Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3131312e3138382e302f32342d3234203d3e203333333837.roa
File: 3138352e3131312e3138382e302f32342d3234203d3e203333333837.roa (raw, json)
Hash identifier: tT89SJg1tKQnBGlfg5dIBKA1wCPmjlIuaWKWCzraqAs=
Subject key identifier: 14:C2:CE:6E:F8:08:7A:F5:38:77:70:E9:CA:09:6D:0B:87:74:D4:36
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 4D122A02FB151681D027E7F1E69B9F0346233B59
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3131312e3138382e302f32342d3234203d3e203333333837.roa
Signing time: Thu 12 Jan 2023 10:42:26 +0000
ROA not before: Thu 12 Jan 2023 10:37:26 +0000
ROA not after: Thu 11 Jan 2024 10:42:26 +0000
asID: 33387
IP address blocks: 185.111.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:12:2a:02:fb:15:16:81:d0:27:e7:f1:e6:9b:9f:03:46:23:3b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jan 12 10:37:26 2023 GMT
Not After : Jan 11 10:42:26 2024 GMT
Subject: CN=14C2CE6EF8087AF5387770E9CA096D0B8774D436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:af:64:df:60:f7:6f:1f:ab:d8:fe:b0:77:
2d:31:d0:21:68:f4:10:f9:c5:55:1b:99:16:56:ac:
ab:a6:4a:9e:3a:08:91:33:a0:a2:77:15:63:1a:8e:
fc:ab:bd:19:a6:f4:6a:63:cf:b7:15:99:8d:8d:62:
29:5d:33:b6:4b:44:64:ff:40:b6:66:e7:2e:e9:b4:
e9:17:c9:50:38:bd:86:77:c5:0e:e2:9c:4f:6e:27:
40:04:f0:4c:8e:d5:f0:7f:98:b8:37:a9:45:4d:6b:
03:98:27:32:2a:f4:e7:db:7a:c8:64:ba:3f:29:18:
13:51:30:6d:f4:54:07:cb:32:b7:e9:9c:ca:5f:79:
d1:49:6f:ee:bb:fc:b1:46:93:33:7a:e8:7d:a4:a8:
95:90:b0:14:9a:e4:3b:39:41:ab:01:13:96:3e:bb:
ce:40:23:4f:da:54:36:3e:d6:ad:4f:06:cd:d6:58:
6d:b2:b6:d3:ae:38:a6:5c:41:09:5d:26:a4:a5:e7:
6c:3d:12:64:8c:c4:54:3f:e9:20:e6:d7:5c:18:2c:
70:f9:90:4c:3d:c9:51:51:16:3d:27:bb:38:b9:52:
07:73:5d:a5:30:b9:2d:f0:9e:35:c6:77:7c:6f:54:
14:ba:d1:71:19:6d:98:a0:2b:04:6a:4c:a3:ec:d0:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C2:CE:6E:F8:08:7A:F5:38:77:70:E9:CA:09:6D:0B:87:74:D4:36
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3131312e3138382e302f32342d3234203d3e203333333837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.188.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:17:26:4b:8c:dd:22:e4:6c:9c:08:47:a9:67:1e:56:bc:3e:
64:59:39:5f:fd:30:b5:db:8c:34:fb:59:3e:0f:8a:fa:26:a1:
00:ae:e9:32:87:1f:cb:74:c7:d8:74:8e:f1:c8:e1:60:97:e7:
f2:5d:62:db:ab:b9:7b:88:d0:44:6e:7d:7f:64:27:00:06:2b:
e9:05:a5:1b:6c:6e:8c:89:a3:38:ec:0b:00:94:6e:7c:4b:72:
9c:de:0f:4f:a5:84:0f:fe:2e:26:3b:8e:c4:4f:9d:01:9b:2b:
61:8e:32:45:fd:65:05:0b:e9:02:24:2a:73:91:4c:2e:7c:1d:
d8:b3:38:67:66:d6:1d:9f:e1:0d:6c:25:fc:29:72:b0:b4:55:
48:59:22:5d:fc:97:4d:df:f0:72:72:01:07:f7:68:f5:72:23:
0b:f8:2d:36:45:d7:87:01:e4:55:1c:19:63:0d:2b:c0:89:ee:
3c:1b:af:6b:b8:92:eb:02:38:34:67:6b:f9:1e:b4:3f:97:fd:
32:c1:7b:6e:81:5a:8e:40:1d:a6:3e:87:ba:e8:5e:06:7e:00:
d6:65:a8:ad:03:30:20:a9:0a:0a:6b:21:36:7f:75:84:d0:04:
cf:cb:2d:76:da:ec:92:46:5f:19:81:82:9e:15:e0:bc:4d:53:
c6:2e:c7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org