Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39352e302f32342d3234203d3e20323035363633.roa
File: 3138352e3234342e39352e302f32342d3234203d3e20323035363633.roa (raw, json)
Hash identifier: aY5uoTEzC/juPJ+bXe5m4osdhxdH3aDrc+A1mEumnPs=
Subject key identifier: D1:2C:2D:63:96:DE:3B:A9:56:DE:7A:8A:BD:41:B2:13:05:D6:6D:FB
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 51262050DD030DF91EF8086A7146F8D19D62DE93
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39352e302f32342d3234203d3e20323035363633.roa
Signing time: Fri 24 Nov 2023 20:21:42 +0000
ROA not before: Fri 24 Nov 2023 20:16:42 +0000
ROA not after: Fri 22 Nov 2024 20:21:42 +0000
asID: 205663
IP address blocks: 185.244.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Dec 2023 09:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:26:20:50:dd:03:0d:f9:1e:f8:08:6a:71:46:f8:d1:9d:62:de:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Nov 24 20:16:42 2023 GMT
Not After : Nov 22 20:21:42 2024 GMT
Subject: CN=D12C2D6396DE3BA956DE7A8ABD41B21305D66DFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:65:86:32:2b:9e:79:40:28:b1:df:2c:88:
cb:cb:1c:d8:2d:84:14:ba:bd:09:89:5e:e7:00:aa:
33:64:db:33:e8:a6:af:d9:1f:60:6e:2c:0f:bc:bc:
0f:24:8c:17:0a:d0:d0:03:04:54:6c:b6:fb:81:f8:
28:0b:d3:f5:8f:68:00:49:46:37:5c:f4:93:63:69:
ce:7e:14:ab:d9:a4:a9:c2:f0:6a:16:f0:bc:99:aa:
51:dd:07:3b:6e:33:4e:de:44:2b:8d:4d:e5:40:7b:
11:15:6d:9e:54:73:04:0d:d4:d8:df:ad:89:d8:e4:
1d:bd:80:38:d6:b8:6d:30:90:5a:8d:5c:36:0c:b1:
87:45:65:cf:d4:7c:b2:ff:53:7d:c9:31:bb:26:b5:
a0:a9:9f:c9:e1:d4:58:26:d3:b5:57:52:36:89:55:
f7:58:97:54:f3:0d:ba:58:8c:bf:0e:cf:23:02:cc:
ff:fc:8e:f9:34:34:95:de:e9:a2:b0:ac:24:ea:80:
f2:b2:6e:0c:63:ba:d8:a4:88:74:b2:b0:e3:09:10:
c7:36:27:bb:4f:c1:0e:e0:80:3f:c9:60:a8:44:05:
18:7c:93:7c:b5:bb:1c:15:21:3b:60:5e:38:8a:f4:
f7:81:8a:74:76:6b:ed:82:90:f7:f1:6c:2e:f2:4d:
2d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2C:2D:63:96:DE:3B:A9:56:DE:7A:8A:BD:41:B2:13:05:D6:6D:FB
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39352e302f32342d3234203d3e20323035363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.95.0/24
Signature Algorithm: sha256WithRSAEncryption
74:1d:5d:23:d5:6f:28:08:dd:84:62:53:43:2a:78:40:2b:a1:
b5:45:18:6d:9e:95:ca:cc:4e:0f:55:f5:98:de:09:af:7c:2b:
8c:90:08:58:3c:c4:4e:ae:09:40:2d:16:03:41:d6:c7:32:51:
3a:24:67:d2:2b:60:7f:a4:41:58:5b:e8:52:26:06:68:2a:2a:
be:d3:9a:c4:7e:15:01:75:47:ee:85:a6:8e:fb:14:cf:0b:1b:
79:98:bb:00:96:5f:7c:7d:73:dc:2b:e2:ef:d8:33:64:ca:bf:
77:90:ad:e2:6c:e4:25:ac:c0:0d:3b:74:2e:a0:4f:94:0f:61:
38:95:3d:ac:eb:47:46:6d:5a:f8:39:02:14:ce:d3:b0:41:45:
da:00:9a:45:09:79:00:eb:1a:46:3b:21:24:ef:3d:5c:19:cf:
ba:52:53:36:b8:82:d3:5c:a7:4e:d7:88:a3:7c:09:29:0d:fa:
68:0b:fb:fd:16:59:a5:d6:35:bd:03:01:e7:82:68:2a:b8:b3:
ca:c8:d1:13:c5:8e:46:a9:3a:9b:8d:a7:ac:a1:64:65:72:0e:
98:cb:e7:62:fb:89:38:5c:e8:81:bc:c3:bc:69:42:82:1b:f1:
93:e3:1b:ba:f9:17:c6:a6:b7:76:c7:1d:37:50:68:ca:ab:ec:
13:d5:96:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org