Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39352e302f32342d3234203d3e203631313338.roa
File: 3138352e3234342e39352e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: TOjAgSCGYW0dXot5hCN99qHyjBgw5/tvs6DiSe6QIck=
Subject key identifier: A6:E3:43:BC:C9:79:7C:E5:92:03:E6:AD:E6:23:8D:81:C3:24:A3:F9
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 748A3A92802484176ED495455F9587EDD6605E7E
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39352e302f32342d3234203d3e203631313338.roa
Signing time: Tue 03 Jan 2023 16:08:44 +0000
ROA not before: Tue 03 Jan 2023 16:03:44 +0000
ROA not after: Tue 02 Jan 2024 16:08:44 +0000
asID: 61138
IP address blocks: 185.244.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:8a:3a:92:80:24:84:17:6e:d4:95:45:5f:95:87:ed:d6:60:5e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jan 3 16:03:44 2023 GMT
Not After : Jan 2 16:08:44 2024 GMT
Subject: CN=A6E343BCC9797CE59203E6ADE6238D81C324A3F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:a4:da:b6:2b:37:c1:77:ad:e3:e0:67:16:
1b:7e:5c:c2:dd:52:02:94:2e:b1:90:4d:5a:af:20:
a8:25:a9:df:ae:0a:99:42:73:51:24:59:a2:af:dd:
14:f2:5e:8c:31:39:94:06:de:80:d4:9d:50:85:e8:
7c:b9:6f:f0:d1:12:cf:37:28:d8:13:f8:a8:94:12:
07:e9:df:92:1c:a0:12:42:5a:62:d5:67:91:f8:cb:
7b:62:85:a0:c1:a4:a1:99:51:32:e1:ac:cc:3f:5c:
63:13:e3:94:a0:7b:2d:9b:9c:7c:9b:2e:0b:97:46:
bb:3b:b8:32:99:0d:31:0b:50:9f:f9:d2:3a:57:c6:
c6:da:e1:e6:b7:e0:33:29:01:dc:dc:fa:e0:5d:dd:
3c:5d:f3:4a:67:b9:c8:7a:9b:c5:f1:8d:89:a5:30:
6c:dd:ee:20:bc:93:46:74:b2:d1:92:b7:c2:7d:bd:
17:96:f9:43:25:e7:26:41:23:b0:30:df:3f:d9:05:
23:ad:61:25:22:aa:a3:83:38:45:7a:92:55:46:4a:
6a:89:2b:a7:2b:4a:20:fd:c5:8b:b0:8d:4f:18:54:
cb:a3:d7:38:44:0a:75:cb:89:d0:10:a7:38:19:ac:
4a:2f:39:81:b8:81:6e:ae:1e:83:51:39:2b:67:5a:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E3:43:BC:C9:79:7C:E5:92:03:E6:AD:E6:23:8D:81:C3:24:A3:F9
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39352e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.95.0/24
Signature Algorithm: sha256WithRSAEncryption
94:03:60:6e:73:5b:85:01:ea:ba:f6:2a:26:54:81:99:12:3b:
d8:01:77:f4:ee:9f:1e:1b:dc:bb:eb:41:63:3a:96:4b:e1:45:
64:33:5b:74:ad:cb:fa:a5:bc:00:e3:f4:21:89:34:bf:3a:90:
04:ce:4a:ef:43:88:91:a9:1e:c4:1f:fd:02:82:00:e7:67:96:
42:3d:c8:b8:ef:8e:c6:0e:78:e1:39:41:73:75:ab:06:50:a2:
80:90:ba:24:77:4c:9e:a6:97:a1:c9:50:73:d4:aa:07:44:cc:
b5:69:35:24:78:59:4d:9c:be:b8:cc:cf:98:7e:cf:a5:98:1c:
38:4b:3d:97:a6:c7:84:22:ca:08:ad:9f:d1:98:3e:89:d9:c0:
fd:b7:13:d3:bd:2f:5c:f1:57:2d:5f:99:8b:d0:75:c6:92:94:
41:8e:b4:6d:6b:7e:c4:83:1e:73:c9:a4:a4:1a:e0:00:26:3a:
3a:bd:33:d2:98:ef:41:24:42:c1:3b:fc:90:52:d0:c1:19:cc:
ea:13:82:93:b3:a6:eb:f4:e1:3f:79:70:a9:13:1d:aa:1d:da:
f4:be:2e:38:4f:33:c7:6e:87:49:37:2d:a6:4f:6a:f6:94:f3:
0c:3d:ab:18:8f:a6:45:d1:ae:26:ce:5c:10:92:31:bf:9c:51:
03:c0:e8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org