Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e203333363936.roa
File: 38332e3133382e35302e302f32342d3234203d3e203333363936.roa (raw, json)
Hash identifier: luiixHbrOuZwJQne/7ymRli78NCCJfxv8NyBciLPBsI=
Subject key identifier: 4D:CF:E2:7D:9F:5F:64:56:8C:88:38:CE:56:B5:D4:05:E0:E0:DA:93
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 6468C939902DD509669747DA86CAED0497830D14
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e203333363936.roa
Signing time: Tue 26 Sep 2023 02:00:10 +0000
ROA not before: Tue 26 Sep 2023 01:55:10 +0000
ROA not after: Tue 24 Sep 2024 02:00:10 +0000
asID: 33696
IP address blocks: 83.138.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:68:c9:39:90:2d:d5:09:66:97:47:da:86:ca:ed:04:97:83:0d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Sep 26 01:55:10 2023 GMT
Not After : Sep 24 02:00:10 2024 GMT
Subject: CN=4DCFE27D9F5F64568C8838CE56B5D405E0E0DA93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:c1:de:ca:e5:b5:cf:78:b4:5f:3c:d4:f6:
45:c7:42:04:b4:2f:d5:58:cd:b9:f4:b5:46:aa:75:
04:0b:11:15:64:96:87:05:73:fb:01:74:bf:a1:24:
37:5d:4a:92:e0:7b:2b:e4:a8:28:98:5f:6e:28:12:
9c:29:b0:e4:3e:58:cc:6f:22:ad:4e:f3:64:8c:73:
81:8f:a0:9d:7f:63:7f:3f:08:7e:1e:06:73:7b:1c:
d1:8e:5d:3c:36:91:4b:0c:33:0e:cf:d4:08:06:20:
0a:16:bd:50:c8:9d:31:2c:3b:0e:3f:58:a7:f2:95:
06:86:4d:b4:03:fa:b5:a4:ea:31:a1:25:f6:d6:8d:
37:d2:5f:7e:9c:56:f4:69:f8:b7:be:98:df:7b:00:
b3:96:5e:7d:30:8d:ad:27:56:12:7e:4e:7e:da:ed:
70:95:41:b1:86:7d:69:6a:96:dd:a2:53:7e:0d:4d:
d0:94:1e:29:68:c9:c8:9c:77:4b:54:b5:02:a1:ef:
d7:a1:7f:2e:ad:e2:43:ff:34:30:8e:69:45:2a:23:
d7:3a:a9:c2:2b:4c:2c:e5:fd:7f:07:ce:30:24:b6:
74:01:ff:4c:26:8e:f3:6c:79:61:6b:3e:c6:a4:96:
51:82:77:d4:67:e4:a3:e5:6f:27:1d:06:7c:75:2e:
1f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CF:E2:7D:9F:5F:64:56:8C:88:38:CE:56:B5:D4:05:E0:E0:DA:93
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e203333363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.50.0/24
Signature Algorithm: sha256WithRSAEncryption
44:59:d8:88:90:6d:0b:fa:ce:3e:21:18:8c:80:65:4c:4f:8b:
3b:f7:db:54:5f:a2:23:b6:b5:6d:8c:fd:f3:3a:29:e8:cd:4e:
16:6b:6e:76:41:65:b4:72:a1:3f:93:e3:57:f9:55:16:69:2a:
11:05:df:b6:60:c5:aa:35:6f:58:97:35:a7:17:de:fa:77:13:
3c:e2:1e:50:f0:bd:00:c0:3f:db:24:39:54:bc:a0:39:ef:a4:
e4:5d:a3:4a:cc:ac:b0:83:6b:ae:11:d1:95:e7:b6:4a:88:d9:
ec:0a:cc:6c:86:06:72:a7:f9:e0:39:d6:06:d9:69:27:4a:66:
81:09:61:c1:3e:a1:d4:8b:0a:fa:09:82:b0:1e:d4:5e:83:50:
39:db:c2:9f:f7:97:a2:67:87:69:b6:20:dc:c7:81:e3:68:0d:
cd:b8:6f:f1:a2:72:5b:1e:33:48:41:32:0d:a0:89:09:56:a8:
4c:ab:ec:aa:9d:94:e0:1c:97:40:d3:85:e1:11:52:f9:49:6a:
c1:87:a3:2b:b5:ff:a4:ab:02:b1:2d:62:cc:00:bc:c5:c0:58:
11:98:99:a5:fb:e0:b7:1e:17:63:f7:d0:42:37:bb:49:0d:f3:
2d:20:29:6b:5c:e4:fb:c7:a0:68:85:fd:68:1f:6b:3b:86:42:
91:2c:e9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-fra.rpki-client.org