Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232322e302f32332d3234203d3e2034373636.roa
File: 3138352e3230352e3232322e302f32332d3234203d3e2034373636.roa (raw, json)
Hash identifier: 6uzUwMCjP8zjE3GHuIiMuxYnjkqsR2HzpJ8Gnr2s+X4=
Subject key identifier: 23:A3:E3:4D:1A:0E:E9:99:F7:1D:14:8A:34:5E:B5:F7:AF:B3:66:4D
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 2C4A0D3F354756B3738A129A4873F5576906A290
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232322e302f32332d3234203d3e2034373636.roa
Signing time: Wed 14 Aug 2024 13:28:50 +0000
ROA not before: Wed 14 Aug 2024 13:23:50 +0000
ROA not after: Wed 13 Aug 2025 13:28:50 +0000
asID: 4766
IP address blocks: 185.205.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:4a:0d:3f:35:47:56:b3:73:8a:12:9a:48:73:f5:57:69:06:a2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 14 13:23:50 2024 GMT
Not After : Aug 13 13:28:50 2025 GMT
Subject: CN=23A3E34D1A0EE999F71D148A345EB5F7AFB3664D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:00:af:a0:c7:44:af:c8:92:aa:b1:39:f5:
e3:45:a9:ae:e8:21:bc:8a:0c:2d:b4:e5:96:38:87:
1d:3c:b7:a7:27:51:b9:c6:ea:64:8a:f6:64:56:1c:
9e:d9:a3:8a:d6:09:4b:b1:af:5b:5f:9c:75:40:89:
d4:c2:45:8e:ae:4f:76:23:57:a3:76:fe:51:bf:bb:
5d:9d:5e:a5:1a:8f:a6:19:10:c2:c5:70:5d:4e:d0:
d7:69:3a:97:ff:cb:67:96:39:f3:ca:53:74:70:56:
9c:1a:73:6d:9e:1f:7c:9a:c5:f1:81:2b:4d:c4:a0:
07:00:a5:36:db:91:63:1b:73:b2:85:86:42:e4:d0:
17:8e:95:87:0f:35:a5:44:29:01:d3:7b:fd:27:1a:
28:f0:98:e6:fe:ec:8c:a6:62:46:30:02:9d:83:70:
95:59:44:0c:89:da:35:8f:c2:0d:89:65:6e:19:37:
5a:77:4a:5c:a3:96:7a:e6:53:97:75:f7:fa:73:ed:
38:62:04:f6:47:f5:d1:13:42:27:b6:e6:9a:e5:ac:
c6:fe:52:2a:39:62:96:57:51:42:a4:47:ac:6f:68:
79:20:e1:d8:6d:55:45:c6:2c:4d:c5:9e:28:c3:12:
ea:cb:fb:e8:5a:db:a1:c4:b5:e2:b7:8c:d7:df:81:
ea:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A3:E3:4D:1A:0E:E9:99:F7:1D:14:8A:34:5E:B5:F7:AF:B3:66:4D
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232322e302f32332d3234203d3e2034373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.222.0/23
Signature Algorithm: sha256WithRSAEncryption
53:78:a2:18:58:e1:b9:2f:be:a0:ad:a7:4c:bf:e2:2d:da:9b:
bb:60:b9:1e:3b:93:a8:25:78:93:43:86:f9:e3:d7:b6:39:00:
56:0f:43:27:84:7f:37:05:71:96:b0:64:5c:23:35:6c:7e:2e:
58:47:5a:0b:f4:46:e3:71:da:f2:40:97:74:58:c8:fd:8d:ee:
27:c4:78:ef:f9:3c:18:22:40:5b:54:3d:af:77:51:92:2f:da:
1d:90:58:84:5c:6a:f3:58:2f:25:65:da:c0:c4:c4:ae:74:65:
56:35:84:c8:95:72:02:5d:b6:94:f5:74:67:64:fc:d6:dc:98:
a7:8c:b5:39:d6:a2:08:77:c1:24:13:08:d7:ff:c3:57:9d:ef:
d7:e0:f1:fc:d0:88:de:af:f3:b2:b0:11:c9:62:23:8d:3f:21:
41:e7:f1:77:a7:1d:e0:91:b0:68:d1:21:d3:63:60:e2:68:80:
c4:7e:76:53:e1:ba:ed:6b:13:35:0a:d6:99:1d:d0:aa:94:dd:
10:91:9f:53:2a:b6:e9:25:48:e5:84:63:c0:ce:a0:7a:94:e4:
ca:62:4a:64:51:d3:80:16:52:35:f1:f4:fd:11:05:9c:36:d5:
96:d7:e9:8d:2f:01:5b:f7:8d:8e:20:49:9d:84:a1:d2:57:96:
00:df:cd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:27 2025 by rpki-client