Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39342e302f32342d3234203d3e20323131323337.roa
File: 3138352e3234342e39342e302f32342d3234203d3e20323131323337.roa (raw, json)
Hash identifier: gv8kSOYLo/84Ws86u1OeWWetAtImfQYX0vgVWYppBXM=
Subject key identifier: 92:F7:F9:6B:A2:49:97:FB:E1:0E:C7:D5:D8:5A:62:5A:D8:21:9B:67
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 126ED2E89E61F56860EEBD857965A39D241D5A9D
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39342e302f32342d3234203d3e20323131323337.roa
Signing time: Sat 07 Jan 2023 22:17:02 +0000
ROA not before: Sat 07 Jan 2023 22:12:02 +0000
ROA not after: Sat 06 Jan 2024 22:17:02 +0000
asID: 211237
IP address blocks: 185.244.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6e:d2:e8:9e:61:f5:68:60:ee:bd:85:79:65:a3:9d:24:1d:5a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jan 7 22:12:02 2023 GMT
Not After : Jan 6 22:17:02 2024 GMT
Subject: CN=92F7F96BA24997FBE10EC7D5D85A625AD8219B67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:82:3c:04:0f:9a:41:57:f8:93:94:3b:52:
d2:dc:da:b3:0e:7e:41:f9:53:ba:79:bb:4f:5d:51:
ff:a9:6f:aa:e7:50:6c:85:79:19:41:b4:f6:8c:b2:
dc:03:8a:83:8e:ce:f0:1f:e2:44:ae:79:f0:d1:e2:
8a:8a:f9:48:5a:f0:fc:da:36:11:14:85:7f:a3:70:
9e:fd:d0:94:f0:f3:12:73:78:5f:5a:18:dc:de:1e:
07:24:4a:7f:a8:98:39:2c:7d:ec:13:88:db:23:e4:
1d:f6:df:d0:ab:22:72:70:b6:13:24:92:fe:3b:b1:
0e:bb:4f:d5:18:48:62:bf:ca:53:43:58:09:28:ac:
72:d7:78:e5:22:e2:ef:7c:79:a6:30:00:0b:9c:8d:
ea:9b:9c:cf:35:8c:04:88:38:8f:a6:50:52:31:ba:
03:e3:85:52:9d:f3:fd:59:c6:41:7c:ab:43:a3:60:
52:87:b1:1d:b3:85:51:8f:93:d1:2d:b9:c0:f9:ac:
18:44:a8:03:95:f2:51:9a:43:ea:66:1a:3a:8d:d2:
05:a9:b8:2d:1c:0a:cc:d7:67:78:0c:08:49:ad:1a:
60:c6:e9:c2:e4:a8:29:ba:0b:1d:12:b7:61:79:a6:
6c:fd:56:0d:05:34:56:3a:ab:e3:b7:ac:c6:ee:e2:
de:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F7:F9:6B:A2:49:97:FB:E1:0E:C7:D5:D8:5A:62:5A:D8:21:9B:67
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39342e302f32342d3234203d3e20323131323337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.94.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ac:7c:22:9b:1a:f9:26:52:9b:45:ed:a0:2b:83:00:e8:d1:
18:f8:8a:a8:a7:98:9a:04:34:07:23:f2:4e:64:e3:c5:24:f7:
a7:ee:0a:85:96:14:0a:cf:58:12:14:cf:e4:e4:05:19:e1:34:
dc:fb:75:a9:2d:70:e0:63:8b:07:6b:cc:1e:f8:69:43:f8:19:
9e:27:b2:d8:76:e0:ef:1a:af:fb:52:03:cd:f7:d3:bb:b6:c9:
70:cb:2e:92:a2:38:77:06:6e:26:6c:f4:48:4f:3a:04:f1:c3:
3b:97:3f:0b:49:44:48:7d:77:db:04:bb:62:8f:e0:ad:8a:50:
b2:7d:37:83:bf:24:9b:74:a3:5c:6f:88:ac:cf:70:4e:0f:f4:
fb:3f:75:39:e8:d1:96:f9:90:8e:7b:d2:17:be:7a:95:74:1c:
3c:7d:a2:6c:48:e5:d0:cf:85:91:3d:6a:16:a0:6b:03:d1:d2:
0c:04:e6:ee:c6:dd:4c:97:06:33:80:50:6a:3e:cc:40:7c:d7:
5a:ad:3a:22:b7:01:79:02:cd:b8:c8:d4:8e:ae:e6:8a:e5:d3:
85:87:6d:16:79:d0:10:3e:6c:bb:9e:11:07:5f:97:48:9c:21:
2e:30:ce:9e:23:4b:19:14:12:13:99:be:ab:2d:d0:d8:9d:1f:
fe:02:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org