Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36312e302f32342d3234203d3e20323635393139.roa
File: 3138352e3133302e36312e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier: acjp1gXRobwdsHuo2CgdcP9Jp5cGhRiU0L+vzzG0/BQ=
Subject key identifier: D7:01:DF:54:57:A0:6F:BD:3B:F3:3F:20:04:6F:5E:B2:3B:2F:F2:81
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 36013FACD0674FB43CCA6BF61377EEAD17D17451
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36312e302f32342d3234203d3e20323635393139.roa
Signing time: Tue 03 Jan 2023 16:08:47 +0000
ROA not before: Tue 03 Jan 2023 16:03:47 +0000
ROA not after: Tue 02 Jan 2024 16:08:47 +0000
asID: 265919
IP address blocks: 185.130.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:01:3f:ac:d0:67:4f:b4:3c:ca:6b:f6:13:77:ee:ad:17:d1:74:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jan 3 16:03:47 2023 GMT
Not After : Jan 2 16:08:47 2024 GMT
Subject: CN=D701DF5457A06FBD3BF33F20046F5EB23B2FF281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:63:4a:27:76:f9:f2:29:c1:a3:e5:93:ec:9b:
76:b8:7a:4e:19:16:15:65:4c:a1:55:22:49:38:7a:
20:77:11:e8:30:e4:ea:69:f6:a9:b8:e9:c1:22:80:
0b:12:ba:19:92:57:a4:69:7b:4a:b0:19:c8:70:f7:
08:68:21:76:00:3c:2c:ca:67:fc:11:9e:b7:60:36:
cd:68:3a:d9:60:91:d5:77:be:74:11:ed:54:fb:d8:
48:87:32:a3:cf:73:11:88:22:a2:1a:af:ef:f5:ba:
cc:b8:8e:ad:18:26:fb:d6:dd:6c:63:58:8d:65:f4:
a3:37:50:88:23:d5:78:e5:ba:e3:88:c0:6c:89:60:
1b:f5:4e:ff:67:7f:dc:f2:ee:31:b5:b5:82:c6:dc:
d6:fa:8a:ce:37:b4:8b:51:2e:76:1d:7e:1d:88:7a:
3b:10:1c:e7:70:7d:2e:02:34:04:71:d8:ce:32:0e:
00:9e:6d:70:7e:45:d9:d7:79:94:26:ea:dc:63:24:
2c:27:7d:0b:2e:e9:87:f2:d8:f9:3b:b7:f0:bd:ae:
0e:19:41:92:cd:39:a0:47:3c:98:88:d9:91:ed:ce:
4a:af:71:cb:19:96:7e:ed:70:46:52:c7:1e:d4:ce:
43:db:c6:b3:15:f2:b4:a6:87:8b:2e:82:d0:60:49:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:01:DF:54:57:A0:6F:BD:3B:F3:3F:20:04:6F:5E:B2:3B:2F:F2:81
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36312e302f32342d3234203d3e20323635393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.61.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:af:a1:17:35:22:58:93:57:05:59:95:f1:b7:f0:cd:83:bf:
67:99:d0:5e:82:6d:61:4c:80:23:5c:59:97:dd:f7:5d:07:5e:
ac:27:d4:12:0a:ff:a1:11:7e:e4:22:22:d6:ae:08:69:d8:27:
d5:8b:0d:d8:05:ab:aa:12:22:b0:70:2e:18:ae:df:a6:85:45:
5c:25:93:ab:e8:b7:80:3e:e6:ac:26:05:ad:8b:32:6b:de:69:
e6:ee:db:77:bc:d7:c7:d7:1e:79:6c:1f:e8:02:0e:6c:88:b1:
08:50:19:0d:62:be:95:10:20:31:39:69:65:84:14:72:d2:71:
00:fd:29:d8:5f:ad:eb:9c:a5:40:be:18:95:66:92:5a:16:15:
20:19:25:65:02:17:09:ca:6a:82:0e:c0:67:e4:f2:8e:b7:70:
b2:a0:c5:82:7e:4a:31:59:1e:cf:82:b2:18:2a:6c:a0:67:63:
2f:5d:1b:d6:f2:58:1e:65:d6:10:02:f9:b0:12:32:3f:97:90:
05:2c:e2:7e:a3:21:ed:24:08:60:b5:a3:25:85:a6:bb:79:75:
d7:b2:08:2a:c7:cb:5b:8d:db:f2:ff:2d:f7:d7:1d:93:7e:9b:
12:67:e4:c4:5c:ff:93:f8:63:52:7b:8a:aa:ae:a0:43:2f:fc:
e5:a0:9d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:00 2023 by rpki-client on console-fra.rpki-client.org