Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e20383334.roa
File: 38352e3230392e31392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Z2x3cJmQEoIypaXT57qHZpGjobYz7suHCre9UcAIuJ4=
Subject key identifier: 2D:E7:4B:36:38:1F:20:16:F1:BC:E9:1B:70:B9:A0:AD:A3:BB:32:B2
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 6D8DF5CE01F76C1B1607B450777D5F73ED0A7F49
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e20383334.roa
Signing time: Sat 10 Feb 2024 00:01:25 +0000
ROA not before: Fri 09 Feb 2024 23:56:25 +0000
ROA not after: Sat 08 Feb 2025 00:01:25 +0000
asID: 834
IP address blocks: 85.209.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 20:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:8d:f5:ce:01:f7:6c:1b:16:07:b4:50:77:7d:5f:73:ed:0a:7f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Feb 9 23:56:25 2024 GMT
Not After : Feb 8 00:01:25 2025 GMT
Subject: CN=2DE74B36381F2016F1BCE91B70B9A0ADA3BB32B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:6a:ad:35:61:ae:eb:a4:ad:58:f6:91:5e:
cd:79:19:20:88:4c:fc:25:d9:67:11:88:d7:d0:47:
50:8e:99:69:66:03:c3:bd:64:16:e7:a1:48:19:51:
cb:3f:4e:e8:cf:25:c1:c7:9b:55:24:74:19:3f:a5:
ba:5d:1c:4b:11:d6:5a:ef:61:f3:6d:8f:e9:ed:b7:
17:d4:14:78:ab:d7:8c:f6:90:c2:3c:51:cb:8b:b5:
68:94:c5:08:b1:71:08:15:fc:da:ba:c1:0c:34:14:
fa:4b:e2:fa:75:e0:ca:40:78:9d:84:e0:9e:c6:77:
55:90:a2:a4:fd:c3:9b:f2:11:9a:ee:8d:f4:91:f0:
7e:22:44:c4:ed:06:8a:c1:43:29:9e:28:ee:95:e1:
ed:d4:11:59:78:0b:6c:00:72:e3:e3:50:f6:16:d2:
4f:81:c6:b6:f3:8a:ec:75:be:74:7b:32:de:de:04:
8d:80:6d:15:eb:3f:4a:c2:4b:1f:98:90:49:0d:d2:
79:bc:f7:f3:20:f6:c3:b9:65:df:73:5f:ee:2e:d1:
fc:e0:18:67:9f:b6:92:dc:2c:ba:aa:74:9f:c9:51:
0b:68:23:dc:c9:37:a1:3f:2c:fc:70:26:5e:33:99:
26:9c:ee:f6:0f:ef:6c:c6:55:24:c3:0a:21:12:a8:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E7:4B:36:38:1F:20:16:F1:BC:E9:1B:70:B9:A0:AD:A3:BB:32:B2
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.19.0/24
Signature Algorithm: sha256WithRSAEncryption
06:14:59:df:fe:95:c1:0c:79:64:d6:82:c7:d5:4f:62:ce:b0:
f8:1a:2e:78:b9:5b:a6:dc:3d:b8:8e:a4:64:4d:8e:50:d9:99:
22:a6:85:9d:8d:2b:79:9d:7d:64:05:60:02:5e:95:ad:54:2d:
42:6f:02:86:82:81:81:f0:d5:20:fc:cf:3c:c7:d5:c9:5b:db:
60:e4:d3:37:b2:8f:be:2d:d1:08:33:f5:a8:4a:d5:c8:04:61:
40:0b:dc:ce:96:16:ba:36:2b:19:c2:f1:ec:f7:2b:c6:bf:f0:
1b:43:9c:55:4a:52:01:4e:08:3b:de:7f:ce:15:6c:d6:6b:62:
d3:47:20:d1:1e:b1:42:8f:81:d4:1e:33:f3:e1:fe:65:5f:5f:
8a:91:06:da:22:e2:b7:18:17:4c:8e:5a:d5:78:b5:f5:7b:95:
aa:bc:49:33:49:1b:41:b8:42:ad:42:e7:b1:d6:6f:79:1c:a0:
9a:0d:2e:e2:55:a9:af:be:a4:43:50:46:ba:49:75:ef:3f:65:
0e:73:a8:26:48:8e:d1:0c:e3:20:da:71:1d:96:8b:c4:7e:dc:
4b:77:e9:a2:6a:78:61:80:dc:4b:fa:1c:07:ee:db:5c:e1:f4:
06:24:96:03:ea:19:c1:85:30:c1:11:81:07:3e:02:5e:dd:03:
78:a4:8d:b7
-----BEGIN CERTIFICATE-----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Generated at Tue Feb 13 00:10:41 2024 by rpki-client on console-ams.rpki-client.org