Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e20323039313831.roa
File: 38352e3230392e31392e302f32342d3234203d3e20323039313831.roa (raw, json)
Hash identifier: 9YH3fQUKmaxIPY4r912eHyb9rL2Q2OxolF+dqumHY8U=
Subject key identifier: 89:F6:5E:11:91:9A:8F:E0:A3:7F:02:1D:F1:11:B5:46:DE:2F:FD:25
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 0A311E219D9CAAC53A701CCABFF90DC76A58EEC7
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e20323039313831.roa
Signing time: Thu 23 Mar 2023 17:05:44 +0000
ROA not before: Thu 23 Mar 2023 17:00:44 +0000
ROA not after: Thu 21 Mar 2024 17:05:44 +0000
asID: 209181
IP address blocks: 85.209.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Feb 2024 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:31:1e:21:9d:9c:aa:c5:3a:70:1c:ca:bf:f9:0d:c7:6a:58:ee:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Mar 23 17:00:44 2023 GMT
Not After : Mar 21 17:05:44 2024 GMT
Subject: CN=89F65E11919A8FE0A37F021DF111B546DE2FFD25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:ef:54:12:4d:f7:5f:1a:38:b9:8b:aa:d2:
3d:bd:fb:46:27:b4:11:2e:0b:fb:6e:33:10:ac:73:
3f:c6:b1:21:0e:74:3e:88:bd:05:bc:95:0c:a2:0d:
12:63:3e:57:60:60:79:43:8c:ba:4a:38:05:fe:c8:
a3:e0:f9:a7:b0:a3:8d:f1:50:c0:67:22:e0:ff:fb:
1e:6a:af:7a:98:21:c4:21:07:8a:27:de:b7:4c:41:
d0:1a:74:9c:02:7c:10:e0:70:6c:89:06:cd:7b:e5:
a6:b9:f7:b6:2c:00:4b:cf:a8:fa:b9:2f:13:e1:ea:
cc:7f:6d:c5:6d:c5:9d:9b:6c:c1:98:16:b9:bf:13:
2d:91:38:a5:97:e0:97:a0:7b:69:8c:6b:09:e5:83:
5a:22:4c:35:99:78:55:69:65:3b:45:ac:e9:f4:df:
6b:69:dc:b2:00:4e:4e:ba:4e:86:31:ed:2f:c1:93:
fe:89:c0:db:a4:c0:1c:b6:8c:85:0f:f4:eb:0d:94:
6c:d5:f9:82:39:ed:29:be:87:8d:fc:df:67:dc:30:
af:ca:06:57:26:fb:57:6d:eb:71:1b:a0:f5:7d:0a:
98:8b:2d:14:b6:5e:99:15:7f:87:71:6a:ce:54:15:
19:2d:44:3c:42:96:28:7e:bd:f4:21:18:d4:17:29:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F6:5E:11:91:9A:8F:E0:A3:7F:02:1D:F1:11:B5:46:DE:2F:FD:25
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e20323039313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.19.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:80:af:6f:8c:b9:9f:05:ca:36:5f:b4:22:a2:e1:a5:58:5e:
05:cc:77:74:4b:ed:27:cf:d8:4e:52:9a:a7:64:f4:5f:9d:34:
cf:6e:5a:cf:5e:1b:d4:f8:50:21:96:18:b1:44:32:24:11:ca:
c9:b1:1b:21:73:dd:6b:b4:b8:d1:e3:92:2d:2f:ac:59:13:b9:
60:f0:7e:28:4c:be:9f:1b:a8:9c:22:0e:43:a1:10:05:64:8b:
97:53:5c:3e:d7:8c:ac:cd:c4:e4:45:07:2a:4e:c6:f2:f6:e3:
91:e1:c8:30:49:25:51:35:af:10:3e:6a:b7:45:83:1a:a3:2b:
d5:9d:64:97:c8:4b:d8:7e:43:95:99:f7:ce:b7:37:88:95:02:
ad:15:55:03:38:03:5f:ee:17:c0:eb:a4:6c:33:e3:81:14:18:
8f:7b:06:3a:c7:b5:39:1a:55:ee:4d:92:c3:80:41:2a:f3:8f:
c0:a9:93:e8:e5:1f:e2:9a:19:c2:89:81:24:9e:99:5b:03:d2:
5e:7a:7a:70:fd:d7:09:e5:03:26:1a:83:51:7a:ed:5c:93:e1:
b1:e3:f9:e6:10:d0:b0:c0:c4:86:fa:b1:89:74:bc:6c:ad:d8:
44:2b:4a:14:22:d3:40:59:77:e5:7d:f7:25:37:e9:40:13:e8:
e3:3c:88:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 01:26:28 2024 by rpki-client on console-ams.rpki-client.org