Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e203136353039.roa
File: 38352e3230392e31392e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: NiiLmwgUFAfzx4SxWZ1WH47qp+vLz+K7cpQF6uiA+Og=
Subject key identifier: 96:2F:A8:E8:0B:C7:19:02:8C:9F:8E:FB:28:3B:2D:31:76:0F:CA:7A
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 357542C46B1840215AC5B8A48474DD97317A706D
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e203136353039.roa
Signing time: Mon 03 Jun 2024 17:00:33 +0000
ROA not before: Mon 03 Jun 2024 16:55:33 +0000
ROA not after: Mon 02 Jun 2025 17:00:33 +0000
asID: 16509
IP address blocks: 85.209.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 19:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:75:42:c4:6b:18:40:21:5a:c5:b8:a4:84:74:dd:97:31:7a:70:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jun 3 16:55:33 2024 GMT
Not After : Jun 2 17:00:33 2025 GMT
Subject: CN=962FA8E80BC719028C9F8EFB283B2D31760FCA7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:11:25:62:32:e9:04:c6:46:3d:62:bc:48:
1c:e2:61:c2:4c:e1:95:30:df:31:e5:46:8b:e9:b2:
d1:0f:75:1b:95:05:25:1f:9a:22:a3:e5:7d:1c:cb:
57:b8:26:71:4f:53:70:9e:7a:33:5c:93:2a:4c:41:
10:e5:45:29:95:2a:6d:f1:b6:32:23:04:ee:08:13:
3b:2b:18:aa:df:f8:c6:97:b2:d2:fd:e6:e1:7d:a9:
5c:8d:86:22:ff:41:6a:77:9d:f8:3d:a9:99:dd:cf:
9d:ea:8f:83:b2:5e:43:91:c1:b2:17:bd:ec:23:49:
27:93:7c:d4:3d:c4:59:f1:52:60:33:ca:23:1a:5c:
5b:76:4d:8a:ed:3d:d2:11:66:27:dc:ff:6b:a7:b9:
f0:73:bb:c8:f5:21:4e:48:dd:53:ef:65:fe:d5:eb:
04:82:b6:98:80:37:d1:b4:8c:27:6d:ff:dc:6c:5f:
8a:09:04:76:e4:89:db:c7:96:4b:71:3a:af:68:f3:
f0:66:e1:b8:d0:98:98:12:51:02:6b:37:0b:a4:9a:
3c:d7:38:b2:48:ba:dc:62:d5:e6:e2:c2:a2:49:cf:
8c:cc:f0:11:5e:4e:0b:bb:c9:45:52:c8:32:02:df:
1e:5f:26:6e:dc:2f:f9:69:7e:c0:e8:25:fa:25:3e:
13:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2F:A8:E8:0B:C7:19:02:8C:9F:8E:FB:28:3B:2D:31:76:0F:CA:7A
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.19.0/24
Signature Algorithm: sha256WithRSAEncryption
56:95:a3:64:72:03:32:f4:f7:18:02:a1:d7:cc:fa:9f:1a:9e:
a4:49:20:99:6e:8b:6e:56:c3:0a:e4:87:2f:52:fc:f5:19:ef:
3b:cc:d5:88:49:04:a3:f3:2e:68:a9:ca:0b:97:30:af:e6:93:
8a:be:5b:b9:09:dd:bb:f2:4b:53:e4:c2:af:76:ba:3f:d4:2e:
ec:22:d5:ae:5a:62:68:af:8f:12:88:45:53:f2:36:9a:6d:17:
f8:0d:a7:6c:85:4f:58:0d:58:5c:78:06:f6:4c:bc:6e:c9:eb:
17:f1:51:29:cf:0f:61:5e:82:80:37:25:0b:7a:4e:67:36:59:
e8:63:d8:6a:fe:c4:8e:d4:3d:78:40:bf:13:3a:21:13:44:d6:
1c:77:12:ef:ee:4e:c2:6c:d1:3a:eb:d2:ba:28:12:45:fb:50:
cf:c3:1d:2c:d4:49:db:21:d4:1c:b1:d3:75:d7:5f:60:01:76:
c5:55:0c:31:0c:86:66:7f:a2:f4:f3:2a:8c:d4:00:b8:a4:db:
bc:d1:ba:6f:43:3e:b3:22:2b:87:f7:bd:35:b3:c1:a8:ce:4d:
f7:30:0b:da:5f:39:55:c1:05:7a:07:84:37:fe:d1:6c:c6:85:
6a:89:df:51:53:f5:f8:28:0e:81:8e:39:ea:3b:ca:a0:01:ae:
7b:1e:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 20:57:31 2024 by rpki-client on console-fra.rpki-client.org