Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137362e302f32342d3234203d3e20383334.roa
File: 352e3138312e3137362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 9Tzdad68yn/1W/ciMla4cY2X1LIayIAOv4PiviEXXIE=
Subject key identifier: 38:80:37:0E:5E:1A:35:F3:21:2E:5D:C5:74:7C:75:46:30:17:86:98
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 43845818B98C445D26FB0B25CF778A8470ED8CC4
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137362e302f32342d3234203d3e20383334.roa
Signing time: Mon 01 Jul 2024 00:03:03 +0000
ROA not before: Sun 30 Jun 2024 23:58:03 +0000
ROA not after: Mon 30 Jun 2025 00:03:03 +0000
asID: 834
IP address blocks: 5.181.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 05:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:84:58:18:b9:8c:44:5d:26:fb:0b:25:cf:77:8a:84:70:ed:8c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jun 30 23:58:03 2024 GMT
Not After : Jun 30 00:03:03 2025 GMT
Subject: CN=3880370E5E1A35F3212E5DC5747C754630178698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:93:52:6a:c1:79:c3:b3:9d:65:d7:a9:bf:
9a:b2:b3:1b:3d:60:a7:ab:c9:b1:5f:dc:9c:05:8f:
89:73:17:98:cb:0f:05:91:ee:3a:a9:bb:c0:ee:5e:
4b:ee:3f:f2:25:d3:00:37:83:9f:fc:b9:a3:fb:a9:
cb:51:51:ce:d3:d5:f7:a5:fe:a0:91:2e:23:09:b7:
4e:71:1f:be:c1:71:fe:c9:8f:1d:69:f3:d5:7b:25:
f1:4a:e1:ac:d5:ea:9b:78:3b:bd:99:2f:91:37:ce:
b4:42:75:dd:26:be:fe:3e:44:24:66:b3:77:c3:66:
63:1c:bb:1c:d0:41:ef:a6:4c:49:07:52:3d:6a:57:
7c:62:cc:ce:6b:ef:f7:50:1c:cc:f7:0e:89:e7:e4:
ae:17:8f:72:d9:9a:28:a8:87:fe:b5:2a:f3:d4:4f:
b9:58:15:51:94:c8:f5:a2:0b:36:a5:67:c8:69:dd:
6f:05:9d:b2:70:0e:c3:86:6d:4d:37:d4:fd:84:b7:
bb:fb:35:3d:25:d8:a4:05:03:12:11:c1:98:54:e1:
1f:af:f7:b6:2b:19:e9:2e:21:b5:fc:91:54:28:57:
97:03:df:77:5f:e8:da:4d:cf:3c:20:72:53:68:8c:
32:b7:bf:a1:6a:d1:ed:d1:ef:d3:40:8f:af:b0:02:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:80:37:0E:5E:1A:35:F3:21:2E:5D:C5:74:7C:75:46:30:17:86:98
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.176.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:4b:c8:0a:a3:55:8f:0a:3f:a0:0e:2e:88:84:9e:c1:a5:29:
df:20:32:5d:24:46:cd:41:7a:2b:26:87:42:f3:f7:25:49:a8:
78:ec:bb:93:97:8c:2d:65:88:12:56:28:eb:a5:3a:47:f6:ef:
73:f7:90:20:43:e2:6b:3f:92:48:be:2d:28:93:82:67:21:4d:
e8:d9:13:e3:08:a2:ee:e3:44:b5:63:ca:68:19:d1:86:50:8a:
a0:8b:29:71:35:ac:ea:a8:da:b2:8d:d7:d1:ee:e2:67:37:55:
df:cb:47:b9:9e:8f:1e:5b:2b:d1:3e:34:c0:9e:2b:9e:bd:02:
a9:5e:7c:61:28:f8:af:61:b5:cd:e3:bf:42:d4:a3:13:5e:8e:
db:86:61:b0:5a:4b:1d:f1:b7:34:cf:91:13:9d:77:20:f0:c6:
40:43:4a:88:6a:95:30:32:17:18:ce:24:ff:ff:af:45:1e:ef:
70:ab:31:18:d7:03:f9:c6:dc:2e:94:11:fd:52:7c:4f:32:29:
8e:b0:f5:47:5e:8e:4e:b2:dd:f7:b4:27:54:5a:df:26:53:f1:
6a:7b:66:eb:19:73:5c:04:1d:c5:3b:1d:f2:a9:97:db:29:dd:
2e:95:01:b2:e6:d6:45:0a:55:62:48:ed:60:83:35:d3:d6:a1:
33:f7:60:f6
-----BEGIN CERTIFICATE-----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Generated at Mon Jul 1 06:22:45 2024 by rpki-client on console-fra.rpki-client.org