Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36312e302f32342d3234203d3e20383334.roa
File: 3138352e3133302e36312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: k0keychXqiYQcfgC0r4kHEJW7uqi7eOeob2vgD83vZk=
Subject key identifier: F4:6B:D5:D0:1E:7A:FA:48:C9:D5:10:50:4D:46:2D:B2:01:7C:41:37
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 1F9F6F061471FB53963C89C4EDDD11C611647F4E
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36312e302f32342d3234203d3e20383334.roa
Signing time: Sat 01 Jul 2023 00:00:05 +0000
ROA not before: Fri 30 Jun 2023 23:55:05 +0000
ROA not after: Sat 29 Jun 2024 00:00:05 +0000
asID: 834
IP address blocks: 185.130.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Aug 2023 16:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:9f:6f:06:14:71:fb:53:96:3c:89:c4:ed:dd:11:c6:11:64:7f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jun 30 23:55:05 2023 GMT
Not After : Jun 29 00:00:05 2024 GMT
Subject: CN=F46BD5D01E7AFA48C9D510504D462DB2017C4137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:b3:0f:0a:32:cb:34:8d:94:08:71:05:6b:
ab:ad:d8:f2:5a:9a:41:ed:f9:74:59:7a:3b:4e:82:
16:a5:35:d5:e5:59:03:20:02:6a:ac:c6:93:89:2d:
94:7c:29:86:9f:23:e1:2d:9f:6a:41:cd:bf:f9:f3:
1c:da:7d:a3:fa:fa:cc:dd:d4:0f:f7:f9:06:b1:4a:
ec:e6:2d:88:c2:b5:d3:80:c4:a9:f6:da:7f:71:d9:
2a:a4:9f:69:df:58:10:94:77:1f:42:3a:4e:90:0a:
53:d3:b2:21:22:36:7a:aa:b6:0a:7e:53:47:0b:fd:
56:98:7e:a6:fb:a6:4b:0c:d2:2b:2e:b4:61:29:4c:
79:d2:51:47:d0:a6:d8:99:1b:e0:fd:da:c9:b3:ee:
0d:a0:a8:fb:af:d2:57:8e:1b:0b:c9:08:ad:77:f4:
92:80:fe:2a:41:4e:a0:80:3f:03:2b:fc:43:50:4a:
a8:e4:9e:e7:3d:14:84:38:5a:e9:b6:29:ab:5f:ea:
a2:ae:ec:e9:2d:a7:3f:82:24:b4:5e:26:5e:0e:a5:
e4:60:2e:3d:06:2e:88:5b:74:61:ee:f8:39:ee:cd:
8e:0a:83:bc:40:11:1f:c6:89:57:65:e3:19:cb:f1:
8a:21:d5:b0:ba:cb:73:a2:47:f3:26:37:3f:2e:24:
02:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6B:D5:D0:1E:7A:FA:48:C9:D5:10:50:4D:46:2D:B2:01:7C:41:37
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:89:9a:5e:5d:17:b6:a0:af:2f:8a:7c:b8:3f:2f:9d:a1:5b:
f6:47:6c:7c:09:7e:ed:55:30:da:2d:d0:8e:e3:46:65:37:0b:
a6:30:00:7c:c7:0b:43:ca:7d:f0:57:bb:1d:9a:fe:60:77:4a:
f8:6c:ba:2e:a4:9f:09:88:8f:62:df:99:72:43:63:71:a3:13:
b4:31:fd:26:4b:db:3b:9b:4d:61:7c:76:36:f2:cd:1e:1f:78:
98:c5:57:18:81:66:0a:9e:b0:cd:2d:af:72:f6:4a:1e:4a:3b:
82:ac:e4:57:11:17:76:d0:d1:19:0e:55:f8:f1:2d:01:1d:4a:
3d:81:18:8f:41:b3:b4:9a:c9:6f:42:03:be:ea:78:86:ca:73:
99:84:5b:2c:bd:81:e4:68:ac:7d:54:4a:56:47:64:26:e4:0f:
7b:28:51:af:0a:1c:9b:c1:1d:e6:dd:f1:f7:c1:77:9f:9e:2e:
75:90:4f:bf:6b:a7:ee:02:de:d0:a2:ed:94:a1:b6:54:03:d9:
70:4a:11:96:e5:00:77:19:78:53:c0:7c:69:92:eb:cd:93:ea:
c2:7a:f4:74:ea:d3:4f:e5:7b:8c:35:f8:1d:90:1d:c8:d7:94:
b0:bc:28:1b:52:69:65:8b:9d:15:7f:62:1a:91:43:f3:ba:42:
cc:3e:b7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org