Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e203231383539.roa
File: 3138352e322e3136302e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier: xXM1ruInUl3FSL63Lx+9dEU6RvKKvg/scQnuPcBzsSM=
Subject key identifier: 51:C1:37:40:72:98:03:5B:6F:D1:BA:03:9C:3A:14:43:47:0B:ED:0B
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 6ED34EF2B2000F4078E5665F12B86DA8925DE3DA
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e203231383539.roa
Signing time: Mon 08 Jan 2024 06:30:59 +0000
ROA not before: Mon 08 Jan 2024 06:25:59 +0000
ROA not after: Mon 06 Jan 2025 06:30:59 +0000
asID: 21859
IP address blocks: 185.2.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d3:4e:f2:b2:00:0f:40:78:e5:66:5f:12:b8:6d:a8:92:5d:e3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Jan 8 06:25:59 2024 GMT
Not After : Jan 6 06:30:59 2025 GMT
Subject: CN=51C137407298035B6FD1BA039C3A1443470BED0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:e3:c5:21:45:01:f4:0a:a5:e2:93:91:fc:
d1:43:0f:63:96:4f:05:e7:74:4e:a2:9b:50:86:db:
aa:f4:97:98:a1:f0:ee:ba:71:7f:64:8a:11:44:06:
b8:e0:b7:1c:41:37:3f:85:44:2d:c8:74:02:51:ab:
9b:1a:df:2c:d9:e6:65:c7:ad:6a:29:eb:31:d1:ce:
62:df:18:96:82:97:67:52:ea:14:8f:ff:f7:26:9a:
74:33:77:32:2c:32:b7:4a:4e:5d:ec:08:d5:2b:2d:
75:ee:c9:5b:d1:ee:41:f4:3d:b5:21:88:3e:2f:11:
46:14:e7:ed:9c:2a:85:b7:87:e6:90:d3:3b:fe:8b:
a8:95:06:93:ff:f9:82:0d:d0:4d:6e:59:66:3e:b1:
d6:14:43:0b:73:54:71:0a:51:e3:00:5b:60:d3:b5:
6c:95:88:9f:27:d5:30:a6:f3:e8:4d:95:5b:72:0c:
f7:9f:18:7f:aa:e5:bb:90:43:7b:2a:e0:06:c1:40:
e3:6c:df:a2:60:7d:99:e1:3e:1b:66:20:30:55:ec:
02:c1:df:1b:4f:06:37:ee:34:b5:de:b6:a5:4b:0c:
6b:d2:55:61:27:de:63:a3:cb:98:e1:94:ab:37:39:
5c:72:67:8a:75:64:80:8b:24:82:1e:b3:03:bf:86:
77:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C1:37:40:72:98:03:5B:6F:D1:BA:03:9C:3A:14:43:47:0B:ED:0B
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.160.0/23
Signature Algorithm: sha256WithRSAEncryption
45:f2:56:66:09:ad:7f:d5:c9:17:35:45:65:11:12:0c:2a:cb:
02:bf:04:11:49:b3:d7:42:81:ed:11:92:c5:55:db:8a:87:bb:
d0:ff:02:dc:e8:1a:6c:2f:dc:72:f9:ec:95:db:c2:f9:7c:b6:
30:8f:29:7a:9a:9e:0f:1a:0d:17:50:f6:7e:09:66:a5:3d:84:
bb:09:6e:ee:49:3a:95:1b:07:ae:e2:e8:33:45:04:1e:0c:0a:
e5:b3:55:fe:31:78:2e:e8:c8:0c:89:2e:ec:6b:72:df:49:e5:
6a:33:33:fe:a7:7b:f8:4d:bd:4c:d3:88:f3:65:79:9c:71:0f:
bd:44:45:bb:85:b7:c3:3f:8f:b3:26:7e:18:06:7f:32:e1:d1:
60:74:2b:fe:7d:2c:3b:13:b0:8a:6d:9d:71:2f:3c:e3:b1:9b:
85:f9:17:f9:7e:c8:88:6c:6c:e1:a3:fb:e6:c4:61:f4:1a:06:
49:0a:1c:a5:2d:3d:6a:9e:ca:01:5f:79:96:dc:05:fe:0b:7c:
c8:76:a9:74:f0:77:7a:ac:b9:a8:c5:56:20:d5:7c:9a:5e:18:
41:99:1f:ee:ea:01:90:08:20:8f:99:c0:51:b0:e2:c2:7a:05:
38:b3:5d:58:8e:ae:94:a3:27:63:78:e4:d9:e0:dc:b3:a6:a5:
e6:b3:59:8a
-----BEGIN CERTIFICATE-----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Generated at Thu Feb 8 01:18:12 2024 by rpki-client on console-fra.rpki-client.org