Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36332e302f32342d3234203d3e2037303239.roa
File: 3138352e3133302e36332e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: IJlhpm/likb24C20ivusJr7ydyLvHargCLVHEkMjs0Y=
Subject key identifier: A6:F1:9C:08:0B:35:C1:E5:6F:64:11:B6:A4:CB:E3:CB:DD:9A:60:3E
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 68BFCDE70B5007EFF306D201D1C6B51D276D0C98
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36332e302f32342d3234203d3e2037303239.roa
Signing time: Fri 23 Jun 2023 15:06:09 +0000
ROA not before: Fri 23 Jun 2023 15:01:09 +0000
ROA not after: Fri 21 Jun 2024 15:06:09 +0000
asID: 7029
IP address blocks: 185.130.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:bf:cd:e7:0b:50:07:ef:f3:06:d2:01:d1:c6:b5:1d:27:6d:0c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jun 23 15:01:09 2023 GMT
Not After : Jun 21 15:06:09 2024 GMT
Subject: CN=A6F19C080B35C1E56F6411B6A4CBE3CBDD9A603E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:96:0c:ec:a8:af:06:9b:15:5e:db:0a:bf:
e3:62:ba:c4:fd:27:7e:b5:34:4f:5d:76:48:04:9c:
a0:25:01:9d:58:04:e0:a6:40:7f:b5:89:24:d9:af:
05:0a:b9:e4:d5:ca:a3:49:ec:2a:1e:dd:a3:86:dd:
bb:9a:a7:d6:84:ab:4e:25:b1:44:6f:37:a0:2d:0d:
6c:f3:f2:fa:e9:79:fb:6c:68:ce:1f:e3:9a:b6:82:
ae:f9:24:fe:24:e3:bf:61:d1:0e:54:da:7a:d8:d2:
c2:c7:2d:58:d6:ec:8b:dc:15:eb:c7:db:13:30:e7:
70:bb:f4:75:02:ca:7e:31:1c:f1:0a:6a:86:3d:7d:
d9:79:cb:7c:ce:ea:fc:07:2b:00:78:1d:cc:db:e7:
37:89:95:1d:4b:dd:23:97:20:f2:3e:77:e8:d8:72:
9f:fc:89:e0:f9:87:2f:5a:c4:66:ee:f6:cd:78:78:
93:8e:c4:40:77:0d:ff:2f:6f:c1:12:1e:48:25:68:
b1:57:ab:d0:50:ac:e7:f7:53:21:60:c7:be:99:9d:
22:38:7c:fd:83:aa:66:20:5c:85:b6:57:ea:ff:2a:
a6:71:db:f1:e2:cd:41:ca:8b:5e:d8:27:e0:08:26:
1a:84:fd:5c:c0:37:3f:56:69:ff:ac:2f:71:88:0f:
6f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F1:9C:08:0B:35:C1:E5:6F:64:11:B6:A4:CB:E3:CB:DD:9A:60:3E
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36332e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.63.0/24
Signature Algorithm: sha256WithRSAEncryption
95:64:51:e4:f9:80:58:b2:c6:b7:4e:eb:87:c6:7f:3e:d9:5f:
23:af:4a:bd:11:cb:2d:68:91:92:e2:fa:72:54:11:5b:9c:0e:
ce:49:ff:76:64:14:b8:4d:96:a7:73:c4:c8:a0:a5:4a:1e:da:
5b:0d:df:e1:2a:c7:aa:53:1a:92:d6:92:71:1d:c2:cf:81:bf:
af:76:e3:83:1e:c8:85:a2:c1:1d:3b:17:32:eb:c5:97:8e:27:
c7:b6:b9:07:21:1b:00:8d:ec:9f:e6:fe:8f:35:99:a1:2d:92:
a4:3b:c0:2d:75:3d:51:73:5e:b9:9e:ad:62:db:e9:95:37:06:
ae:1c:df:e7:fc:f3:61:bc:83:b4:d3:24:49:38:9d:aa:4e:b0:
31:fd:88:b4:4a:c5:7f:04:a2:31:5f:38:eb:42:09:b7:26:ff:
0d:46:5a:a5:e7:f6:99:7d:cd:93:5e:ab:b0:a3:ee:05:ea:44:
3a:9a:1c:47:43:f4:ce:6a:c1:6c:90:9d:0f:07:17:52:ab:e7:
4d:92:58:53:7a:ab:67:6f:9a:22:df:8b:68:2c:00:37:2d:22:
9d:7d:76:fc:14:fc:a2:b3:62:00:64:df:66:0a:36:ee:4b:de:
48:dc:de:9a:e5:91:4f:38:8d:04:a2:de:91:b2:75:0e:32:b8:
af:00:3e:e5
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 7 11:17:43 2023 by rpki-client on console-fra.rpki-client.org