Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e20323132303237.roa
File: 3138352e342e3232312e302f32342d3234203d3e20323132303237.roa (raw, json)
Hash identifier: 2TFKeYve9e8yH0/Ke0Rc8a8Dyp9TvO5zB3UyJ2W8ys4=
Subject key identifier: 50:7E:9F:51:18:C1:CE:B1:ED:51:3E:65:16:3E:B0:1F:DD:F3:AD:C9
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 797EEC20AEBE0F440B67452AD8DA063CF268FA41
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e20323132303237.roa
Signing time: Fri 02 Feb 2024 08:57:12 +0000
ROA not before: Fri 02 Feb 2024 08:52:12 +0000
ROA not after: Fri 31 Jan 2025 08:57:12 +0000
asID: 212027
IP address blocks: 185.4.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Mar 2024 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:7e:ec:20:ae:be:0f:44:0b:67:45:2a:d8:da:06:3c:f2:68:fa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 2 08:52:12 2024 GMT
Not After : Jan 31 08:57:12 2025 GMT
Subject: CN=507E9F5118C1CEB1ED513E65163EB01FDDF3ADC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1f:fb:3c:e0:f9:be:95:04:4c:5c:b4:4e:a2:
1f:f2:07:5d:d1:3b:05:47:21:69:18:c9:b2:6c:46:
ba:81:30:7c:46:39:b0:3d:d6:17:c4:df:bf:89:e2:
0e:b5:18:4d:34:b0:2d:59:9a:63:36:b3:7a:30:99:
28:e2:c8:64:fa:aa:6f:98:67:eb:97:0d:22:c8:a4:
98:bb:3d:5a:51:97:69:fe:8c:5d:b7:80:b1:03:63:
f6:f6:4c:ba:45:8d:aa:43:cd:c4:c1:6b:c5:ef:96:
e4:05:a8:bb:7b:96:50:59:d1:c0:09:13:65:a7:4f:
b4:ab:c7:ea:56:b9:1e:7e:16:e2:3f:75:1a:2d:d8:
46:d9:b3:2d:89:ae:7f:07:6b:0f:69:44:9f:07:30:
de:4b:2e:ed:51:b9:ae:a2:9c:92:df:8c:8b:c7:5d:
e2:42:78:0b:79:b4:c4:1c:c3:ff:c1:69:16:d1:6e:
68:f2:83:35:c3:98:ea:98:05:24:79:27:ca:ad:58:
82:5f:4b:bf:09:f1:7f:4a:1c:49:ad:24:4f:98:91:
9d:a0:70:24:3f:24:44:62:e1:a3:ff:1f:ea:d3:09:
9d:62:15:b9:47:c5:61:13:89:03:f7:ef:d4:93:05:
44:45:20:33:05:06:56:90:5e:49:30:be:79:6a:87:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7E:9F:51:18:C1:CE:B1:ED:51:3E:65:16:3E:B0:1F:DD:F3:AD:C9
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e20323132303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.221.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b5:c0:d7:31:10:04:cd:f4:65:76:53:e9:d2:7e:98:92:89:
0f:e8:4a:ee:52:86:85:06:02:e6:93:fe:0b:64:c5:96:6a:d9:
4c:1d:14:23:08:6a:39:82:c5:78:ac:2a:6d:66:79:f6:02:b0:
c6:6f:69:e3:3e:e7:f3:76:8e:34:7a:31:cf:b6:ef:ec:ea:e8:
04:ea:50:d2:60:ff:fd:e4:12:9f:e0:87:c3:9f:ef:f0:78:4f:
16:d9:2a:52:f4:86:ed:d3:66:3c:5e:a0:ca:e4:ad:52:56:10:
30:c2:f4:4f:e4:53:47:89:f2:2d:59:dc:4a:f9:36:cc:60:ad:
45:7c:cf:7f:19:1b:d7:10:7d:1d:ee:b5:34:b8:c3:3e:dc:63:
a8:0d:c4:7e:30:95:a4:b0:b9:50:22:b4:90:95:3f:a3:ce:ba:
a4:8c:a8:a0:e5:56:d7:c3:41:d2:ce:b4:d8:72:f0:ca:5c:41:
dc:1e:ff:77:41:63:70:9d:aa:04:07:48:9e:9c:16:ed:22:1f:
05:db:91:95:8a:5a:5f:66:73:25:e8:a2:a8:64:b2:56:35:fb:
cf:6f:11:f1:34:df:fe:3f:2d:1c:5d:f4:b7:5b:81:b7:14:8b:
c1:9b:41:36:be:1f:82:11:d4:4a:87:1b:a8:02:f4:b3:88:6e:
98:aa:5e:bf
-----BEGIN CERTIFICATE-----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Generated at Sat Mar 2 00:47:13 2024 by rpki-client on console-fra.rpki-client.org