Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e36372e302f32342d3234203d3e203331313033.roa
File: 38372e3131382e36372e302f32342d3234203d3e203331313033.roa (raw, json)
Hash identifier: Jp7kAN2DWBgBWiwF7NtW3J63DEXzww/VSARW+sU/Jb4=
Subject key identifier: 06:2A:9B:DA:86:89:50:5B:3C:AE:8D:9F:29:BA:FD:48:65:68:38:3A
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 3712BB60FF6C880E3B2632F4F2B63ADD2D4E3DA9
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e36372e302f32342d3234203d3e203331313033.roa
Signing time: Fri 31 May 2024 09:35:29 +0000
ROA not before: Fri 31 May 2024 09:30:29 +0000
ROA not after: Fri 30 May 2025 09:35:29 +0000
asID: 31103
IP address blocks: 87.118.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 13:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:12:bb:60:ff:6c:88:0e:3b:26:32:f4:f2:b6:3a:dd:2d:4e:3d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:29 2024 GMT
Not After : May 30 09:35:29 2025 GMT
Subject: CN=062A9BDA8689505B3CAE8D9F29BAFD486568383A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:5c:0c:c4:37:5f:ca:ba:24:5e:bf:ec:92:
00:40:2a:42:76:16:bc:d4:ac:9a:9c:4d:72:ae:49:
5a:85:b2:b1:5f:72:92:a8:32:dc:39:61:09:ee:32:
df:0f:e5:5b:ab:c2:fd:81:df:81:a6:76:09:1b:10:
05:8f:ff:ea:79:60:bd:53:1a:24:1b:03:9e:74:4d:
af:08:53:56:68:05:0e:d3:93:71:cc:6a:92:d5:fa:
ba:1a:5e:7c:95:b6:74:6c:6a:77:5c:f1:19:7b:b4:
0f:ae:05:d9:e0:95:1e:d2:5b:09:c2:10:f6:69:e7:
69:5b:9f:fc:c8:41:28:b8:2f:a1:69:b6:35:e9:62:
4a:21:c0:19:2a:bd:ad:d7:01:cc:c6:b4:59:38:a8:
a7:05:ad:46:2d:43:d6:fa:3f:ce:5a:3b:d7:af:00:
4d:89:b4:b7:ae:12:4a:2e:5a:25:3d:9c:dd:82:27:
74:25:e1:1c:97:fc:17:6b:df:77:9e:b1:ab:77:de:
5b:e2:b2:92:20:1b:f3:e1:85:ae:db:51:44:34:cb:
0e:ef:db:cb:51:51:ae:ef:2a:28:48:31:25:78:70:
f0:32:0d:d9:34:13:de:7e:06:80:1f:ee:a4:09:e2:
1f:5e:40:43:fd:78:79:6a:a7:d8:0f:53:b3:22:a9:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2A:9B:DA:86:89:50:5B:3C:AE:8D:9F:29:BA:FD:48:65:68:38:3A
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e36372e302f32342d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.67.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2b:6b:c1:49:82:fc:98:51:8c:a5:76:61:99:ef:6a:0d:fd:
2b:d8:0d:a9:f4:ad:f5:51:fd:4c:01:30:11:f5:c6:f0:b9:47:
10:c7:ec:0d:07:4b:28:43:24:b9:99:32:ff:0d:9d:e7:c0:17:
9c:a8:8b:ec:6f:be:6d:9c:c2:5a:7c:24:64:d2:13:23:98:4b:
52:7a:92:8c:b5:9e:da:7b:38:bd:b1:d1:5f:14:63:97:01:72:
80:72:38:e8:b3:f5:b7:0a:8e:7b:f1:19:38:86:30:25:ec:70:
31:84:52:c6:c1:7d:20:96:9c:64:80:ca:c6:e1:59:a3:20:c6:
3e:f4:15:49:d5:8b:01:c8:b6:79:bb:7f:18:f5:32:b2:b3:68:
d7:75:2f:f6:76:6c:65:93:04:46:0e:3a:b6:32:0d:3a:f5:51:
0b:a5:96:10:f7:22:fd:a6:1f:c4:fd:72:bd:c8:3e:95:8f:12:
4f:68:26:38:36:5b:f1:a1:55:f5:ef:2e:50:1f:a4:49:d9:e0:
f0:32:4a:85:3a:1f:90:c2:23:87:4b:64:11:e0:03:e1:e6:ee:
40:ce:c0:6e:81:dc:3c:9b:60:84:11:7f:e6:cd:d7:c5:28:c4:
d9:77:c9:fb:ba:6d:71:a9:8a:46:2c:f8:41:23:86:f2:2c:41:
84:03:8a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org