Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e20323135323837.roa
File: 3138352e342e3232312e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: RGyZUYg3R5ce6jB7YP56PSK1g2oKvSMtLiBtHI0pMjQ=
Subject key identifier: 91:E2:94:2E:DE:A7:B1:4F:CB:DC:4A:91:50:BF:A4:AE:99:D8:08:B6
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 1E065E2B489209F20B2EE0605452BEFDD3A2521A
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e20323135323837.roa
Signing time: Thu 04 Apr 2024 06:08:10 +0000
ROA not before: Thu 04 Apr 2024 06:03:10 +0000
ROA not after: Thu 03 Apr 2025 06:08:10 +0000
asID: 215287
IP address blocks: 185.4.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 12:20:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:06:5e:2b:48:92:09:f2:0b:2e:e0:60:54:52:be:fd:d3:a2:52:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Apr 4 06:03:10 2024 GMT
Not After : Apr 3 06:08:10 2025 GMT
Subject: CN=91E2942EDEA7B14FCBDC4A9150BFA4AE99D808B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:27:87:7f:ea:3d:36:e7:d7:a4:de:44:a0:
2d:13:84:f2:55:de:e3:14:ed:36:9b:77:ea:74:4b:
27:88:a5:3b:9c:3c:99:35:cf:cb:64:fe:de:02:65:
6a:7b:1e:79:87:dd:cd:5a:9e:6b:e1:93:a5:08:25:
41:e6:f3:5e:57:4c:c8:9e:0f:c0:d0:dd:7e:8d:4e:
26:88:d1:1d:7f:fa:42:b6:5e:83:a9:a3:0f:9f:b1:
38:f1:76:42:12:17:d7:72:7c:4d:88:8e:d9:9b:34:
9a:8f:1a:6b:ab:d8:54:2c:b3:8f:b1:18:0b:f1:85:
aa:51:9f:82:53:9c:7a:c9:e1:ff:df:d0:e7:d2:93:
bd:50:b1:5d:09:fc:a3:07:b1:34:24:46:c5:aa:1f:
1c:15:f3:88:85:43:f3:20:8c:35:8b:d7:15:f0:2b:
06:99:cc:92:03:c2:64:02:2d:af:18:5e:97:40:44:
0b:7c:ec:18:de:89:9b:b5:32:6d:fe:c2:21:eb:59:
c4:42:4b:16:b9:dc:eb:d5:03:40:a6:80:fc:b7:1e:
26:05:7c:c0:fe:a6:ae:90:14:48:cb:a2:0a:33:72:
08:ee:ea:29:52:43:1c:49:35:85:b4:58:d5:77:3c:
e6:fb:34:fd:d8:22:de:98:f3:99:ef:b0:43:1c:c9:
8c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E2:94:2E:DE:A7:B1:4F:CB:DC:4A:91:50:BF:A4:AE:99:D8:08:B6
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.221.0/24
Signature Algorithm: sha256WithRSAEncryption
46:3f:ea:94:ce:37:54:99:15:04:f7:10:f8:0a:c3:d1:28:be:
fc:4f:40:69:ab:d4:28:97:41:da:b2:99:28:12:f6:7a:75:62:
d7:dc:c2:e8:22:ce:d1:65:c1:5b:9d:79:60:86:c0:34:bf:36:
d2:bc:e9:78:52:8d:c6:9a:c1:a2:c6:b9:e9:2a:ee:1f:6d:a0:
a2:b7:37:33:73:d8:60:63:bb:c5:bc:3f:41:5a:8e:ac:df:9d:
39:96:22:ea:7b:ce:b6:f8:cd:bb:e2:8e:90:3a:9a:44:53:19:
95:7f:21:1e:17:3e:d9:2e:d5:cd:42:83:7a:66:ee:8d:93:00:
88:aa:19:77:1d:c9:a6:72:db:5a:be:1f:15:5f:1a:38:59:e0:
ae:43:5b:54:31:01:86:a0:66:cf:48:fa:af:85:43:23:5a:44:
ce:2b:29:40:51:02:50:49:83:62:41:01:e9:3a:73:35:c9:45:
93:46:9d:7c:ba:b9:b9:98:ed:6d:12:89:44:0f:64:a3:68:21:
2a:3e:6f:dc:b7:c6:aa:c7:cd:86:40:59:c0:11:29:c1:17:a7:
8b:68:c0:7d:12:5c:f8:13:df:4c:27:ce:e9:1d:70:a7:73:a3:
99:56:61:d0:d4:66:5e:ae:c4:24:7e:b4:00:29:88:74:58:09:
0c:b3:89:91
-----BEGIN CERTIFICATE-----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Generated at Sat Apr 6 12:56:31 2024 by rpki-client on console-fra.rpki-client.org