Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31372e302f32342d3234203d3e20323131333736.roa
File: 38352e3230392e31372e302f32342d3234203d3e20323131333736.roa (raw, json)
Hash identifier: F5/JSlNsnRe/vdUL6IRj85aS/yhZZwk/izOz5ttP/gA=
Subject key identifier: B3:30:21:29:FA:6B:B9:BF:4A:9B:8B:CD:08:A0:F5:71:3C:63:34:DA
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 0EF256CC8B6B5AEC13A197F8EFE8AB1D89525F7B
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31372e302f32342d3234203d3e20323131333736.roa
Signing time: Mon 07 Aug 2023 10:18:16 +0000
ROA not before: Mon 07 Aug 2023 10:13:16 +0000
ROA not after: Mon 05 Aug 2024 10:18:16 +0000
asID: 211376
IP address blocks: 85.209.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f2:56:cc:8b:6b:5a:ec:13:a1:97:f8:ef:e8:ab:1d:89:52:5f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Aug 7 10:13:16 2023 GMT
Not After : Aug 5 10:18:16 2024 GMT
Subject: CN=B3302129FA6BB9BF4A9B8BCD08A0F5713C6334DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:0c:9b:f9:69:79:33:e5:6c:32:a3:fc:e8:
ab:05:5b:ca:37:76:04:a7:c1:bd:d4:43:60:90:b0:
0b:73:16:93:89:bc:33:99:e0:d0:4c:ce:87:00:f5:
9d:15:6d:39:b2:d8:cb:9e:fa:0b:87:a6:eb:3d:b1:
75:70:fb:97:83:b0:56:b5:2e:b2:c3:56:84:99:a2:
54:a8:bf:c1:19:c0:bf:10:6e:5e:c6:19:dc:26:2c:
51:1a:05:0d:4a:60:57:0e:44:9a:ab:05:63:24:74:
07:10:bd:64:55:ed:57:b3:ae:d4:05:80:e2:7f:20:
22:79:7b:61:80:5d:b5:1b:2e:c2:81:9c:04:73:54:
4b:f6:b0:80:f5:ca:de:ae:fe:0c:bd:97:0f:0e:fc:
80:cc:57:30:c3:66:eb:02:b2:b5:b9:74:f5:3d:7b:
e0:f4:05:c2:28:c5:72:cb:64:92:5e:6b:25:12:e9:
3d:d4:2d:f2:e1:04:04:f2:b6:a4:af:94:ae:d7:8b:
5b:a1:0a:ab:2a:39:16:11:d0:0b:7f:ad:f8:a7:a9:
0d:1a:7e:30:6f:75:41:c9:1c:6c:db:62:31:8e:41:
44:1d:95:5c:d2:32:a3:8a:7c:1c:23:5f:1a:78:2c:
10:63:ae:08:56:e7:0c:34:2c:43:ee:1e:d0:40:65:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:30:21:29:FA:6B:B9:BF:4A:9B:8B:CD:08:A0:F5:71:3C:63:34:DA
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31372e302f32342d3234203d3e20323131333736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.17.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c2:fc:51:79:9c:e2:ad:05:84:78:b6:95:9f:0e:9e:f0:9a:
16:35:d6:d8:cc:ad:e7:91:db:91:70:33:c3:da:ce:b9:29:5c:
a6:16:4c:29:6d:35:77:67:3b:06:d3:6e:73:27:21:a0:05:53:
56:db:ce:2c:a5:7c:bb:d5:fc:3f:3b:a4:b9:10:21:ab:43:91:
68:31:69:0d:d1:49:ba:22:82:cf:c4:da:94:24:6e:9b:1a:0a:
48:8d:28:08:d8:5e:32:f1:de:95:f5:e2:2a:cf:20:83:54:eb:
1a:6f:61:e3:27:fd:6e:92:dc:65:43:5e:a3:9b:47:7d:b3:3c:
a7:48:c8:54:05:ae:17:1b:4f:8f:52:be:87:0e:4a:08:27:45:
e3:c4:f2:36:36:4c:29:06:eb:20:b7:d2:fe:51:56:73:fe:b6:
2e:f6:d4:86:89:57:ba:dd:cd:bd:67:9e:b7:14:e8:62:52:a6:
cf:5b:87:ba:38:f5:05:cc:ff:20:ea:3f:d8:af:10:eb:34:c2:
97:6a:f8:6b:fc:6b:93:8a:f9:ea:af:90:25:35:3b:fb:af:08:
c5:e7:38:f3:8c:da:b7:5a:d9:77:b8:c3:1f:61:92:5d:e6:eb:
ed:1e:78:94:a1:5e:a0:04:ad:ec:57:69:80:e7:59:f5:9c:e2:
31:92:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 00:27:37 2023 by rpki-client on console-fra.rpki-client.org