Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e3131342e302f32342d3234203d3e203331313033.roa
File: 38372e3131382e3131342e302f32342d3234203d3e203331313033.roa (raw, json)
Hash identifier: lPmwZ/326yJqYOTaC2wNZc4GwSk1L/i4dwcgW7+Vwc4=
Subject key identifier: 3A:DF:2E:69:FA:FC:FB:B0:A8:89:AF:52:5B:90:E5:BA:45:71:AC:FF
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 0FB698E535DFAEFE1E2D8316CAD715DB6B1CCD5E
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e3131342e302f32342d3234203d3e203331313033.roa
Signing time: Fri 31 May 2024 09:35:30 +0000
ROA not before: Fri 31 May 2024 09:30:30 +0000
ROA not after: Fri 30 May 2025 09:35:30 +0000
asID: 31103
IP address blocks: 87.118.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 13:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b6:98:e5:35:df:ae:fe:1e:2d:83:16:ca:d7:15:db:6b:1c:cd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:30 2024 GMT
Not After : May 30 09:35:30 2025 GMT
Subject: CN=3ADF2E69FAFCFBB0A889AF525B90E5BA4571ACFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:7a:db:5c:b0:f9:ff:71:1c:c8:7e:a0:58:
2a:cc:43:4a:3e:7c:14:ff:12:a9:be:3b:d4:46:1c:
ae:7b:8b:bc:68:4e:de:39:ca:ca:74:54:4c:ee:32:
8d:6b:98:a3:c0:2c:51:b7:55:a3:cc:20:41:07:86:
a8:3a:39:4e:e4:a0:45:88:1d:b3:31:b4:51:07:7d:
a9:00:26:23:62:9f:44:ac:e4:6d:be:9c:00:c5:83:
3a:ec:0d:90:e9:f4:77:0f:8a:50:6b:f3:0f:55:c3:
09:29:3e:84:7d:c3:72:55:9b:89:58:a0:41:24:14:
5f:9c:96:46:7a:39:ec:3f:a0:90:23:2e:d7:38:83:
48:b5:f8:2d:37:9f:83:df:f2:17:93:a8:fe:46:57:
9b:ba:2d:3a:3b:2f:55:cd:6f:f3:56:2a:07:43:02:
1f:4e:6f:cf:33:10:cd:1a:6d:0f:3d:b0:f0:c7:2b:
ed:8b:e7:48:64:46:ba:36:5b:7e:a3:9d:68:d8:a8:
9b:22:69:75:0b:5c:e6:28:b3:e8:06:9d:72:12:23:
d8:73:ff:e8:e1:b6:0c:59:aa:65:a3:41:15:c5:82:
0f:ca:16:ef:8e:34:60:21:7d:83:6c:49:95:77:a6:
fb:14:da:09:cf:8f:dd:09:69:09:c5:3d:d6:b5:5c:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DF:2E:69:FA:FC:FB:B0:A8:89:AF:52:5B:90:E5:BA:45:71:AC:FF
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e3131342e302f32342d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.114.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7f:9f:c8:43:03:45:24:54:59:c1:5a:e8:e5:8b:27:fb:b8:
fd:d9:85:59:c7:7f:89:da:60:77:99:d1:f4:57:c3:2b:05:63:
19:ee:3d:50:82:45:45:f0:e5:4b:55:02:bd:7f:65:dd:e0:e2:
77:f9:70:19:3f:38:af:38:22:52:2f:82:c1:4e:1b:4c:01:b3:
5a:fc:cd:a1:d7:49:c7:b2:ee:06:7b:a1:db:60:fe:15:9b:e3:
c7:4a:ec:20:48:bb:d5:5c:bc:60:0a:48:58:f3:d3:aa:01:e0:
5f:3b:fc:4e:a5:08:11:61:d7:84:a2:2b:ce:fd:2b:4e:80:78:
59:0a:dd:ba:ef:93:4f:c2:86:06:fe:a3:cf:4c:30:57:f6:54:
a9:36:8c:9f:f9:37:f3:8e:51:38:43:f3:51:c7:83:0b:30:ba:
32:c3:98:8e:26:df:89:11:6d:f2:7a:7f:bf:b5:d3:4e:b2:d7:
2d:20:68:b1:5d:e2:e0:eb:8c:dc:5b:e8:18:27:3d:93:d3:9d:
2c:c2:7a:97:5d:d6:b5:e0:c8:5c:77:92:c8:65:1f:e1:14:8f:
98:f7:a5:d4:f9:d8:b7:35:d7:d5:7b:b8:ec:45:7d:00:20:6a:
19:2e:8c:1e:b8:51:75:ea:4e:a5:8a:d6:dd:65:86:12:33:16:
95:17:a5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org