Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234332e302f32342d3234203d3e20383334.roa
File: 3138352e3231332e3234332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: GNltTPa5Y+BWC1dW4W4T4BZYntSibjlTGsUgnbhlvK0=
Subject key identifier: 72:CF:DC:AB:E4:35:FD:5B:6F:0E:6B:3D:55:24:11:07:A5:01:9F:A4
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 2CB82453627031BB854E4F22EBC1884B6D33D69F
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234332e302f32342d3234203d3e20383334.roa
Signing time: Thu 19 Oct 2023 14:24:43 +0000
ROA not before: Thu 19 Oct 2023 14:19:43 +0000
ROA not after: Thu 17 Oct 2024 14:24:43 +0000
asID: 834
IP address blocks: 185.213.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b8:24:53:62:70:31:bb:85:4e:4f:22:eb:c1:88:4b:6d:33:d6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Oct 19 14:19:43 2023 GMT
Not After : Oct 17 14:24:43 2024 GMT
Subject: CN=72CFDCABE435FD5B6F0E6B3D55241107A5019FA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:eb:bd:a1:e4:d6:26:94:41:75:83:e3:59:
bd:ac:7d:bb:34:0c:9a:45:24:08:4c:4a:10:fa:b4:
bd:57:42:8a:48:64:bf:af:98:08:9a:bd:8d:d7:a7:
94:12:4a:0d:21:18:25:37:ad:60:af:2d:9c:a5:2c:
50:66:76:cc:44:ca:b8:3c:ce:f7:eb:22:9b:72:b9:
e2:d7:0a:48:bf:f8:21:54:e4:49:3a:1a:77:17:ee:
1d:a6:40:86:de:48:1f:ad:00:d6:76:e3:45:8f:95:
18:70:c1:b5:b2:f3:6d:5f:80:19:17:1a:e0:91:95:
50:aa:8b:d5:bf:d8:b6:7c:58:42:67:1e:c0:cf:60:
1c:1d:fa:5a:98:b4:bb:11:70:50:c5:2b:82:f2:59:
23:4e:85:c2:38:d6:a6:6b:0a:2d:54:42:7d:f8:36:
2f:2a:85:cf:35:38:9b:53:28:76:3e:dd:90:d2:a8:
70:b0:54:22:77:9a:07:82:45:36:b9:73:3a:90:a1:
5f:87:79:6b:fe:ef:cc:fe:cf:fb:5f:74:b6:9a:ee:
db:7f:35:7c:a6:fd:99:b1:0e:74:ad:bf:12:23:e3:
97:4d:0d:f4:60:3f:d7:30:50:14:72:f8:41:ea:99:
1c:9f:56:28:cc:af:7f:a5:25:41:fa:1b:26:e4:3c:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CF:DC:AB:E4:35:FD:5B:6F:0E:6B:3D:55:24:11:07:A5:01:9F:A4
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.243.0/24
Signature Algorithm: sha256WithRSAEncryption
05:99:be:92:a9:de:11:1d:ee:93:bd:9d:56:75:53:c7:e3:34:
b3:b0:fe:16:ac:4f:a4:7f:f1:bd:f7:27:6f:b2:31:e8:af:a7:
68:71:87:4f:13:c1:cb:c6:49:63:d8:09:b3:fc:0c:0d:dd:ca:
0d:c6:98:0f:bb:f4:97:57:b4:ec:b6:dc:0c:08:4a:63:5f:bc:
32:03:5e:1d:08:b0:eb:ae:d5:79:ff:68:5d:3b:86:37:04:ec:
3e:b7:6b:c7:f6:d8:c0:f0:58:f8:ec:7e:70:6e:6a:18:cc:e4:
fd:7c:44:ff:2b:1e:f3:01:78:a1:8d:1b:a6:9e:c5:ec:1c:04:
2c:b9:af:b7:e2:e2:0c:a8:61:e0:15:f7:e9:38:1e:5e:3c:46:
a5:6c:94:3d:3d:df:9b:29:6d:91:cc:e0:60:36:d2:4f:eb:24:
67:13:19:2e:e8:19:4d:50:91:76:6f:99:68:56:2a:5f:b9:8a:
2a:86:52:0c:e1:59:78:e5:18:a6:7a:26:1d:1c:3e:cb:cc:b6:
a0:f6:11:d0:91:44:e2:90:79:ee:24:70:e3:bd:88:39:43:c5:
ce:ad:95:28:46:90:1a:54:8f:01:2f:96:3d:dd:9f:93:74:75:
59:bd:82:aa:9b:0d:29:04:ff:c7:eb:c1:cf:4a:e9:6a:58:8b:
67:da:d0:38
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 17 00:32:29 2023 by rpki-client on console-ams.rpki-client.org