Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39342e302f32342d3234203d3e203631333137.roa
File: 3138352e3234342e39342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: GCe2JSQRZEhrEyiAoo9U2pbCgQ4hsp8qwfKAOUif7Uc=
Subject key identifier: 27:44:71:80:59:2F:4E:95:D6:50:CF:7C:C3:93:2F:DA:F2:8C:B0:7C
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 53E4B6B4DB63AE93F8CA2FD31BB816739ED0F43E
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39342e302f32342d3234203d3e203631333137.roa
Signing time: Mon 15 May 2023 18:55:10 +0000
ROA not before: Mon 15 May 2023 18:50:10 +0000
ROA not after: Mon 13 May 2024 18:55:10 +0000
asID: 61317
IP address blocks: 185.244.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 10:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:e4:b6:b4:db:63:ae:93:f8:ca:2f:d3:1b:b8:16:73:9e:d0:f4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: May 15 18:50:10 2023 GMT
Not After : May 13 18:55:10 2024 GMT
Subject: CN=27447180592F4E95D650CF7CC3932FDAF28CB07C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f7:ac:41:ed:b6:34:e5:a7:80:c1:11:4c:02:
b1:2b:f2:73:f1:ca:c5:4e:b8:cd:c2:ce:fb:eb:f5:
ee:c1:05:66:5f:6c:20:83:1e:7b:3f:da:75:49:9e:
46:2b:89:ee:5c:91:3e:01:36:19:86:35:34:50:a3:
14:a8:e8:a7:df:44:52:92:6e:7e:4d:ef:5c:3e:81:
3f:71:58:1d:98:e1:4a:e8:c0:bd:be:be:85:c9:2c:
da:9d:0e:7d:89:56:b7:1d:95:13:2a:8d:d4:b0:09:
7e:8d:25:c0:e9:f5:4a:53:ee:3c:f5:76:3d:fb:ce:
f4:0e:2a:b2:18:55:9c:a4:77:b3:3e:46:24:b3:ec:
fa:61:c6:7b:d6:55:26:e9:01:1f:c6:7a:0a:cc:c9:
ff:a1:b2:d2:43:08:78:71:96:ba:70:86:00:c7:48:
e5:0e:ef:32:98:67:fe:b3:ad:64:1a:40:27:33:14:
83:2f:5a:d9:0b:38:5c:76:95:b4:2f:04:90:a3:31:
c1:2f:90:0b:04:10:7c:72:fb:bd:01:bd:2a:ff:24:
8c:af:87:1b:26:15:20:6c:14:1b:60:28:39:94:90:
d4:2a:3b:c7:a3:1b:6d:69:51:d9:01:50:66:95:a6:
85:ae:96:96:67:a2:ab:43:34:99:df:b4:26:63:c6:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:44:71:80:59:2F:4E:95:D6:50:CF:7C:C3:93:2F:DA:F2:8C:B0:7C
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39342e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.94.0/24
Signature Algorithm: sha256WithRSAEncryption
60:bc:34:98:c1:64:8d:59:0c:45:d6:44:8b:91:93:74:0c:17:
66:7f:20:9b:e4:39:36:80:a2:a4:f9:84:0b:3d:b7:dd:76:9f:
e7:eb:15:cd:fe:c4:33:d3:dc:cd:e5:50:a1:5c:cd:a7:e6:f5:
eb:be:67:ee:20:ba:be:f9:80:b1:16:dd:83:49:7f:3a:9c:14:
85:b7:4a:1b:cc:d0:4f:6e:89:ee:40:a7:b1:c0:e6:70:ae:22:
e9:c1:24:8c:77:ff:b4:30:2d:e3:11:5f:69:84:29:a3:76:5a:
27:61:c2:4c:b2:7e:12:15:29:4d:d3:83:06:32:4c:57:65:09:
36:41:8b:a8:26:aa:03:c8:23:70:e8:4b:d4:1e:b9:2a:c9:aa:
44:01:9b:df:69:e4:2d:02:a0:97:1e:c0:ab:3b:c2:43:c4:9a:
28:5a:67:1d:1a:7e:50:a8:98:55:bf:3f:09:a8:01:dc:98:63:
4a:b0:3b:90:3f:84:b3:77:28:7f:05:95:c6:ef:a3:5d:2d:db:
5c:06:d8:37:30:a9:92:a8:9d:cf:62:a4:29:50:d3:58:26:70:
12:9c:54:26:12:51:54:48:30:fa:92:a7:99:52:96:89:58:95:
e3:6c:f6:be:ba:eb:35:ac:d0:3d:50:01:73:c3:12:36:b3:0f:
de:3f:6f:1d
-----BEGIN CERTIFICATE-----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Generated at Tue Jan 16 13:17:16 2024 by rpki-client on console-fra.rpki-client.org