Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e38322e302f32342d3234203d3e203331313033.roa
File: 38372e3131382e38322e302f32342d3234203d3e203331313033.roa (raw, json)
Hash identifier: FJvyhvCBzSQZk04x6+Yo4vEbLi1K+k8+e77GqTANz5s=
Subject key identifier: E3:34:16:A6:0F:EF:D2:BA:0A:A0:59:5C:30:9D:57:81:E5:38:95:63
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 595DF55C2697FFA0A0261E34FFF39089BF49AC96
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e38322e302f32342d3234203d3e203331313033.roa
Signing time: Fri 31 May 2024 09:35:30 +0000
ROA not before: Fri 31 May 2024 09:30:30 +0000
ROA not after: Fri 30 May 2025 09:35:30 +0000
asID: 31103
IP address blocks: 87.118.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 13:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:5d:f5:5c:26:97:ff:a0:a0:26:1e:34:ff:f3:90:89:bf:49:ac:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:30 2024 GMT
Not After : May 30 09:35:30 2025 GMT
Subject: CN=E33416A60FEFD2BA0AA0595C309D5781E5389563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:85:37:3d:14:07:bd:1c:c8:41:a5:da:2e:
c0:7b:e6:67:40:c5:b7:5f:7c:76:16:52:f9:ca:64:
7e:7c:a3:aa:57:e1:21:f5:0d:a5:a4:66:96:78:f6:
36:e6:3c:2d:ae:de:78:fd:de:71:b3:39:7c:0d:a9:
0a:5e:f9:eb:4e:1a:6c:f7:74:b8:ba:64:42:82:dc:
bd:38:12:35:5c:21:8e:b0:39:01:9a:54:7e:71:59:
18:17:aa:66:c8:df:50:61:21:21:55:80:9b:79:e1:
92:f0:8b:a7:60:e3:2c:c5:4e:9e:14:67:4e:08:c4:
8a:86:09:a8:3b:02:60:d7:98:ab:13:f3:ad:d2:d7:
84:3a:e7:d3:d5:e5:5e:17:29:b6:5c:8e:30:5a:73:
a6:b2:72:fe:71:53:e2:26:3e:80:e0:ea:2c:e7:66:
60:79:de:d3:1d:93:38:8c:c4:62:18:8a:30:63:20:
66:a2:39:76:c0:07:64:32:22:7a:4a:a4:70:59:92:
a8:b1:f1:4c:41:07:7a:da:b2:cb:1a:ab:03:6b:68:
74:48:cc:3d:54:25:c5:0b:99:5b:54:2d:78:0d:70:
59:73:b3:09:57:00:61:fd:ba:de:ac:4a:7d:99:b7:
74:ed:6e:a5:a2:c1:1f:d6:0d:0b:c5:0a:db:7a:26:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:34:16:A6:0F:EF:D2:BA:0A:A0:59:5C:30:9D:57:81:E5:38:95:63
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38372e3131382e38322e302f32342d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.82.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8b:ff:8a:f8:73:ff:9d:5a:39:17:d3:8b:63:1b:cd:ef:33:
20:d1:8a:4f:27:c4:9f:a9:1c:ff:29:99:24:fe:fb:59:e8:69:
f8:64:8a:1e:f6:be:9d:66:36:a4:80:2e:4c:09:0c:30:93:49:
00:a8:c0:f4:16:91:44:70:16:9b:33:fb:7d:95:f8:58:82:68:
ce:b9:f4:67:27:53:ca:86:0b:19:3b:a5:ac:8c:75:6c:e5:87:
01:ee:57:95:1a:f1:37:79:05:39:78:aa:6e:d8:a0:6a:c8:f2:
ce:87:7b:28:15:e0:5c:55:dc:c4:33:e7:ea:08:ae:f6:b9:5c:
90:44:c1:c6:e1:cd:d9:5c:ba:4f:51:89:f0:e2:56:0c:7b:47:
b1:bf:2e:7a:50:10:84:7d:97:f9:68:c6:10:db:15:57:58:68:
22:b2:2e:2c:25:c4:61:6d:a6:c8:6d:3c:41:cc:d6:54:c7:ad:
13:4a:43:5f:24:b8:db:4e:f3:34:d5:69:18:6b:42:fa:c6:2a:
af:5d:f4:ff:ab:30:60:2d:9c:68:cd:54:1f:86:f2:65:d1:cf:
5e:a9:40:70:75:c9:13:f9:12:08:93:ac:df:f4:8f:89:48:c2:
31:bb:4c:e5:6e:32:f9:c8:51:08:39:af:f2:20:ed:94:a0:e6:
bd:de:14:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org