Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3233203d3e20323132323338.roa
File: 3138352e322e3136302e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier: igr92WDkiymQ4cUExsX4lmkkfsN0celYgj/m04biFJQ=
Subject key identifier: 4F:B9:88:65:B3:15:84:29:24:80:16:00:AB:76:39:D9:07:F5:C9:C6
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 661DF13990961AD6FCD285E4D37920325F0F1DE0
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3233203d3e20323132323338.roa
Signing time: Mon 16 Sep 2024 13:00:52 +0000
ROA not before: Mon 16 Sep 2024 12:55:52 +0000
ROA not after: Mon 15 Sep 2025 13:00:52 +0000
asID: 212238
IP address blocks: 185.2.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 16 Oct 2024 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:1d:f1:39:90:96:1a:d6:fc:d2:85:e4:d3:79:20:32:5f:0f:1d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Sep 16 12:55:52 2024 GMT
Not After : Sep 15 13:00:52 2025 GMT
Subject: CN=4FB98865B315842924801600AB7639D907F5C9C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:70:c1:48:a1:bb:eb:19:07:c9:8c:9f:2f:
ef:2e:d9:c0:07:dc:30:36:ac:74:6a:9f:c3:0a:6b:
c1:94:01:21:87:5c:88:4a:c3:15:cc:ca:b7:07:03:
7f:8b:27:be:0c:92:dd:25:37:a1:1d:e3:f1:d7:0b:
34:7a:11:72:88:bb:dd:df:27:3b:a1:75:ee:b7:ff:
b5:a1:c8:95:b8:3d:2f:35:07:4b:6f:2f:a7:3b:8e:
5e:f4:e2:26:5a:4e:3d:41:14:97:42:64:cc:04:c1:
b3:46:05:dc:f9:7d:b9:cc:22:80:54:04:34:28:1c:
22:8c:fb:d6:87:91:62:3a:64:d4:8f:07:30:6b:cb:
47:43:b7:2f:c4:09:bc:80:0e:cc:2c:ff:9f:d7:bf:
78:22:22:9f:fb:35:f9:c2:6a:e8:d6:a1:2d:5b:36:
e5:a3:90:9a:fc:ce:81:c0:44:8c:ff:5e:7b:42:89:
4c:71:23:ce:4a:91:94:ba:6b:4c:b3:6b:47:44:3f:
28:19:2d:41:4c:73:2c:c9:88:03:2e:94:1a:3f:38:
28:ff:8d:63:be:fb:35:c1:6a:2f:9d:62:f0:bd:80:
c7:de:0a:a8:76:f6:5f:27:ef:4a:b2:f3:80:ba:af:
db:b3:47:0e:49:9c:29:88:a5:b2:9e:df:34:e6:c7:
fb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B9:88:65:B3:15:84:29:24:80:16:00:AB:76:39:D9:07:F5:C9:C6
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3233203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.160.0/23
Signature Algorithm: sha256WithRSAEncryption
31:2e:32:de:61:26:65:09:f6:ef:64:cc:60:fc:de:5b:be:c5:
e2:3a:9a:ec:6f:ad:2c:69:7b:57:2a:d4:a1:28:9c:09:c0:82:
f3:d9:c3:35:a4:7b:c8:5a:50:ec:2e:76:19:91:f5:94:b0:b0:
c3:bd:70:19:9d:47:57:3c:16:f7:7d:62:85:80:5e:c7:76:63:
39:1d:06:f6:8b:b5:aa:c5:53:c3:64:30:96:d8:c8:97:2b:bf:
73:fb:12:8a:ca:a9:01:71:75:a8:22:81:c4:e4:72:ad:97:0f:
90:d5:5f:f4:e5:8a:a7:2d:52:2a:52:c9:5d:bd:3f:a6:c5:ba:
bc:24:09:5f:a1:56:4d:00:3d:f9:27:6b:9a:d6:af:d0:9e:49:
cc:94:35:7a:a1:7a:27:e0:27:73:e5:0e:44:e7:14:08:c0:c1:
10:45:09:ad:2c:83:3c:2f:1d:00:10:81:17:e3:d6:5d:82:f5:
f0:44:08:32:ca:9f:b4:67:a0:cf:4e:88:19:88:b9:6d:12:e7:
de:26:39:c4:db:52:e4:d7:88:f8:cc:00:8e:49:3e:e9:a4:05:
80:29:bc:ee:39:00:6c:96:f2:f1:1c:ac:b6:f2:38:4e:ac:5f:
88:38:3e:fe:fa:ea:f6:ed:09:0c:f4:8e:ec:3f:de:d1:c5:05:
1c:b5:f2:2a
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 16 02:27:45 2024 by rpki-client on console-fra.rpki-client.org