Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234332e302f32342d3234203d3e20323039323432.roa
File: 3138352e3231332e3234332e302f32342d3234203d3e20323039323432.roa (raw, json)
Hash identifier: 2K46ptg3AnSAFLiygnEMYLsMt1/gjvmBq0qL4PM5HYY=
Subject key identifier: A0:0E:A3:B7:26:EC:B3:32:7F:EA:D5:61:A8:7D:06:95:6C:C1:43:97
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 6E752C4C5D56A56F4921DED76517EAF225EE1D82
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234332e302f32342d3234203d3e20323039323432.roa
Signing time: Tue 03 Jan 2023 16:09:09 +0000
ROA not before: Tue 03 Jan 2023 16:04:09 +0000
ROA not after: Tue 02 Jan 2024 16:09:09 +0000
asID: 209242
IP address blocks: 185.213.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:75:2c:4c:5d:56:a5:6f:49:21:de:d7:65:17:ea:f2:25:ee:1d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jan 3 16:04:09 2023 GMT
Not After : Jan 2 16:09:09 2024 GMT
Subject: CN=A00EA3B726ECB3327FEAD561A87D06956CC14397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:71:01:9f:5b:7a:31:01:df:0d:f2:6f:0b:e9:
f4:61:06:0d:66:72:d0:3e:20:22:77:dd:df:88:f6:
26:ec:52:2f:5b:06:de:77:d6:5b:41:47:ce:97:c9:
20:4b:a7:8f:86:54:1f:d1:c7:71:e1:cf:d9:95:a2:
39:38:53:ce:9f:09:10:a0:08:3a:21:0b:2f:b2:54:
3a:95:9a:62:22:ad:26:2e:73:6d:7d:e2:1f:d6:1a:
42:10:50:5a:51:78:86:8d:92:34:65:3a:ce:22:69:
f6:e3:4e:30:8c:ba:73:7f:9f:4b:c8:e5:da:43:fc:
0e:b7:17:9f:db:30:10:fa:83:11:0c:dc:72:15:6b:
49:25:8b:6b:eb:cf:6f:60:1d:85:91:13:80:ac:9c:
a2:84:b2:2d:8c:59:26:32:db:f1:d3:61:a7:3b:36:
ed:02:d6:0e:1c:12:a6:a5:5e:a3:84:f8:5f:b1:3f:
ac:b6:ee:03:fb:a0:51:8a:64:9b:60:a2:6e:34:76:
c9:dc:5e:7c:cb:50:75:25:23:06:02:aa:98:0f:04:
68:26:14:78:58:5f:e9:d5:c3:ee:43:1d:0a:da:35:
a5:dc:dd:85:a8:a5:4a:db:97:cb:29:46:96:94:93:
95:c2:be:ac:ec:05:d8:4a:6d:d4:ab:3e:9c:a9:ff:
6d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0E:A3:B7:26:EC:B3:32:7F:EA:D5:61:A8:7D:06:95:6C:C1:43:97
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234332e302f32342d3234203d3e20323039323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.243.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:72:e4:da:98:99:18:12:4a:47:c6:4c:1d:58:cf:eb:24:e2:
f6:43:50:98:f6:f2:4e:63:7d:25:50:d2:bb:f2:42:dd:d4:0f:
05:eb:7e:12:3e:8f:37:76:6b:b4:b6:3d:f2:32:8f:6b:fc:aa:
9a:76:c8:7e:cf:fe:39:02:cc:d3:0f:f1:51:77:11:30:64:5b:
1e:3b:a0:3b:77:19:98:82:af:bc:c7:2d:a1:22:43:12:6b:69:
54:82:aa:00:04:ae:5d:1d:47:74:2c:d9:75:80:b2:5d:28:d4:
5c:6b:f7:09:18:7e:9f:93:be:08:eb:5b:d5:53:25:38:a4:fa:
97:3e:10:99:6b:0c:70:13:5d:2e:2f:0d:38:a3:59:60:02:e2:
50:a1:ea:d3:e9:aa:bb:47:68:ef:56:53:a3:a6:7c:82:58:45:
ac:b6:4f:a2:8b:11:c7:c5:85:3c:95:27:8c:37:78:1a:46:c1:
6b:76:82:e1:15:79:50:82:db:73:35:3d:f9:4b:5b:f4:7c:6a:
d3:d3:ad:4e:ec:3b:7d:3d:e0:c8:87:c3:d4:a7:26:56:75:33:
83:97:b4:a8:7c:72:d2:02:c2:30:01:9c:d5:c0:7f:83:10:f2:
3d:42:6e:e4:a3:0b:44:10:17:f8:d9:0a:d9:18:5a:44:94:05:
2e:fd:8a:3d
-----BEGIN CERTIFICATE-----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Generated at Thu Oct 19 14:59:48 2023 by rpki-client on console-ams.rpki-client.org