Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e20383334.roa
File: 3138352e3133302e36302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: AQyc675vy+2lDrOZpZYEX4LYDIGV7WIvimqpDpTsHYs=
Subject key identifier: C6:F9:E5:5C:E0:F7:8C:45:BF:99:F0:67:05:2A:C9:91:3E:00:8C:B8
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 035E51C67C710E03AADDC6E76292D88700EEB735
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e20383334.roa
Signing time: Thu 20 Jul 2023 00:00:07 +0000
ROA not before: Wed 19 Jul 2023 23:55:07 +0000
ROA not after: Thu 18 Jul 2024 00:00:07 +0000
asID: 834
IP address blocks: 185.130.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5e:51:c6:7c:71:0e:03:aa:dd:c6:e7:62:92:d8:87:00:ee:b7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jul 19 23:55:07 2023 GMT
Not After : Jul 18 00:00:07 2024 GMT
Subject: CN=C6F9E55CE0F78C45BF99F067052AC9913E008CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:65:35:86:db:91:8d:a5:59:2f:a7:ed:a0:
34:f8:ce:12:80:bf:cd:00:d3:3d:f0:a7:d0:ce:f7:
d6:16:a3:30:7f:2e:7f:7d:f9:4a:19:8d:fb:ee:0b:
8d:0c:7b:22:1c:40:1c:50:c7:2d:ab:45:72:9e:e4:
d2:15:9f:52:7b:7d:f7:b8:e8:45:62:f1:06:af:a8:
ed:14:b1:a3:f7:86:72:3f:1e:c4:5b:d2:83:1d:3e:
cb:b5:44:48:45:db:b4:43:20:04:4f:58:bb:df:7c:
e3:3f:8e:d3:d4:86:e5:60:7f:74:1c:1c:75:80:0a:
d3:e1:1d:ec:da:c4:1e:5c:74:d4:c1:a0:45:56:d2:
93:1c:50:00:40:58:aa:99:80:59:5c:7c:47:10:38:
fc:49:5b:8f:25:92:5d:1e:fe:03:19:9c:7d:71:b3:
b6:e0:60:20:ef:df:1e:86:cb:b5:aa:cc:c0:b5:5a:
ba:31:f8:33:33:f9:27:84:40:db:6a:4b:26:a9:55:
9a:a8:bf:21:d8:77:9e:db:59:6b:a9:f4:e9:f2:fa:
87:d9:19:cb:dc:7f:dd:f2:95:10:32:c7:3e:0b:f1:
f1:69:57:d0:c4:27:6c:de:60:38:40:70:fd:cb:33:
d9:8d:33:28:fa:6e:2b:69:b7:31:c2:74:c9:db:be:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F9:E5:5C:E0:F7:8C:45:BF:99:F0:67:05:2A:C9:91:3E:00:8C:B8
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.60.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ed:35:10:e7:37:ad:1e:0c:8a:5b:2a:53:51:f3:6c:db:a4:
80:7e:cb:1e:c2:84:29:64:8c:80:a6:6a:05:7c:1f:55:51:2d:
0a:07:77:53:b9:a9:a6:87:4f:3f:f7:ad:1f:b4:79:dd:cc:a4:
bb:a3:1b:37:3b:0d:dc:36:1c:24:56:58:66:88:44:50:08:d4:
33:77:9c:5e:bf:1a:45:4b:bb:81:49:dd:47:1e:c3:d5:4d:15:
09:60:7e:77:ce:bf:39:e4:33:d5:65:9c:cc:b0:72:52:94:18:
2a:15:48:03:d4:fa:14:36:2c:05:e3:e2:54:cd:82:db:d5:e0:
57:44:ed:ee:3a:43:31:9c:00:bf:66:4b:7b:c7:74:83:c5:7e:
bc:69:27:bb:90:70:14:46:98:ef:74:62:13:99:d8:9c:c1:91:
b6:e5:6d:e0:fc:02:8d:4a:5b:d3:5b:1e:f9:b4:d9:86:2d:2b:
69:23:ac:d8:cb:6c:5e:c0:01:3f:34:82:d9:c6:7f:a8:4c:ca:
03:a6:0d:d0:51:ef:34:91:05:22:77:f0:25:2f:59:db:62:b1:
35:b8:37:22:20:56:5b:bc:7b:0e:c8:fe:3a:98:2b:a0:4e:2e:
15:53:29:89:33:84:30:7c:5f:fc:ea:a9:ca:06:1a:ad:a3:22:
48:6d:6a:df
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 23 09:32:24 2023 by rpki-client on console-ams.rpki-client.org