Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e203539343236.roa
File: 3138352e342e3232312e302f32342d3234203d3e203539343236.roa (raw, json)
Hash identifier: 79ESCKqpF3J/giU3SF4zfRzJxwJ6lPFc4WBrefBFV+o=
Subject key identifier: B2:93:77:12:C5:0C:82:22:08:56:1F:D7:65:14:18:59:D4:AD:1B:A6
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 16FB2E89B316E586944E8CD0EB700C115829C1B8
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e203539343236.roa
Signing time: Thu 30 Nov 2023 06:41:00 +0000
ROA not before: Thu 30 Nov 2023 06:36:00 +0000
ROA not after: Thu 28 Nov 2024 06:41:00 +0000
asID: 59426
IP address blocks: 185.4.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:fb:2e:89:b3:16:e5:86:94:4e:8c:d0:eb:70:0c:11:58:29:c1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Nov 30 06:36:00 2023 GMT
Not After : Nov 28 06:41:00 2024 GMT
Subject: CN=B2937712C50C822208561FD765141859D4AD1BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d2:f2:da:1f:96:5e:09:5b:03:d4:5b:f0:fe:
a9:e9:4d:b1:2f:f3:01:05:bc:24:eb:7c:af:c7:25:
66:11:e3:55:9e:3b:14:db:5a:91:1e:d9:98:35:aa:
de:e3:74:53:a4:7d:af:98:11:b9:8f:47:0d:63:dc:
e9:17:93:22:09:38:74:9e:ab:ff:1d:93:0b:96:cf:
f6:d1:ff:54:f8:8f:c5:83:ad:86:f0:3d:6b:ab:0d:
da:10:11:57:04:f1:ee:00:60:30:4a:fc:3d:35:2e:
c9:94:e2:b6:95:c7:ba:ef:a9:d8:b4:0d:77:08:82:
cb:75:b9:5e:79:c8:1d:46:7c:e3:ba:ec:f1:2b:6a:
15:9b:f2:32:ef:98:69:1b:6e:4f:6e:87:41:71:c0:
f0:a6:78:9d:40:27:61:95:8f:bd:ad:df:96:88:c2:
ea:f6:80:3f:0d:f6:86:ca:51:a4:2e:56:c7:af:f7:
11:ed:bd:11:ef:8c:4c:56:96:cd:cc:8b:0f:01:44:
dc:70:e2:91:00:20:e3:1b:1e:10:b5:1c:de:bf:36:
00:2c:4a:ef:a6:5d:30:27:63:3e:d0:64:9f:a6:a8:
87:cb:71:b4:bc:5c:ec:67:4a:4e:10:f5:f0:2f:45:
c8:d0:bb:9b:00:2b:20:8c:63:98:a4:fa:9a:ea:fd:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:93:77:12:C5:0C:82:22:08:56:1F:D7:65:14:18:59:D4:AD:1B:A6
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e203539343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.221.0/24
Signature Algorithm: sha256WithRSAEncryption
41:0a:b7:d0:d3:cb:f9:7b:ea:30:4c:f3:d4:50:a7:de:eb:6c:
81:a4:81:9d:af:f7:7d:6e:06:83:5f:52:52:66:3b:ee:9c:13:
d2:ca:6b:85:88:ae:ef:9c:36:56:be:d7:5d:45:81:03:e0:79:
fe:ed:42:4e:ae:6a:b1:cf:1c:56:57:52:23:25:5a:fd:d1:dc:
5d:29:29:ba:f7:d1:4c:a8:69:5d:f3:72:bc:fd:8a:a9:20:63:
5f:dc:a8:17:a1:a4:3f:c9:1f:62:06:9e:fc:85:0f:ef:e3:23:
29:85:91:db:f0:fa:f5:59:74:84:de:0e:ff:67:5d:8d:4d:a4:
9b:12:6e:28:b6:3f:29:ef:9a:b1:39:2c:08:17:54:af:f8:be:
78:c8:55:8e:8c:dd:5f:0e:b1:e9:01:9f:66:c2:bd:32:72:36:
85:61:6e:2c:d8:61:cf:76:18:96:41:c4:5c:3d:c8:a6:c0:f3:
bc:02:3f:41:b1:06:4e:d9:81:31:7d:8e:16:02:3a:8d:f2:4b:
bf:b9:c6:91:31:dd:4f:47:34:dd:c0:83:dd:e9:60:ae:8d:a1:
67:6b:20:41:34:e3:74:61:3e:6b:da:e4:89:27:79:42:96:4f:
4e:25:0d:cb:1c:bb:c0:aa:6b:94:88:7f:81:d6:a1:c5:3a:a9:
86:95:86:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 31 01:45:49 2023 by rpki-client on console-ams.rpki-client.org