Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232322e302f32332d3234203d3e20383334.roa
File: 3138352e3230352e3232322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: qHPeV6NCq7Y0epirrrRtop0fIcX3YRDIU/ztI/ZLcS8=
Subject key identifier: 3A:69:86:F4:6F:BD:E9:57:E7:1E:0B:EB:7B:84:E6:E4:C9:59:D9:6C
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 5F400315FCDCE7683A098C110D41AF8AEE710F1C
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232322e302f32332d3234203d3e20383334.roa
Signing time: Thu 31 Oct 2024 00:02:06 +0000
ROA not before: Wed 30 Oct 2024 23:57:06 +0000
ROA not after: Thu 30 Oct 2025 00:02:06 +0000
asID: 834
IP address blocks: 185.205.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 19:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:40:03:15:fc:dc:e7:68:3a:09:8c:11:0d:41:af:8a:ee:71:0f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Oct 30 23:57:06 2024 GMT
Not After : Oct 30 00:02:06 2025 GMT
Subject: CN=3A6986F46FBDE957E71E0BEB7B84E6E4C959D96C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:94:27:88:b0:e1:ac:c5:8a:33:3f:19:6a:
c2:aa:11:3d:3d:e6:ed:9b:48:81:91:af:94:b6:e2:
7e:21:a6:0d:a6:43:5b:c0:24:5b:ca:1b:5f:e9:59:
3f:ca:14:d5:c2:26:3c:df:a8:f1:ee:f0:fa:78:39:
18:f0:6b:cd:69:e5:dc:3b:a7:9e:b1:0f:7e:61:04:
da:9a:a6:64:2f:6c:49:af:c5:55:b3:f8:db:7b:f7:
7b:f4:16:1a:7b:59:c5:35:ee:78:5c:6a:22:f1:e8:
d5:b7:6d:5c:40:6a:31:66:ce:0f:c6:c8:18:d4:d9:
41:2e:be:e4:5d:69:c6:29:d1:6e:89:a9:a6:fa:4a:
50:48:c5:3b:5a:1a:38:af:9c:10:55:fd:90:68:b8:
4d:b5:00:d7:8b:71:c3:5d:09:c7:1a:e0:cd:3e:15:
00:ff:c6:be:5d:b1:32:f6:3e:fa:1a:bf:26:ba:57:
75:08:9b:5e:15:a6:76:41:87:fb:a3:0b:d4:43:ff:
d8:bd:ad:34:38:eb:77:7a:a9:9d:9b:3a:3b:a3:fb:
8b:82:57:96:90:fb:e1:95:44:32:53:c8:92:83:a4:
c6:ca:60:91:83:40:e1:cf:62:75:6d:f0:b6:f5:df:
2d:8e:49:78:72:15:cf:71:20:5c:ad:db:05:b3:c2:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:69:86:F4:6F:BD:E9:57:E7:1E:0B:EB:7B:84:E6:E4:C9:59:D9:6C
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.222.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:18:4e:20:74:85:0b:88:a4:c8:ff:7d:cb:67:80:65:0a:4c:
eb:c2:a7:04:28:c8:a4:66:a1:57:77:f4:0c:de:3f:c3:1d:03:
9b:a2:82:4f:e7:3f:6e:fb:66:43:56:3f:54:96:42:ae:72:04:
12:e9:04:79:fc:a4:19:f3:cf:63:d0:63:e9:d0:a5:3b:22:31:
5b:88:65:80:0a:7c:f6:1d:86:24:98:e7:42:07:e6:f3:49:65:
d4:b7:8f:09:ef:72:29:40:a9:76:4b:81:ca:de:d0:f9:0d:b6:
f0:74:f5:98:dc:9d:dd:16:0f:e1:08:72:00:f1:cd:23:96:a7:
d8:fe:1b:a3:21:40:9b:3c:1b:59:c6:b5:35:0c:04:65:09:e2:
6c:23:52:ce:46:57:a5:56:fb:ce:0b:fb:4e:c7:08:cf:f5:37:
08:60:12:8e:3c:1a:7e:fa:4e:ca:f4:cc:2a:00:ef:de:5d:13:
89:0a:15:1a:3a:4e:2e:2c:ff:88:c7:99:fd:22:83:a3:c6:15:
39:b9:bd:78:bd:8c:12:6d:82:1f:9a:43:07:57:3e:b1:20:f0:
86:9f:62:d8:9b:8f:d0:45:fe:59:09:4f:d8:c5:4b:ea:f8:46:
49:8a:55:9f:54:e1:d5:b2:c7:e7:3b:5e:33:62:40:a2:52:cc:
a3:0c:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:11 2025 by rpki-client