Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e20383334.roa
File: 3138352e322e3136322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: ndjpfarqTkCf8j6sYWT+UaEkumf4D5GOLyXlftazLlE=
Subject key identifier: 2C:29:CF:3D:1B:FB:3E:22:74:0D:75:97:F1:E5:06:92:D0:54:B0:1C
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 4C0B28AED2F303055663D35CAAD738744E7BAFFA
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e20383334.roa
Signing time: Sun 28 Jan 2024 10:01:59 +0000
ROA not before: Sun 28 Jan 2024 09:56:59 +0000
ROA not after: Sun 26 Jan 2025 10:01:59 +0000
asID: 834
IP address blocks: 185.2.162.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 12:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:0b:28:ae:d2:f3:03:05:56:63:d3:5c:aa:d7:38:74:4e:7b:af:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Jan 28 09:56:59 2024 GMT
Not After : Jan 26 10:01:59 2025 GMT
Subject: CN=2C29CF3D1BFB3E22740D7597F1E50692D054B01C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:95:e6:4e:30:11:8c:c3:6f:a3:9e:60:33:
a0:fa:48:06:40:0d:23:f1:47:54:fa:b7:e1:89:95:
d9:de:aa:c4:a5:77:7f:f3:24:a2:3c:f4:f4:ff:da:
7f:98:6d:73:3d:cf:5f:cf:c7:0d:2b:0d:e0:44:90:
a1:e7:7b:9f:a1:1e:18:6d:15:0f:7a:90:2b:73:0c:
cb:54:ca:29:06:b0:64:b4:fc:81:98:fc:7d:41:e0:
95:99:de:de:51:53:c7:52:f4:0f:78:7f:8f:4a:ef:
f3:b9:4b:27:a9:b9:94:b9:83:b4:50:02:98:59:40:
cd:d6:39:98:0b:72:b4:70:9f:c2:b5:37:c9:ff:fd:
3c:97:f9:79:13:8e:ac:a7:4b:46:89:99:86:13:e3:
08:dc:e6:d3:dd:14:52:38:89:5e:94:8d:8a:8f:2a:
3f:25:6a:a7:47:03:b9:bb:ba:8a:e5:03:67:73:35:
14:c2:9b:18:46:f0:57:d5:01:da:b3:14:f8:b0:4d:
a4:52:b7:04:85:cc:96:91:43:9a:6b:05:81:a3:53:
c1:55:55:a6:ac:92:59:fd:b2:03:1f:25:80:b1:43:
25:70:53:3f:dd:e0:f5:b9:60:dd:fe:77:cb:9e:e1:
c2:d2:f5:47:23:bc:67:f7:45:e8:6b:52:56:e9:73:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:29:CF:3D:1B:FB:3E:22:74:0D:75:97:F1:E5:06:92:D0:54:B0:1C
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.162.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:27:51:5c:ce:04:62:95:dd:bd:a7:66:3b:29:28:99:83:78:
f1:87:53:5b:b7:49:37:47:24:71:a7:75:b7:27:09:b8:b2:30:
bd:7f:82:e3:bc:51:41:b2:15:1f:66:31:60:04:f0:ca:5b:ca:
a3:e0:c7:12:e3:76:96:8d:bc:3b:78:37:c3:d8:bc:16:f4:1e:
d3:cc:ac:1c:55:83:5d:8e:9a:03:4d:db:76:e5:2b:0d:4e:f6:
f1:e3:b3:7d:f2:fa:3d:5e:1a:66:90:96:38:cb:8d:01:56:92:
e2:b9:f1:65:5b:97:08:b0:50:ba:b1:d7:f2:20:45:f2:f2:18:
61:0b:c8:66:de:e9:8b:9d:ce:a2:70:c7:64:45:0d:23:5a:38:
37:6a:41:ad:bd:31:cb:09:e3:08:fb:9a:53:f7:db:3f:89:e9:
de:45:8b:06:12:f3:94:a8:15:20:76:7f:2e:86:d4:b7:55:ea:
f6:24:19:2c:52:3d:c0:71:76:18:6d:39:99:7b:0a:61:b0:16:
7c:5a:9e:5f:78:70:ac:29:1c:13:b9:c6:6c:e7:05:78:a8:22:
cf:81:48:c5:ed:98:eb:c3:a3:0f:b1:d8:f3:40:15:1b:d1:43:
cd:2f:2d:47:02:de:67:b9:b0:22:79:35:12:e8:6b:99:bd:23:
92:06:b6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 3 17:21:47 2024 by rpki-client on console-ams.rpki-client.org