Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e20323131393336.roa
File: 3138352e3133302e36302e302f32342d3234203d3e20323131393336.roa (raw, json)
Hash identifier: heYW6xfgdkoLTw1HxwQ2A+q9JvWWW4C3O8MMMXU2yzY=
Subject key identifier: 37:3F:5C:8E:AF:9B:5D:97:E3:19:A1:29:9B:97:AE:F4:02:F0:2F:4E
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 2D1EF8FB5EBF15E6DB254AF91ED5D03783A9389C
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e20323131393336.roa
Signing time: Wed 28 Jun 2023 00:59:33 +0000
ROA not before: Wed 28 Jun 2023 00:54:33 +0000
ROA not after: Wed 26 Jun 2024 00:59:33 +0000
asID: 211936
IP address blocks: 185.130.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:1e:f8:fb:5e:bf:15:e6:db:25:4a:f9:1e:d5:d0:37:83:a9:38:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jun 28 00:54:33 2023 GMT
Not After : Jun 26 00:59:33 2024 GMT
Subject: CN=373F5C8EAF9B5D97E319A1299B97AEF402F02F4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:c1:8c:19:1d:29:8c:48:10:ea:a4:d2:05:
fd:43:1e:7f:c7:c3:06:4f:62:f5:70:28:26:d4:cc:
4f:7f:fd:12:82:e8:0b:e8:1d:49:dd:05:d4:2d:6e:
5c:7e:4a:de:d8:6e:60:dd:51:40:d0:60:70:7a:dc:
03:92:4d:ac:90:cb:50:c6:3f:23:57:c1:b5:8d:59:
b6:75:68:55:a8:dd:e8:2b:f3:69:75:3b:a7:52:31:
4a:ac:c9:f0:03:d6:f7:7c:e3:f0:42:e7:c0:81:bc:
75:83:ba:31:1b:7f:df:75:32:b3:7c:97:5b:c7:85:
22:df:99:25:b9:3d:f0:21:cd:bb:cc:33:a1:19:ef:
62:fc:83:c0:8f:37:dd:af:55:cf:34:51:85:44:7d:
0c:98:4f:94:06:15:89:07:cd:e2:fa:3b:1f:8e:c2:
9b:77:06:f0:1c:0d:b2:02:60:3a:c3:03:f5:8e:68:
87:ad:69:c9:bb:e7:f5:94:31:cc:25:ec:87:33:1e:
4d:66:fe:72:0f:c6:0b:23:bd:98:5c:ce:5a:7b:b9:
ec:5a:72:01:ec:a5:47:35:cd:4d:46:aa:f8:df:03:
14:0e:ec:36:fe:8e:cd:dd:74:50:d3:fe:f8:f1:28:
70:33:9a:f6:96:3e:7b:72:0e:f3:06:6f:bf:10:76:
03:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3F:5C:8E:AF:9B:5D:97:E3:19:A1:29:9B:97:AE:F4:02:F0:2F:4E
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e20323131393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.60.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e5:7d:13:18:6e:7b:2a:bc:18:ce:e2:42:1b:c3:fa:f1:ea:
7b:d7:81:59:6e:2c:96:d4:1b:39:71:39:23:87:39:24:9b:c7:
3c:28:86:ae:b9:5e:36:7a:31:8e:b6:14:5b:51:82:b3:f2:77:
53:af:4d:ac:de:42:47:7a:ca:72:17:ed:35:f0:03:f7:32:8f:
a3:bb:bd:4e:c6:51:d9:5b:14:83:e8:b1:bb:86:5c:2e:2b:45:
ad:25:f9:fd:82:08:49:6e:9e:10:ac:7f:1e:7f:6b:b3:5d:51:
71:31:1f:a4:8b:c9:30:c2:39:c7:71:f4:11:8e:72:34:58:6d:
b7:5a:cf:20:ab:e5:bc:ee:57:d1:47:d1:81:29:df:40:be:04:
ed:b6:3b:87:a8:c0:28:ec:f7:6c:36:a9:03:fb:5f:78:46:20:
42:6b:75:34:08:7f:5e:b5:70:fd:b8:5e:75:1f:27:d1:03:f8:
2a:4c:6f:42:c0:15:d4:15:9e:9c:d0:6e:ce:b3:f2:dc:30:aa:
ba:89:19:fe:c8:2a:d9:0d:d5:eb:44:03:95:89:c3:ed:6a:f1:
3e:94:06:19:f0:e3:4f:99:20:67:a4:1c:0d:cb:98:f5:57:09:
b6:d9:03:e9:ab:9d:85:0d:43:3f:af:4e:08:68:87:75:52:1c:
a6:0c:8a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:44:44 2023 by rpki-client on console-fra.rpki-client.org