Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e20383334.roa
File: 38352e3230392e31392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: nAxFbbVP2hb+CAVeJ1ggzgqaeRUYXbw+T1PB7dN9CaA=
Subject key identifier: E6:9D:01:09:0A:D4:A7:44:DF:A6:7B:C0:75:0A:3C:E0:1F:23:03:99
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 552CC58403CE68C877CAE8D2488A87044F020ED7
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e20383334.roa
Signing time: Mon 12 Aug 2024 00:04:35 +0000
ROA not before: Sun 11 Aug 2024 23:59:35 +0000
ROA not after: Mon 11 Aug 2025 00:04:35 +0000
asID: 834
IP address blocks: 85.209.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 14:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:2c:c5:84:03:ce:68:c8:77:ca:e8:d2:48:8a:87:04:4f:02:0e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Aug 11 23:59:35 2024 GMT
Not After : Aug 11 00:04:35 2025 GMT
Subject: CN=E69D01090AD4A744DFA67BC0750A3CE01F230399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:7b:32:ab:e8:ca:c8:b7:3f:f3:33:24:eb:
ff:93:00:5a:a1:29:cf:2e:b9:cf:6b:ed:03:f7:b1:
95:e5:8b:4e:47:9d:bb:16:97:33:c9:18:16:5b:af:
51:a3:42:11:4e:d8:28:0f:3c:1b:46:a2:47:99:68:
6b:81:e0:73:bc:68:02:10:82:86:20:29:64:29:7d:
9f:14:52:e6:71:e8:92:7f:e6:80:d4:2d:c4:72:38:
b7:ab:b5:bd:5a:12:e1:cf:d6:1a:dd:45:3a:b9:76:
70:4c:b5:d0:24:ab:e5:53:10:8c:99:71:58:14:80:
5c:bc:86:f6:e4:dd:20:88:5b:ca:cb:1d:38:7b:e7:
7c:ba:e6:a0:5e:7f:cb:fe:8d:41:11:0c:06:dc:d1:
d9:d7:53:f3:66:f8:d7:64:fb:9e:e8:bc:b7:93:0e:
f1:13:2c:db:1b:cf:ec:ec:c7:ef:ed:38:00:57:a7:
6e:7e:92:d2:3a:25:1e:bf:09:d1:43:a4:61:db:fb:
96:8e:d8:28:2f:52:c3:d8:4a:0a:17:59:e7:17:b4:
66:4a:65:67:5d:a1:fb:6c:00:54:01:87:93:e3:f8:
98:13:28:0c:99:15:5e:c2:d4:f0:9b:9d:50:1f:05:
54:92:ee:bb:fb:66:45:54:ed:a1:cc:c5:b9:79:3d:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9D:01:09:0A:D4:A7:44:DF:A6:7B:C0:75:0A:3C:E0:1F:23:03:99
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.19.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:29:6e:0b:f9:24:e4:8d:04:bb:9e:36:02:b1:04:e7:5f:49:
47:68:68:fe:72:45:3a:36:5e:fa:d3:97:80:fe:04:ec:d8:11:
55:02:0f:a2:fb:6e:e0:40:a8:4d:4f:1e:f9:45:c0:12:aa:ab:
08:8c:18:20:16:88:93:24:92:69:82:61:b9:14:b7:52:a3:4f:
b7:45:8e:b6:2a:ab:b3:a8:b2:69:2f:09:fe:ff:86:ce:30:ee:
0b:04:7f:08:65:53:c2:04:71:de:af:c0:18:a6:4a:a2:fc:f3:
29:f1:ce:dd:77:f5:ea:bf:92:78:51:30:14:39:93:09:3d:37:
ba:b0:0c:22:36:2b:0e:1e:ad:89:60:60:b7:a3:1e:2e:21:0a:
9f:d9:a0:5a:09:30:32:18:2d:f3:49:ec:ed:13:5b:f3:0d:a2:
8f:5d:1e:d0:c1:58:88:af:e4:74:45:10:68:1b:8e:6a:3c:3a:
bc:4c:e6:58:15:04:0f:79:a4:54:65:e4:42:14:d0:44:0c:b7:
99:1a:2b:cf:e6:61:bd:dc:70:49:ce:eb:1d:8a:e2:d4:2b:38:
c7:7c:00:ce:56:7b:4f:04:7e:86:47:86:6a:2a:02:18:aa:5e:
f6:b5:63:8f:2c:6f:02:fc:19:11:62:6a:14:8f:d1:49:fc:7c:
32:b6:e6:11
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 13 17:33:07 2024 by rpki-client on console-ams.rpki-client.org