Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32322d3234203d3e203631333137.roa
File: 3138352e3232392e3230302e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier: V4Oq5VzINRBxvEjQBzL6rV+JOQFh/zdFqDpBj6i9PwQ=
Subject key identifier: E5:EF:92:53:B3:D2:CF:2D:30:AF:ED:EA:40:02:D2:C8:64:37:D6:98
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 4FEF242AC06912F575AAA9BD830922C7D32878C9
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32322d3234203d3e203631333137.roa
Signing time: Tue 03 Jan 2023 16:11:55 +0000
ROA not before: Tue 03 Jan 2023 16:06:55 +0000
ROA not after: Tue 02 Jan 2024 16:11:55 +0000
asID: 61317
IP address blocks: 185.229.200.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ef:24:2a:c0:69:12:f5:75:aa:a9:bd:83:09:22:c7:d3:28:78:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jan 3 16:06:55 2023 GMT
Not After : Jan 2 16:11:55 2024 GMT
Subject: CN=E5EF9253B3D2CF2D30AFEDEA4002D2C86437D698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:75:bd:e5:bd:a7:9c:98:e3:79:9f:25:66:
93:fa:7e:48:c5:f1:d7:9d:63:a2:32:ed:d0:4c:fe:
d8:e3:1e:9d:14:6c:c6:aa:58:6f:fa:b9:c4:f9:05:
2f:b0:cc:37:a1:e5:13:ca:ca:7a:b5:e8:c5:f7:18:
59:57:40:db:c3:1d:65:a4:e7:6e:dd:17:c6:17:64:
7c:35:ba:3f:e8:7e:ee:76:78:8d:88:12:b6:58:50:
c8:45:27:c9:d4:48:ad:df:0d:b3:c0:6d:be:73:00:
f2:56:30:2c:52:48:4e:10:37:62:f9:5a:fd:ca:e7:
fe:17:e2:4a:67:1b:11:07:e5:16:8d:dd:23:93:dd:
11:b4:7c:fd:f3:67:9f:f4:21:16:e5:38:16:09:3b:
45:39:6f:12:2c:c1:bc:e3:a5:b3:92:eb:1d:18:c5:
37:91:8e:bd:9f:76:9b:94:81:44:9f:42:ab:76:a4:
b3:39:07:14:83:3f:c0:0c:b3:04:93:2a:22:f7:9b:
4f:c8:ba:c6:05:ee:08:db:a4:54:49:c9:a2:5d:56:
41:31:fc:af:f1:70:2d:84:9d:76:96:10:e6:d0:7d:
78:b0:ce:1f:5c:82:77:ae:bf:f9:04:c6:ff:3d:99:
bf:2f:4f:b7:65:9f:8d:ee:fc:69:38:be:69:8e:66:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EF:92:53:B3:D2:CF:2D:30:AF:ED:EA:40:02:D2:C8:64:37:D6:98
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32322d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.200.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:c4:87:4a:ba:ee:4d:07:54:8f:87:d8:12:8f:02:da:fe:28:
e8:d3:a0:89:a9:fd:c8:90:e9:bb:34:eb:a9:d9:27:17:fa:84:
7f:2e:ed:80:1b:78:a8:4e:28:2b:fe:25:d4:49:43:cf:01:01:
da:30:02:88:ac:aa:27:64:dc:bb:3c:7e:e9:ca:37:14:c0:f9:
50:d2:a0:c9:8b:8d:ab:79:12:d6:b5:04:af:6b:70:82:06:5b:
bd:5e:ed:40:ef:96:09:ef:15:6a:c8:3b:a3:50:82:2d:bc:c8:
df:b5:39:9d:17:42:9a:7c:03:75:fc:f4:0d:dc:9e:d6:07:7f:
32:0c:9f:c0:0a:7f:43:24:54:37:43:66:8f:25:dd:eb:04:fe:
70:51:a6:0a:be:d8:24:d1:03:76:6e:14:be:7e:0b:54:4e:0f:
b9:94:8a:df:ad:84:28:f2:e3:bc:28:8e:77:74:c4:96:54:65:
1b:ea:c8:28:fa:a6:14:8a:b7:0a:f9:d4:01:ad:26:c6:b5:f3:
e6:53:2c:82:e2:d2:f2:fe:8c:dd:57:44:80:ff:4f:35:d2:01:
41:53:5b:55:72:30:21:ea:ff:0a:03:22:b6:a1:6e:5b:25:98:
7c:87:18:75:cf:35:c2:13:3c:33:c6:eb:24:7e:a8:e8:ca:ad:
2d:a5:22:f2
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 20 14:34:18 2023 by rpki-client on console-ams.rpki-client.org