Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39342e302f32342d3234203d3e20383334.roa
File: 3138352e3234342e39342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: PQ5Ssgt+FogQ7hAhdH6DGZ0nk5AyzP4cVZpQ5m/nzFs=
Subject key identifier: B1:2B:97:9C:3E:73:82:06:70:8A:F2:C7:97:57:84:F4:12:CD:0C:4C
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 422A8195C87B8FEA1744145B405259FC3CDAF81B
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39342e302f32342d3234203d3e20383334.roa
Signing time: Sat 17 Feb 2024 00:03:13 +0000
ROA not before: Fri 16 Feb 2024 23:58:13 +0000
ROA not after: Sat 15 Feb 2025 00:03:13 +0000
asID: 834
IP address blocks: 185.244.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 12:59:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2a:81:95:c8:7b:8f:ea:17:44:14:5b:40:52:59:fc:3c:da:f8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Feb 16 23:58:13 2024 GMT
Not After : Feb 15 00:03:13 2025 GMT
Subject: CN=B12B979C3E738206708AF2C7975784F412CD0C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:d6:5d:13:ac:cd:fe:91:5b:65:e6:54:77:
63:b2:00:52:da:71:26:f7:25:c9:d8:2d:93:78:0f:
37:c3:f6:5c:29:b9:9d:9b:c7:cc:26:56:66:d6:7d:
a2:5e:ee:5e:e8:73:46:a6:30:a5:31:1c:2e:2b:1d:
56:8c:4a:c3:48:c3:93:05:cf:d2:2e:e8:43:6c:6a:
7e:5b:88:be:6d:da:cc:cb:c0:19:c5:f2:fb:e7:cc:
7b:d7:93:06:8b:d4:93:a3:1d:cd:fa:a7:8f:60:2e:
b9:05:77:e7:8a:61:6b:c4:cf:fd:89:cc:11:ba:8c:
9c:d2:19:15:cb:19:ec:f4:f1:b8:90:77:17:36:34:
3d:f9:d2:88:04:77:6e:cb:12:8e:5b:cf:cf:21:57:
a3:46:30:0f:63:28:f9:ad:bb:3c:b8:04:b3:04:6d:
8c:e7:d2:db:50:fb:3c:c2:26:62:d0:e4:ea:8b:fb:
fe:6c:03:80:24:30:04:e2:6a:40:20:cf:77:50:be:
3e:45:1e:96:90:2f:04:76:7e:53:e4:72:32:fa:8d:
75:05:6b:da:04:f9:fb:62:88:fb:19:57:d0:c0:f2:
8f:a6:6b:e7:4b:e7:ab:5a:c0:f7:b3:11:1d:4a:53:
e9:3c:bb:d0:f7:9e:d6:23:cd:dc:4b:ca:17:ca:16:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2B:97:9C:3E:73:82:06:70:8A:F2:C7:97:57:84:F4:12:CD:0C:4C
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:53:74:22:23:17:7f:28:c4:e5:23:e6:c3:e5:86:9e:35:4b:
b5:12:51:d7:c7:53:38:b3:1a:35:52:b9:5a:91:49:9d:18:9f:
86:4c:86:0f:ad:af:60:8d:a3:d0:a4:d3:d4:43:0b:61:43:08:
f1:3d:4b:c8:6d:b3:2e:14:a9:75:b8:11:48:62:b6:a0:fb:3a:
eb:8b:b7:fb:3b:97:54:b4:d1:41:59:9e:df:c2:7d:23:e0:33:
0a:b2:d9:ab:fa:c9:c0:b7:43:cd:c8:f0:cf:49:ff:8f:89:48:
b2:79:df:71:ad:a7:c9:86:3c:7c:6a:fd:dd:28:a0:8a:69:a6:
51:db:ca:f9:49:2c:6f:79:f9:79:72:8d:6c:d0:94:cc:ac:92:
ea:f2:e1:98:13:b6:41:6d:fa:54:d7:18:9b:c7:ad:0a:4f:67:
27:28:05:2b:f7:32:ba:c5:2d:7f:ef:49:52:49:b7:96:ad:68:
90:3c:3f:bc:8e:9b:e7:a1:7f:f4:25:ff:b6:fc:d2:6d:d3:a9:
ac:16:a7:7c:66:ac:be:8c:a2:5e:93:3b:60:38:2f:0b:0c:59:
bf:34:b5:a2:e0:71:01:48:a4:61:96:2e:7d:2d:3f:1e:6a:50:
a1:7b:94:2a:e0:39:eb:37:ef:4f:7a:26:b4:0e:7e:7e:7f:01:
9a:e3:3b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org