Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3136372e302f32342d3234203d3e203331313033.roa
File: 38342e31392e3136372e302f32342d3234203d3e203331313033.roa (raw, json)
Hash identifier: 63C/3nTZ2Hg37fhAd8BkJndD4gPpi6Ep0DuZ7YqK3mU=
Subject key identifier: FD:AF:80:DC:A3:38:9A:49:09:45:B1:C2:2B:5A:80:C8:6D:41:24:91
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 4E319090520CD5AAB747409C4F282F6AC4EA8B9E
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3136372e302f32342d3234203d3e203331313033.roa
Signing time: Fri 31 May 2024 09:35:29 +0000
ROA not before: Fri 31 May 2024 09:30:29 +0000
ROA not after: Fri 30 May 2025 09:35:29 +0000
asID: 31103
IP address blocks: 84.19.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 13:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:31:90:90:52:0c:d5:aa:b7:47:40:9c:4f:28:2f:6a:c4:ea:8b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:29 2024 GMT
Not After : May 30 09:35:29 2025 GMT
Subject: CN=FDAF80DCA3389A490945B1C22B5A80C86D412491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:64:91:95:30:b1:1e:ac:d6:da:c3:90:27:16:
41:66:cc:09:d2:d5:ef:d5:6b:33:c1:3d:c1:6c:26:
da:9b:bd:9a:09:79:10:7f:78:dc:ab:7b:62:1c:d9:
16:89:88:71:31:62:5e:b0:43:e2:09:dd:71:90:d2:
c1:5d:a9:17:57:65:a5:95:b1:92:d7:cd:44:4e:73:
d1:fd:84:a7:5a:05:3b:8a:e3:83:fc:03:ed:15:a6:
ae:20:89:6e:78:d8:65:9c:42:84:9d:82:d6:4a:0b:
e6:ea:ee:91:bd:11:5e:4a:b6:ea:40:13:2b:7b:e6:
ea:2b:ce:24:1f:5f:9d:29:0d:46:bb:7e:37:6d:15:
7b:2c:6a:aa:4e:ff:7f:a4:dc:40:7a:12:a6:64:e4:
80:8e:11:1a:19:fe:76:b7:15:78:07:8d:02:e3:a6:
ba:47:72:1b:46:c8:ca:ac:52:33:96:05:4f:ec:08:
95:8d:50:f8:da:51:03:4b:53:60:17:76:01:af:34:
64:ab:a3:f4:7e:4c:bf:23:4b:9a:27:02:d9:bb:5a:
41:be:bd:ee:22:ed:ea:b8:09:5a:28:bf:b8:b9:dc:
f7:3c:43:56:37:e5:9a:3b:e1:d8:94:4a:e8:da:6f:
c8:f8:4e:3b:37:b6:bc:46:c4:17:20:f5:76:70:22:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AF:80:DC:A3:38:9A:49:09:45:B1:C2:2B:5A:80:C8:6D:41:24:91
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3136372e302f32342d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.167.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:9f:b7:dc:ca:ef:41:21:75:1c:54:8e:74:bd:e6:e4:6b:36:
82:31:9c:06:2e:35:42:05:41:69:8e:5c:e6:3f:52:4a:3e:cb:
ed:60:ca:49:72:aa:8a:36:c6:1e:24:97:41:88:a5:3f:d4:9d:
32:00:44:be:d8:88:f9:ff:d5:90:54:a8:00:38:b9:a1:3d:2f:
89:ce:ec:4f:8c:3d:fc:3a:93:21:c4:49:fc:d8:5c:6f:aa:21:
bb:fe:81:cd:00:83:1c:a6:1d:21:89:90:8d:bc:06:b6:89:49:
7c:c0:39:19:b5:8d:dc:3c:80:d0:9c:e9:22:40:1d:c5:03:d2:
6f:a0:a1:10:75:7f:c3:6a:9f:d0:4e:9c:67:f1:e1:b3:0a:d9:
63:49:e9:bc:83:9e:f3:87:28:e2:0e:45:2f:59:dc:53:be:12:
29:cb:c3:7d:d5:bd:7a:3d:e9:c8:08:74:8e:7e:4f:ce:39:5b:
84:51:f9:87:a7:04:90:b4:1a:25:2c:f2:fd:3f:4f:63:16:44:
48:91:b1:d5:72:9e:cb:ad:90:32:64:10:8a:9c:7a:29:15:ef:
b0:9d:fa:1b:b8:92:f2:57:b9:03:3b:32:90:be:1b:97:de:7f:
27:ff:fe:40:09:10:c7:ee:df:38:83:7c:a8:f3:8f:6d:22:18:
2f:d9:07:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org