Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232302e302f32342d3234203d3e20383334.roa
File: 3138352e3230352e3232302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: o3mHcgFJwyk1tb7qfJVMEgD64BaWA0GYERvQdDkHZWQ=
Subject key identifier: FF:B8:DE:1C:19:B7:00:8F:6D:15:58:2C:FF:32:7A:2A:1F:46:34:85
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 19606749BBCDADB6A5942D5D72118423A1B5B6C6
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232302e302f32342d3234203d3e20383334.roa
Signing time: Tue 06 Feb 2024 10:03:08 +0000
ROA not before: Tue 06 Feb 2024 09:58:08 +0000
ROA not after: Tue 04 Feb 2025 10:03:08 +0000
asID: 834
IP address blocks: 185.205.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 14:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:60:67:49:bb:cd:ad:b6:a5:94:2d:5d:72:11:84:23:a1:b5:b6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 6 09:58:08 2024 GMT
Not After : Feb 4 10:03:08 2025 GMT
Subject: CN=FFB8DE1C19B7008F6D15582CFF327A2A1F463485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:22:ef:59:d7:21:da:4b:cb:d1:15:55:39:
55:cb:29:5f:18:83:23:57:a1:e1:09:47:8d:e8:2d:
03:fe:c8:a7:45:41:db:36:6f:76:40:92:84:43:d8:
e8:02:9c:7d:98:65:73:83:1f:bb:88:a9:22:54:86:
ac:a7:77:1f:f8:2f:16:ee:03:c3:9a:28:98:e6:69:
30:11:1a:df:9b:c8:ce:5d:95:ed:b0:71:4a:e9:4b:
d4:a6:46:f0:de:ca:09:a7:97:10:c7:5b:c1:bc:c6:
c1:ad:94:b2:16:ee:21:0f:0c:38:ee:cd:c1:ef:17:
0b:3c:e9:aa:9d:23:af:7f:62:e8:e6:65:fe:79:41:
dd:15:54:6f:94:5d:32:e0:6f:0c:89:bb:5d:ed:da:
08:bd:63:0e:21:3c:51:5e:1d:e1:4c:b6:cc:9a:cd:
07:f1:5d:2f:73:d2:8f:00:2c:d9:3a:8b:9a:1d:7f:
77:e3:5e:ce:87:33:33:b8:da:3e:15:20:47:bc:32:
32:9a:d4:ac:05:5b:77:e5:aa:9d:ee:50:1d:6f:25:
5b:85:ad:97:b7:4d:99:1c:57:c7:29:ee:2b:6d:b1:
39:73:f5:b8:4b:30:e8:bf:ae:55:3f:da:61:c7:a3:
1b:67:f4:3f:d8:78:ae:9b:f9:55:85:14:6e:10:47:
f3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B8:DE:1C:19:B7:00:8F:6D:15:58:2C:FF:32:7A:2A:1F:46:34:85
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.220.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f8:85:62:3b:15:5f:9c:3f:be:94:70:0d:df:57:35:bf:da:
f2:94:b3:b7:9c:b7:df:3a:d1:c3:3f:16:98:c2:11:f3:aa:17:
c4:07:2d:69:25:0c:7a:e6:53:07:19:da:bd:1d:3e:cf:ce:08:
7a:22:22:fa:77:c5:b1:3b:e1:a2:34:16:9a:ca:35:bb:4e:d4:
31:e9:32:d2:11:3e:5f:d6:3e:ec:fa:06:d0:08:ea:8c:79:80:
be:b6:34:0b:ad:a6:e1:b6:be:8f:ae:66:8a:2b:d8:4f:b4:e3:
09:be:29:ea:82:87:2f:7a:8f:ff:78:c0:66:18:45:64:1d:13:
71:e8:33:7f:95:8f:4b:47:f0:81:df:eb:01:d5:4e:84:54:6b:
bf:f7:ae:ae:dd:f0:16:ef:1a:43:0b:6f:76:17:bc:36:a6:ae:
cc:1a:90:24:b7:40:3f:81:4d:ee:05:17:5a:e4:b2:be:df:90:
75:19:16:27:22:b5:98:0e:09:dc:c5:9b:d2:ea:3e:24:91:5e:
53:e2:54:03:96:d1:3a:bb:c2:e7:7a:42:c7:0a:59:d1:fc:ec:
d9:61:a7:74:d5:2a:16:5d:06:31:02:37:50:de:59:6b:5e:38:
49:83:7d:66:8e:a2:a0:f1:cd:0e:18:78:39:d9:9e:c1:4b:0c:
fb:ac:d2:fb
-----BEGIN CERTIFICATE-----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Generated at Fri Feb 9 18:27:21 2024 by rpki-client on console-ams.rpki-client.org