Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230322e302f32342d3234203d3e20313734.roa
File: 3138352e3232392e3230322e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: N3JY/h4PiqBNPvD9YJIDreiYXkCYBRKR8rdu9qmkd7Y=
Subject key identifier: 13:17:A7:E0:48:C6:D3:58:CC:B7:A2:4C:6D:26:55:59:5B:75:28:D6
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 4F84DFFDF1762AE93E8C8ADF3ED875A7E605233D
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230322e302f32342d3234203d3e20313734.roa
Signing time: Thu 05 Oct 2023 11:21:53 +0000
ROA not before: Thu 05 Oct 2023 11:16:53 +0000
ROA not after: Thu 03 Oct 2024 11:21:53 +0000
asID: 174
IP address blocks: 185.229.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:84:df:fd:f1:76:2a:e9:3e:8c:8a:df:3e:d8:75:a7:e6:05:23:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Oct 5 11:16:53 2023 GMT
Not After : Oct 3 11:21:53 2024 GMT
Subject: CN=1317A7E048C6D358CCB7A24C6D2655595B7528D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:dc:04:ff:1b:e1:89:89:ed:50:f8:26:cd:
64:d7:36:43:c0:7d:a2:12:92:6b:64:e6:96:fb:80:
10:dd:56:db:78:04:c9:46:5d:d7:03:fd:6d:00:50:
5c:d7:7e:d5:23:fa:72:2c:d7:f4:d0:8e:3d:1b:eb:
86:54:45:dc:15:a3:3c:aa:47:88:0c:dd:d0:ef:b0:
45:5d:e9:b0:d0:74:98:f4:34:b2:56:cc:2d:26:4a:
f8:7a:c8:4a:c2:65:d7:bb:a5:49:f7:36:b6:f4:b5:
cd:1c:c6:ff:fd:fd:e4:5c:46:d1:1f:19:fd:5d:13:
ec:dc:e2:17:0e:32:61:86:04:fb:62:44:10:c6:35:
f6:9b:80:f5:63:20:7e:ba:71:67:40:47:fd:fe:1b:
76:42:64:52:5c:4a:ec:dc:f7:46:a7:1b:04:a4:1d:
df:97:e3:a7:5e:5c:82:c8:b7:88:76:01:7e:fa:9b:
e4:ca:c1:58:2c:67:19:7f:1e:5b:fb:7b:cc:a3:79:
d1:14:68:f4:df:ef:fd:56:95:8e:63:cc:b9:6e:e9:
2c:94:c5:99:fc:e4:00:b8:a0:23:77:27:0c:af:71:
d4:e4:e1:2a:c3:95:36:a4:db:c4:10:77:8a:55:ee:
92:86:1b:b8:7f:29:02:0e:d8:f4:a5:19:01:60:57:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:17:A7:E0:48:C6:D3:58:CC:B7:A2:4C:6D:26:55:59:5B:75:28:D6
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230322e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.202.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7b:20:0b:66:cf:1d:b0:15:1e:a7:74:77:b6:0f:cf:15:81:
0d:1a:67:d3:61:6c:04:56:ee:29:91:e4:66:fe:58:ff:4f:55:
4b:af:1d:84:3b:23:a0:a8:32:2f:94:6a:ba:a0:fc:70:b4:24:
34:ef:84:b5:f3:f6:a1:09:cf:dd:64:fc:33:0d:57:4e:87:08:
b9:05:cf:de:39:36:f5:43:5c:ca:09:07:f2:d8:22:ae:d5:a3:
18:7f:91:c1:8e:fb:3d:42:13:5f:35:ba:b5:49:1e:be:47:79:
02:09:d5:f5:c4:44:ea:94:1c:0a:25:73:16:75:ef:ac:da:74:
8b:7a:90:9e:ee:0c:5c:e5:fb:06:db:c5:cd:60:e6:8f:3a:65:
5e:34:c4:15:21:44:89:ec:b5:2b:27:5b:12:14:8d:49:80:be:
c5:02:bd:23:94:51:09:ac:82:21:e4:d4:e7:50:de:9f:a5:fc:
33:46:9d:bf:d7:f1:36:96:ad:e2:44:23:62:f5:aa:39:b5:fc:
1b:0a:83:e3:5f:ba:74:b1:71:dd:76:b9:18:4a:71:d2:9c:e7:
a6:10:17:c8:99:96:bf:a2:25:e9:19:fd:1d:39:fb:90:fe:49:
e4:35:b8:60:95:e0:00:44:01:cd:26:42:b8:5f:a7:bc:75:b8:
89:76:27:59
-----BEGIN CERTIFICATE-----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Generated at Tue Mar 5 02:48:16 2024 by rpki-client on console-fra.rpki-client.org