Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e203134363138.roa
File: 38352e3230392e31392e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: DTD0Gxu4jRPcr75zgQer1f1vcnHdEJgy9K+3KXxkMuU=
Subject key identifier: 92:22:3B:ED:92:39:FE:5D:BA:61:DF:60:F5:9C:03:07:EF:5A:01:AE
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 2547D67D3513E5FAA0698D25BC421588DCA786DB
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e203134363138.roa
Signing time: Mon 03 Jun 2024 17:00:33 +0000
ROA not before: Mon 03 Jun 2024 16:55:33 +0000
ROA not after: Mon 02 Jun 2025 17:00:33 +0000
asID: 14618
IP address blocks: 85.209.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 19:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:47:d6:7d:35:13:e5:fa:a0:69:8d:25:bc:42:15:88:dc:a7:86:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jun 3 16:55:33 2024 GMT
Not After : Jun 2 17:00:33 2025 GMT
Subject: CN=92223BED9239FE5DBA61DF60F59C0307EF5A01AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:93:1f:fd:61:f3:6a:b4:c5:ce:c8:a7:18:
90:20:af:2d:f4:27:ac:4f:ae:cf:7f:f3:b8:2b:b6:
20:0d:c8:1d:cf:7d:50:9f:b5:d0:a6:b8:38:db:8e:
1c:ef:d2:b1:88:74:08:1c:42:ab:da:a7:9e:48:25:
b9:4e:fa:69:0f:21:99:32:20:d4:92:dd:de:fd:f7:
70:0f:4a:66:73:17:ca:ff:38:a5:03:9e:c1:56:83:
85:1e:0f:c5:32:41:11:33:36:06:43:60:b3:12:26:
d6:d7:c0:91:dc:f2:ae:e5:ba:d2:be:36:99:ee:1d:
fc:9f:68:a7:17:ca:cf:14:28:38:e7:8a:0d:60:b9:
b9:63:a7:e8:46:b4:38:ed:7a:af:f5:91:20:26:2b:
9a:8a:4d:d1:a8:de:4e:05:3c:d5:65:58:ae:59:93:
5a:19:9d:c6:71:56:2d:1e:bd:ee:3c:5b:1c:fb:4d:
98:3b:d0:07:dc:27:ce:95:13:3c:e2:8c:fb:80:35:
89:8d:47:07:53:13:0b:c0:05:22:8f:28:0a:3f:82:
cc:6d:30:89:c5:5a:a2:1a:af:f2:ac:1d:ea:42:ea:
07:cb:af:2b:91:6f:35:5e:c1:6b:01:1d:7e:69:b3:
3a:18:60:6d:a7:96:16:1e:dd:f8:21:18:b2:4e:e5:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:22:3B:ED:92:39:FE:5D:BA:61:DF:60:F5:9C:03:07:EF:5A:01:AE
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.19.0/24
Signature Algorithm: sha256WithRSAEncryption
91:89:be:76:3d:1a:43:f0:c8:c1:cb:a2:d6:9b:2d:fe:b4:4f:
2a:36:58:b6:18:35:70:d9:c5:98:0d:6d:0c:45:27:bf:8d:3a:
14:7a:b0:1d:a7:d2:7a:99:0e:f1:d4:f8:26:26:11:c4:a2:6d:
1d:85:24:b8:73:4e:fa:5d:ed:6d:cc:96:d0:08:17:c6:d7:7c:
78:2a:6b:ec:06:71:b2:aa:f7:54:9c:4a:31:55:f4:be:aa:d7:
4c:ee:9e:92:17:ec:89:49:8f:03:b2:82:22:ef:ac:82:e0:10:
82:05:10:20:e8:00:fc:72:bc:ea:09:8e:a3:0b:f5:24:80:d0:
d2:76:c3:25:a8:ba:97:ec:2c:43:9c:44:0f:da:a1:dd:fd:ba:
70:bb:cf:08:a9:f3:fb:f0:3f:c8:12:e7:41:95:28:60:7b:26:
ac:08:1a:f1:ac:5b:1f:7d:63:7f:2c:4c:fc:ce:f2:8d:02:b0:
c7:47:4e:8c:15:f0:2e:63:87:8a:e8:5c:51:14:2e:6f:16:2d:
f0:aa:61:6a:f8:31:54:3c:bd:99:a8:37:22:3d:8f:88:b8:72:
71:4f:da:ff:24:fc:66:dd:27:f4:cd:67:9f:f4:08:3a:58:27:
3a:0f:5d:96:de:43:f6:ae:41:8f:32:a3:e9:d5:01:06:17:ff:
8a:45:6b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 20:57:31 2024 by rpki-client on console-fra.rpki-client.org