Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e36342e302f31382d3138203d3e203331313033.roa
File: 38372e3131382e36342e302f31382d3138203d3e203331313033.roa (raw, json)
Hash identifier: ASWOA/C4KLk/hL/YB9Ce2NKk4mBhxRlnLMgR9YIe8v4=
Subject key identifier: B1:54:E0:A7:2F:8D:7C:FA:C9:55:B6:A9:21:F6:FD:7C:03:6C:56:22
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 50348AB271CC745428A50C6463E14B1A1547011A
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e36342e302f31382d3138203d3e203331313033.roa
Signing time: Fri 31 May 2024 09:35:30 +0000
ROA not before: Fri 31 May 2024 09:30:30 +0000
ROA not after: Fri 30 May 2025 09:35:30 +0000
asID: 31103
IP address blocks: 87.118.64.0/18 maxlen: 18
Validation: Failed, certificate revoked on Fri 31 May 2024 13:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:34:8a:b2:71:cc:74:54:28:a5:0c:64:63:e1:4b:1a:15:47:01:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:30 2024 GMT
Not After : May 30 09:35:30 2025 GMT
Subject: CN=B154E0A72F8D7CFAC955B6A921F6FD7C036C5622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:0b:14:15:c9:e3:39:2c:e0:48:64:bd:62:
c6:98:17:b8:56:42:f1:ea:03:42:96:90:ef:b1:73:
5d:bf:f9:ed:b1:25:94:6e:72:b1:ac:67:3c:79:0f:
68:42:dc:62:95:d2:79:7e:70:bf:86:ae:2e:18:2d:
4e:18:a7:4a:58:31:a7:aa:13:87:ed:d5:49:cc:d6:
1a:aa:37:4a:fb:22:36:ae:86:98:91:fb:4c:45:ac:
00:4b:7d:63:4b:54:df:1a:2d:1f:58:82:1d:32:bd:
c0:98:0b:79:72:7a:e3:d7:16:54:59:3c:3b:cd:87:
fb:41:d4:20:db:f6:8e:46:61:80:5c:38:8a:0d:c5:
f7:79:48:11:c8:d8:d8:05:94:83:5a:70:3b:7f:9b:
ef:24:43:5b:25:b8:5c:59:d0:90:36:02:33:2c:3d:
c1:47:d2:cc:23:34:3b:9f:12:93:52:64:91:6c:cb:
df:d3:ee:9b:45:21:51:77:b7:5d:ad:19:c4:92:19:
51:3d:42:3e:3e:62:c0:b6:7a:a5:2b:2f:4a:6b:37:
11:a3:77:fb:6b:20:de:d9:38:f5:d2:0d:dc:36:ba:
88:52:e6:13:b6:c9:4d:4d:78:1d:ef:69:ba:29:c7:
52:a8:28:17:10:a8:52:64:ab:d0:10:d7:8b:d7:5c:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:54:E0:A7:2F:8D:7C:FA:C9:55:B6:A9:21:F6:FD:7C:03:6C:56:22
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e36342e302f31382d3138203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.64.0/18
Signature Algorithm: sha256WithRSAEncryption
56:d1:97:0c:c1:57:de:43:8d:1a:e1:51:bf:8f:b4:b7:cf:24:
dc:ef:e9:cd:e4:1a:e8:1f:c6:75:7a:80:6d:b2:27:4e:12:22:
b9:ee:65:f2:57:6b:bd:0d:13:75:f7:d5:6f:16:f4:3c:7b:1c:
75:ac:69:d4:e3:1e:98:64:2d:a7:12:08:59:09:2e:1f:ba:80:
e3:45:d0:94:77:74:3d:e0:e4:a4:f6:e9:db:d6:f3:bb:d8:fe:
5a:82:9f:98:a5:db:e9:4f:90:46:9f:c2:ed:eb:6e:98:76:6b:
7f:e9:69:d1:31:b3:01:01:40:91:0c:12:57:af:c4:34:35:8a:
ad:49:fa:8c:b6:75:9a:98:3f:4b:47:0d:ab:6a:48:e4:08:21:
85:ef:b4:d8:da:a2:74:9b:79:cd:0a:13:e2:20:60:da:ec:09:
aa:5a:82:4b:5f:b5:93:6b:c5:de:66:1d:ff:72:4e:47:6c:45:
9b:0d:ff:8c:42:e2:aa:f9:fa:3f:69:16:e4:6f:20:c3:e6:08:
dd:00:0e:eb:af:59:76:6d:34:41:61:60:8c:8b:34:38:94:5c:
7e:97:f6:3d:fa:4f:80:97:52:26:e8:9d:49:a6:26:e3:9b:8c:
22:0e:fc:d3:2c:23:0e:ba:30:b8:59:16:63:32:8d:9e:f7:05:
77:b9:8c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org