Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3138382e302f32342d3234203d3e203331313033.roa
File: 38342e31392e3138382e302f32342d3234203d3e203331313033.roa (raw, json)
Hash identifier: ut7Vp1XMrPyPMSwnOhYzVs+ryZDsCxELnPlyc2JrdGY=
Subject key identifier: B4:D3:C2:F9:CC:8E:A9:1F:EA:B4:9B:B0:60:73:82:2B:B1:FA:F6:3C
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 59F3C8516BCFCE8781DFD442A69F2EBB2F726A4C
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3138382e302f32342d3234203d3e203331313033.roa
Signing time: Fri 31 May 2024 09:35:29 +0000
ROA not before: Fri 31 May 2024 09:30:29 +0000
ROA not after: Fri 30 May 2025 09:35:29 +0000
asID: 31103
IP address blocks: 84.19.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 13:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f3:c8:51:6b:cf:ce:87:81:df:d4:42:a6:9f:2e:bb:2f:72:6a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:29 2024 GMT
Not After : May 30 09:35:29 2025 GMT
Subject: CN=B4D3C2F9CC8EA91FEAB49BB06073822BB1FAF63C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:e2:81:fe:ec:05:35:88:3e:c8:06:b5:9d:
01:54:90:14:17:bc:4a:bb:0e:cf:fd:b1:e2:d9:7c:
16:b4:b0:e2:91:f2:0b:91:31:44:a0:72:95:e6:5f:
f4:35:f8:4a:c4:c3:31:b4:0f:42:c8:98:42:85:c0:
db:b7:eb:79:71:40:e6:5f:e8:79:5a:b3:9c:09:d6:
d7:0c:5e:88:86:71:18:c4:99:f0:49:91:0e:0a:fe:
57:d6:be:d1:23:b7:fa:fa:44:71:be:fd:29:2d:38:
cd:07:e2:8e:58:a3:8a:b1:7f:d4:58:c6:c9:c5:fd:
99:2f:23:56:f8:a3:d3:40:b3:79:af:d8:6b:8e:25:
f0:ff:19:2b:c3:11:67:8e:12:d2:da:7c:64:f7:81:
2a:94:57:be:95:29:ff:23:f4:25:05:ec:85:25:0a:
84:8c:ed:07:da:31:15:67:61:02:13:1f:5f:7d:5b:
30:df:46:3a:56:d8:1b:e6:5e:eb:0d:bb:4c:04:33:
97:8a:6e:a4:57:db:06:73:45:71:d7:c7:5a:98:72:
72:d3:a3:b5:e7:65:87:08:6a:c4:f5:67:ef:ad:b8:
c3:73:d5:50:b7:88:89:d1:c7:ac:1d:7e:f1:a6:de:
40:19:c4:7e:7c:cd:93:82:62:1d:63:95:2d:ca:53:
7b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D3:C2:F9:CC:8E:A9:1F:EA:B4:9B:B0:60:73:82:2B:B1:FA:F6:3C
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3138382e302f32342d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.188.0/24
Signature Algorithm: sha256WithRSAEncryption
82:8c:a9:aa:e8:6d:77:3a:fd:0f:d2:d3:37:53:d7:b5:09:17:
4f:65:d7:59:32:ae:04:41:7f:d1:57:fa:af:26:86:8d:1a:7f:
20:6c:8c:25:fc:5d:86:a8:7d:54:d1:a1:40:fd:41:b8:b1:f2:
09:53:5a:2a:46:61:d1:c5:53:33:13:96:87:ec:b5:fd:f8:22:
a4:c8:91:94:4f:5c:99:23:3d:bd:fe:3b:04:75:fd:d7:3a:01:
d6:4e:d2:ac:f2:08:34:5d:bb:e6:22:69:fc:88:d2:ae:04:a4:
eb:ee:ee:23:7f:a7:7b:8f:af:93:c8:c3:01:c4:a4:ec:6d:f0:
97:a3:b3:ac:d4:d3:f8:4a:a9:4c:dd:57:2e:2e:c7:74:f4:b0:
f3:ce:86:69:91:33:68:99:6e:8a:da:49:37:30:6f:9c:a4:3b:
2a:dc:f9:95:e1:59:72:f3:a8:b9:d5:a5:99:86:9f:58:c0:f0:
f6:6d:f5:cf:28:81:5d:68:04:67:cf:19:ed:58:d4:ac:49:99:
46:c4:c9:c7:65:71:ad:dd:e5:6c:36:b7:60:00:a2:73:b3:9b:
94:89:2f:ec:54:9b:8e:1e:7b:d6:8e:bd:14:3f:0b:42:c6:34:
8a:1e:02:b5:5a:37:3f:da:f6:a0:99:47:2e:bb:ac:83:0e:a2:
3a:1b:6c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org