:e5:2e:de:a2:c7:29:50:d3:ac:03:56:
bd:f5:a9:c4:5a:1a:fd:42:27:ce:c9:78:da:13:e5:
31:b3:fc:ac:9e:68:f2:0a:3c:58:54:c3:c8:76:9d:
fa:67:6a:d7:11:10:a0:61:77:66:35:97:b2:e2:87:
63:e8:f5:f3:bc:e5:eb:6e:4f:1c:ea:61:78:e5:06:
39:62:57:58:cd:f9:71:c7:73:a1:f4:f9:ef:5e:3f:
a5:54:94:6b:20:e7:48:62:af:00:36:c5:96:8f:e5:
50:0c:86:2d:7e:c4:09:58:7f:b2:10:ad:16:8b:ec:
6e:b9:24:df:4f:5b:27:08:03:1e:02:12:38:e9:e0:
fa:c6:6a:de:d5:4f:6d:52:68:57:9d:c8:c0:ab:8c:
bb:44:35:24:4a:f1:33:53:7e:4a:5d:fd:16:dc:7c:
be:10:d9:f5:44:fc:94:60:72:ad:0a:a6:c0:10:db:
b5:60:e6:37:38:98:fd:21:d0:df:3c:51:e5:ca:65:
bf:dc:03:53:43:44:9b:78:f6:12:d3:79:dd:29:86:
04:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:07:F7:14:10:D5:F3:11:A7:EC:98:56:49:39:3B:57:0E:90:ED:F9
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.0.0/24
Signature Algorithm: sha256WithRSAEncryption
56:4e:3d:42:d2:06:94:b3:eb:5a:cb:1a:b6:c1:a6:5a:da:af:
87:5e:61:c3:82:44:7d:9d:f2:98:08:61:d7:e6:8c:41:6f:0e:
05:18:07:f1:16:fb:8d:c4:94:87:a9:07:8e:35:b5:0b:9e:5c:
22:29:d1:66:91:e9:e4:26:c3:96:21:06:66:ff:9c:04:0b:bb:
37:71:96:c6:b0:22:d4:01:65:01:5f:09:0f:f5:96:f1:57:ca:
6d:18:c9:e0:07:fa:3b:30:c5:e7:e5:75:b4:7c:cc:56:8d:1b:
61:92:fc:b4:27:3b:89:0d:16:f0:2b:ad:06:5c:94:94:f2:8b:
d2:48:6e:42:4f:e0:11:37:9a:16:5e:d9:9b:b3:17:8b:ea:78:
87:df:e4:59:0a:df:a6:93:28:b0:59:59:c1:28:c4:dc:63:41:
f3:f7:91:78:fa:e8:cb:06:a0:2b:bd:bc:fe:70:61:24:06:ed:
50:83:fb:15:13:2b:8a:76:a6:ed:6f:d1:92:f4:67:82:6a:42:
d4:5a:9c:fa:b9:2f:e2:76:99:c3:f6:ef:41:80:be:6a:b7:a9:
b7:6e:75:fa:6c:8c:1a:42:31:79:78:c6:d2:8b:31:2f:c2:9a:
9e:c1:59:20:70:6a:37:b8:5a:c2:c8:31:4d:4e:b8:c7:03:4f:
22:f0:7e:05
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 28 14:17:30 2024 by rpki-client on console-ams.rpki-client.org