Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e20323131323337.roa
File: 3138352e3133302e36302e302f32342d3234203d3e20323131323337.roa (raw, json)
Hash identifier: tl6jR6onaaTOt2C970RsaQqd7RW74fDYNPBWAL9HFbQ=
Subject key identifier: 54:FD:87:7E:19:D0:CB:E3:FD:05:5D:F6:80:CD:E8:8A:9A:D2:C5:21
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 0536C37A3C63EFB20645CF747BE32D12CC26934C
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e20323131323337.roa
Signing time: Tue 03 Jan 2023 16:09:12 +0000
ROA not before: Tue 03 Jan 2023 16:04:12 +0000
ROA not after: Tue 02 Jan 2024 16:09:12 +0000
asID: 211237
IP address blocks: 185.130.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:36:c3:7a:3c:63:ef:b2:06:45:cf:74:7b:e3:2d:12:cc:26:93:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jan 3 16:04:12 2023 GMT
Not After : Jan 2 16:09:12 2024 GMT
Subject: CN=54FD877E19D0CBE3FD055DF680CDE88A9AD2C521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:5e:70:d3:ef:ec:5a:93:8d:58:e8:48:92:
fd:a0:3e:c1:9e:44:4d:e5:89:84:e7:d9:61:3d:16:
93:9b:04:2c:b7:27:ad:13:74:b1:a4:31:de:29:eb:
cc:14:f4:1b:a5:93:a0:e2:fc:8c:2d:03:26:8f:94:
ee:e3:38:98:67:e9:09:d4:c4:bf:d6:1e:bc:43:42:
4c:c5:ce:54:70:e6:36:76:34:a9:74:3f:ac:ac:11:
6a:7b:cf:f6:0c:1e:07:11:4b:e0:04:82:b0:d1:c2:
fd:c3:b6:72:e3:8f:da:c6:eb:80:ae:4d:50:50:06:
29:75:0d:02:c0:4b:ca:da:85:15:a2:4d:50:b0:1d:
f0:55:66:e4:dd:19:7d:e6:e8:d0:1a:7d:aa:c9:c9:
2b:0b:3f:f0:de:09:33:2f:a7:5a:d2:36:44:9f:ad:
4d:4d:10:33:1e:54:85:be:1d:41:58:9e:17:3c:5a:
23:d5:8c:0d:4f:5c:a8:19:6f:5e:3c:09:fd:53:c8:
d6:b0:fb:7f:c7:f3:24:ad:6d:56:92:2e:06:40:6a:
5d:69:9f:74:ff:a3:23:e0:d8:aa:ea:80:50:4d:b0:
07:b4:ec:62:b4:ec:78:e5:18:d0:e2:a2:66:23:30:
b3:0e:32:20:98:4d:90:cf:74:45:b2:b2:88:17:b7:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FD:87:7E:19:D0:CB:E3:FD:05:5D:F6:80:CD:E8:8A:9A:D2:C5:21
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e20323131323337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.60.0/24
Signature Algorithm: sha256WithRSAEncryption
61:76:f9:af:60:0f:08:30:d5:03:f3:b2:9f:92:c0:08:4e:1f:
cd:88:88:fd:92:be:55:f5:d7:20:9d:0b:91:9d:81:7b:6f:4b:
40:f9:2b:ef:ef:7f:58:b7:f6:c4:d3:22:64:2e:a5:77:d0:9b:
69:f0:ce:58:bc:ec:48:d5:ce:dd:6d:cf:d0:18:ac:72:35:56:
c1:ae:6b:f7:a7:39:10:12:59:6a:e4:89:79:17:09:1b:fc:e5:
3c:a4:9a:eb:c1:61:d6:bf:e8:26:66:18:a0:80:b9:11:f0:b0:
57:ba:e4:30:25:5a:4e:39:9b:8d:a0:1e:b5:06:44:90:dc:f9:
78:3f:ae:b6:67:e0:a4:74:cf:79:26:3b:83:5d:ab:2f:a6:67:
23:fc:68:3d:3d:ab:33:7b:98:66:76:1d:1a:bd:e4:e8:95:57:
8d:ff:51:f0:3d:d5:a8:eb:2c:16:ea:af:9f:44:f8:aa:b7:71:
8f:e2:be:19:10:a0:8b:f6:a6:eb:ae:be:94:3e:5a:d3:93:fa:
b5:65:8d:80:93:9b:82:59:e9:b7:aa:d2:bb:64:59:56:5c:1b:
fc:a0:88:f9:de:86:19:f6:e0:fd:fa:c5:25:b5:78:7c:5f:d9:
7c:a6:97:17:00:cd:b1:82:64:08:1c:1b:48:f9:6b:7e:a7:bb:
64:5f:e4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org