Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e20383334.roa
File: 3138352e322e3136322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: oMYaGBGLnwy68QkZ0FWOWL3bcqOg7cHuNY7HnoISC9E=
Subject key identifier: 04:EA:81:54:39:47:CC:79:5A:86:FC:AB:29:16:D4:FC:59:01:7B:64
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 16046FF16954256011A365631B3CEB2DC7C64441
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e20383334.roa
Signing time: Sat 30 Nov 2024 00:01:14 +0000
ROA not before: Fri 29 Nov 2024 23:56:14 +0000
ROA not after: Sat 29 Nov 2025 00:01:14 +0000
asID: 834
IP address blocks: 185.2.162.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:04:6f:f1:69:54:25:60:11:a3:65:63:1b:3c:eb:2d:c7:c6:44:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Nov 29 23:56:14 2024 GMT
Not After : Nov 29 00:01:14 2025 GMT
Subject: CN=04EA81543947CC795A86FCAB2916D4FC59017B64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:c3:1b:e3:f3:02:7b:0a:63:41:16:77:60:
41:19:35:00:48:40:6c:15:4a:6e:bc:aa:43:56:22:
7c:e4:2e:63:d1:1e:8a:54:e4:ac:cd:4a:47:bc:61:
ac:e7:68:d4:d4:1a:38:06:a6:d7:8d:03:fb:09:ba:
bc:67:12:1a:93:4b:5e:f4:6d:ea:d5:4e:ea:70:9a:
43:92:e5:76:c6:5d:cd:13:88:d5:24:52:1b:f3:23:
99:38:05:ba:c7:25:08:33:ef:d0:88:1c:2e:fa:96:
ed:de:74:20:f3:75:f0:c0:d1:c7:ea:6b:ac:95:ec:
a1:3a:e1:b4:bf:3b:81:c6:37:d6:35:cf:e5:15:55:
ca:2b:83:12:49:d3:ec:08:a9:45:1c:e1:3c:63:95:
4b:b7:c1:08:9c:d0:69:1a:26:27:7b:e0:4f:fa:1e:
44:8b:e0:20:d7:0e:73:0e:fa:55:c2:fe:d3:16:4d:
9b:df:23:33:c1:33:71:c9:28:bf:ad:c1:10:b3:f8:
42:6b:e7:b6:39:f4:35:5a:4c:89:8a:9f:3a:17:e5:
a3:e7:70:43:19:05:c1:d9:fc:23:4e:11:c4:f4:e7:
62:79:53:45:6d:19:e3:29:f2:51:f7:87:81:f4:a9:
ce:78:d1:e3:9a:81:e7:16:4e:e0:f3:17:d3:02:54:
00:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EA:81:54:39:47:CC:79:5A:86:FC:AB:29:16:D4:FC:59:01:7B:64
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.162.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:a2:c5:c6:a3:9b:19:27:7f:f2:45:3f:12:a4:66:85:03:5c:
8f:fe:ee:00:36:30:a1:84:0a:f2:5c:e7:68:97:91:a5:c8:85:
ff:38:a1:f5:12:c4:4b:ed:1d:53:49:5c:d1:f6:30:59:d9:d1:
52:69:4b:b1:9c:b9:23:43:68:45:59:77:84:4b:14:a2:4b:42:
0f:4f:a8:cd:5d:62:07:32:c8:d4:4f:de:56:df:da:a4:7d:55:
65:fb:ed:69:57:f2:dd:a1:4a:23:0d:4d:a1:bb:53:c1:26:c2:
a2:f5:c1:40:3e:18:ab:1e:cd:71:a1:8b:1d:fc:e3:da:02:c2:
78:24:d2:fd:f9:ce:52:d1:5f:88:95:9c:db:99:64:80:42:f5:
dd:d3:af:bb:0c:ca:65:c0:a2:ae:8a:93:41:a8:fe:26:bb:2c:
d7:b1:9c:e7:b2:d0:ca:e6:ae:7c:1e:e7:ba:96:b9:9f:98:da:
0a:12:ea:ec:d0:73:2a:e4:e4:b5:87:be:26:52:98:43:03:3e:
31:9b:61:a5:f0:17:fb:93:77:44:66:59:83:48:e3:2c:41:1a:
02:87:e0:ee:44:d8:0b:e4:f0:cf:5f:4d:41:b1:a0:83:7a:6b:
85:2f:a8:16:d0:5d:61:90:af:8d:2f:c6:fa:55:a5:b9:44:04:
c6:9f:06:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:52 2025 by rpki-client