Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230332e302f32342d3234203d3e203631333137.roa
File: 3138352e3232392e3230332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: jIJpnn5w2xZf0ijm15nxBmP9K95pj/99l1APpn4yUag=
Subject key identifier: D6:38:12:D5:18:29:84:AE:66:F4:7B:72:5D:85:F9:4B:C2:EB:E0:E3
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 1B386E3FF83DAAEFE80B8E5F5FE13D2E4E2E572A
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230332e302f32342d3234203d3e203631333137.roa
Signing time: Sat 11 Mar 2023 18:30:07 +0000
ROA not before: Sat 11 Mar 2023 18:25:07 +0000
ROA not after: Sat 09 Mar 2024 18:30:07 +0000
asID: 61317
IP address blocks: 185.229.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:38:6e:3f:f8:3d:aa:ef:e8:0b:8e:5f:5f:e1:3d:2e:4e:2e:57:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Mar 11 18:25:07 2023 GMT
Not After : Mar 9 18:30:07 2024 GMT
Subject: CN=D63812D5182984AE66F47B725D85F94BC2EBE0E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:a1:8b:ff:8c:2b:ee:f5:b6:fd:41:dc:56:
dc:2c:13:77:f1:f5:a0:d9:09:45:cb:a6:11:d7:70:
67:5a:35:c2:fb:dd:c3:ee:f1:bc:fa:4f:91:e2:10:
1b:1b:7c:96:9a:92:e3:b9:5c:8a:23:32:74:44:83:
2a:0e:06:aa:52:b4:6f:56:0a:c1:14:3e:a7:67:4e:
21:c3:4f:4a:7b:aa:91:f0:75:09:de:99:b3:b2:76:
bc:63:12:e1:c6:26:c4:48:0f:b2:5c:f8:4e:8f:a3:
80:94:50:56:8c:e2:5f:f5:c2:cb:2b:7b:81:3c:1a:
b0:ec:e5:b8:f4:de:8e:a0:49:ca:e7:1c:06:a9:1c:
20:01:1f:e2:0d:8a:62:a8:ba:ff:2a:34:f7:ca:c4:
ca:40:64:cc:aa:de:3a:13:82:1b:ec:33:87:e7:77:
7d:90:fe:c5:ef:ba:11:b2:59:28:df:88:e8:34:56:
c0:82:57:10:80:78:1b:98:e6:27:0b:01:44:8f:3d:
af:2e:a3:0e:fb:6b:3b:be:3d:05:f3:dd:1a:f4:84:
46:0d:fd:8c:d3:ec:c7:a5:c4:52:65:da:59:68:52:
df:54:26:6d:e7:5a:c9:73:1d:0b:a5:07:67:f1:09:
03:3b:a3:c7:a2:74:bd:b7:e1:62:24:88:6e:ed:1b:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:38:12:D5:18:29:84:AE:66:F4:7B:72:5D:85:F9:4B:C2:EB:E0:E3
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.203.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4b:71:6a:a2:8b:91:29:d3:81:ee:cc:04:bc:8e:ab:dc:64:
cb:b9:56:21:4d:99:0f:5f:72:ff:2a:b3:97:05:36:e8:eb:b7:
d6:6a:24:4c:36:ed:09:45:71:ff:47:41:40:d3:1a:11:18:ba:
1d:d6:b1:1f:cd:e1:ba:79:2d:b6:95:62:85:b0:74:0b:99:e9:
f0:9d:c6:d4:3d:98:8a:1e:be:79:4f:04:37:7d:da:aa:1b:5d:
0f:e7:eb:a5:39:b5:f1:c9:8a:b4:f1:85:5a:0a:8f:b7:db:1e:
b8:5d:c9:46:b2:a5:01:7d:32:25:35:c3:69:ac:f0:fd:69:c6:
5a:bc:86:e1:2e:4d:31:f1:f4:a1:98:fd:7b:62:39:ca:ed:54:
63:d6:05:02:37:30:b6:81:c8:d9:d5:4e:0f:44:9e:61:97:e6:
be:0c:90:1a:b2:e1:ac:5d:32:8c:5b:13:48:89:c4:e4:be:25:
b4:05:56:ea:c6:bf:0d:71:14:07:53:98:73:92:8a:92:45:07:
38:be:91:53:ad:55:b8:9b:55:0e:d8:69:02:2b:28:ac:14:a0:
d8:e3:13:11:8a:f8:c7:60:d6:59:68:6f:44:da:69:ae:a7:28:
60:9c:f6:0e:8c:94:43:fd:30:85:b1:1a:78:25:8b:67:34:20:
45:b5:8b:12
-----BEGIN CERTIFICATE-----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Generated at Mon Sep 11 00:25:41 2023 by rpki-client on console-ams.rpki-client.org