Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137352e302f32342d3234203d3e203439383035.roa
File: 3138352e3137322e3137352e302f32342d3234203d3e203439383035.roa (raw, json)
Hash identifier: 0rXKhxUej75Cfuyf0c5Ke2Y9HU43ZFD6kRwTeJeB3No=
Subject key identifier: 6C:5B:5C:4A:BB:1A:72:B6:00:C6:1E:DC:05:AF:3C:49:3F:81:6F:BA
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 1D7E7E0A144EA5C343253345B5E6B5515E3864F2
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137352e302f32342d3234203d3e203439383035.roa
Signing time: Fri 22 Sep 2023 17:30:48 +0000
ROA not before: Fri 22 Sep 2023 17:25:48 +0000
ROA not after: Fri 20 Sep 2024 17:30:48 +0000
asID: 49805
IP address blocks: 185.172.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Dec 2023 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:7e:7e:0a:14:4e:a5:c3:43:25:33:45:b5:e6:b5:51:5e:38:64:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Sep 22 17:25:48 2023 GMT
Not After : Sep 20 17:30:48 2024 GMT
Subject: CN=6C5B5C4ABB1A72B600C61EDC05AF3C493F816FBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:7b:d6:6d:0e:cb:af:e3:91:93:71:d1:dc:
11:82:6e:37:29:37:52:b4:83:30:e9:89:77:55:59:
da:7e:7d:6c:16:4c:9e:42:01:91:5f:70:23:93:7e:
5b:6b:17:46:9a:75:34:39:5b:52:e0:45:e6:76:28:
6b:88:13:98:d6:c6:c9:ec:ab:6d:06:5f:15:c9:fc:
ed:2f:43:fa:d9:4e:d9:0d:78:01:d1:ec:69:21:9a:
8c:7a:b1:a4:51:af:90:55:ec:cb:52:e5:ee:de:2b:
99:a3:78:2f:7e:bb:9d:cd:87:12:f5:10:5d:78:0e:
a2:b0:22:38:3d:a0:0c:97:49:27:89:78:98:b3:ae:
c5:64:06:5f:34:81:58:ac:59:65:69:e1:f1:c8:ee:
57:bd:73:9e:b8:33:2f:42:bd:eb:3e:bf:94:a1:d4:
01:24:4a:15:27:e7:24:3b:2a:f5:15:02:d6:f4:c6:
7e:03:42:48:0d:d7:b2:0b:a7:ac:b9:c8:c5:9e:bb:
0f:f5:b1:a7:71:4d:a2:30:4b:a4:76:f9:d2:7e:52:
ef:65:cf:32:24:fb:7f:90:93:d1:c9:15:52:3d:87:
cb:26:63:fd:87:65:b3:bc:c2:52:78:e8:39:ba:94:
8f:25:9a:b5:58:ff:bf:6d:a2:f0:0a:d2:41:68:41:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5B:5C:4A:BB:1A:72:B6:00:C6:1E:DC:05:AF:3C:49:3F:81:6F:BA
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137352e302f32342d3234203d3e203439383035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.175.0/24
Signature Algorithm: sha256WithRSAEncryption
30:3d:cd:44:87:c6:86:cd:bf:a1:cd:5f:ee:ea:af:ee:6d:45:
05:1b:ba:fc:46:f8:a9:de:bb:65:af:41:72:ae:4d:bb:d0:60:
ba:8c:af:7e:04:1d:84:06:ae:ad:35:64:2c:1c:9a:21:1e:1a:
8c:3d:31:1c:a3:41:4a:db:e8:9a:a6:3c:f1:b1:a3:b5:65:04:
4d:17:77:c7:6b:d3:5f:c9:b2:66:33:2e:d8:c2:1e:3a:ac:48:
3e:ea:75:a6:1f:f1:93:55:6f:6f:f5:68:64:7a:8c:dd:06:77:
5e:1c:fb:e1:1c:7d:17:a6:e0:8b:86:57:b4:90:da:8b:64:fb:
e9:ed:fd:05:78:8b:8d:52:ea:f8:7f:c0:c9:d9:28:60:c9:81:
6d:6d:1f:84:02:11:1f:f4:ec:25:08:5d:c4:fa:18:36:16:3c:
df:11:b4:f0:23:bc:1e:5d:4a:96:ac:d6:2e:d7:55:ff:2d:fa:
6e:ea:ba:f3:ea:58:d7:60:01:42:97:36:aa:fd:6b:92:ea:02:
73:7c:96:16:d4:b2:c9:11:2f:57:d0:df:b8:e9:02:90:74:eb:
c4:6c:b0:68:31:a7:76:b4:13:c4:77:54:88:fe:44:16:4e:bb:
29:1a:95:58:4f:e4:4f:89:51:30:08:3e:8f:be:f5:e8:fa:0a:
9c:95:fa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:17 2024 by rpki-client on console-fra.rpki-client.org