Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e20313530353532.roa
File: 3138352e322e3136302e302f32332d3234203d3e20313530353532.roa (raw, json)
Hash identifier: mAPdbPYsUAw+oB0J5/CProBu5ksQeekP4NUYkqbXa9M=
Subject key identifier: 9F:A6:AF:F0:9A:0F:86:30:EB:CC:55:95:60:E3:6D:BE:74:CF:92:D3
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 011EC6306078E0B77EE6D12019D26830DA0DBCEB
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e20313530353532.roa
Signing time: Thu 29 Feb 2024 23:58:09 +0000
ROA not before: Thu 29 Feb 2024 23:53:09 +0000
ROA not after: Thu 27 Feb 2025 23:58:09 +0000
asID: 150552
IP address blocks: 185.2.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:1e:c6:30:60:78:e0:b7:7e:e6:d1:20:19:d2:68:30:da:0d:bc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Feb 29 23:53:09 2024 GMT
Not After : Feb 27 23:58:09 2025 GMT
Subject: CN=9FA6AFF09A0F8630EBCC559560E36DBE74CF92D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:34:08:e3:34:c4:cf:4d:6f:df:bc:3c:6b:
e6:1c:e2:6b:ea:3f:05:e7:e4:70:6e:e6:50:26:b5:
02:54:2a:95:72:51:a6:03:c9:cc:0b:ca:c4:e0:fe:
60:45:cb:47:e3:f2:4c:80:1d:58:fb:e4:ce:cf:67:
18:5e:77:fb:35:e9:fd:22:06:0a:fe:3e:33:71:df:
d8:e3:7c:5c:c9:ea:a7:af:b2:cb:00:0d:e6:60:33:
6f:8b:25:82:be:25:9a:a9:8f:a8:f7:87:8d:d6:79:
02:af:0b:0c:da:7a:54:74:c0:c7:ce:0c:66:a0:68:
d0:d6:62:95:f1:55:63:2a:7a:65:6f:16:93:01:80:
32:f9:ef:77:19:39:76:e3:6c:29:39:f3:f6:ab:db:
ff:50:74:81:98:e7:56:6d:9b:85:bf:76:11:dd:f8:
d1:be:c7:22:e5:4a:21:f3:ce:da:0f:64:cd:97:25:
d0:a9:95:cd:98:f6:96:77:af:91:fa:3a:41:25:d7:
a1:df:11:62:f7:ca:d0:5c:44:58:8b:df:66:db:34:
06:cf:9c:89:66:5a:16:c9:25:1f:c9:9f:a9:f1:0e:
a5:35:55:98:b8:cc:f9:5b:e9:a6:5c:a3:5b:db:60:
6f:cd:7c:0c:3d:0d:c7:1b:df:c8:6e:a3:b7:e0:f7:
bf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A6:AF:F0:9A:0F:86:30:EB:CC:55:95:60:E3:6D:BE:74:CF:92:D3
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e20313530353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.160.0/23
Signature Algorithm: sha256WithRSAEncryption
75:4b:84:f3:81:ea:b3:da:c4:9a:37:ec:d2:d1:18:10:0c:9a:
8d:e3:3b:e2:2c:bf:5b:80:44:8c:92:55:fc:e9:2c:da:f8:52:
7b:50:66:09:22:90:83:4b:84:96:85:93:c9:4c:b1:6f:b3:a7:
24:f8:fc:de:02:c8:b1:fc:95:3f:a5:a0:76:c5:a3:ce:c3:15:
bc:d8:cc:ce:e1:2c:85:18:eb:55:bd:32:19:a3:f2:de:e4:03:
76:a5:b3:4c:9e:f4:a4:c5:56:30:b9:d7:69:da:64:31:a7:c2:
33:fd:4b:27:a2:ed:95:b8:21:75:41:f6:cc:55:e2:17:bc:ee:
87:df:29:d6:d5:9c:5d:96:9e:e0:5d:c8:7f:3e:65:04:14:73:
9f:ed:9f:99:57:91:03:aa:35:47:12:42:ac:6d:cc:4b:93:07:
76:c1:3b:83:2f:3f:ff:f1:13:07:73:e5:38:e7:74:81:01:b5:
6c:40:11:44:11:e9:be:87:5e:e0:33:37:cd:7e:d6:90:af:b3:
84:5d:16:5f:cc:58:bd:f0:81:91:d7:86:e0:ff:e2:25:ca:f1:
09:63:ba:d3:ad:85:c1:6f:02:01:4b:75:05:63:44:17:b9:98:
38:86:97:4d:aa:5b:0a:5e:77:99:c7:5a:ed:04:9e:38:53:23:
5b:e2:6e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 01:04:08 2024 by rpki-client on console-fra.rpki-client.org