Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136342e3130382e302f32332d3233203d3e203437353833.roa
File: 3138352e3136342e3130382e302f32332d3233203d3e203437353833.roa (raw, json)
Hash identifier: G5jytoKzGlLLtd30l7BnrI4buECG23yzdSv+mguGuCc=
Subject key identifier: E3:7A:A5:AD:EC:AA:39:D2:E6:90:12:9D:61:95:F3:4C:71:75:7E:F4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 25872E547BDAEC91A2310C231BD32ADD34FF17
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136342e3130382e302f32332d3233203d3e203437353833.roa
Signing time: Thu 23 May 2024 13:51:46 +0000
ROA not before: Thu 23 May 2024 13:46:46 +0000
ROA not after: Thu 22 May 2025 13:51:46 +0000
asID: 47583
IP address blocks: 185.164.108.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 13 Jun 2024 11:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:87:2e:54:7b:da:ec:91:a2:31:0c:23:1b:d3:2a:dd:34:ff:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 23 13:46:46 2024 GMT
Not After : May 22 13:51:46 2025 GMT
Subject: CN=E37AA5ADECAA39D2E690129D6195F34C71757EF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:c6:d4:43:fe:59:71:fc:35:9e:15:bb:e6:
e1:6c:7a:60:08:26:ae:1d:8f:2c:e8:f7:f5:ae:52:
86:0c:0d:c8:6f:e4:b1:c9:bf:e4:39:fc:a6:1c:68:
2d:e3:3f:c7:9d:e2:d4:7e:30:56:fb:6e:dc:7c:d9:
76:cf:ad:7e:ee:6a:50:18:47:3e:89:85:ce:03:73:
ab:a5:32:20:bd:71:db:3e:56:1f:87:b2:ef:88:ed:
ad:b8:b3:ed:ff:a4:19:66:07:16:54:ca:a3:88:92:
b6:48:60:67:5e:03:f4:4f:22:d5:19:df:77:a8:65:
b3:9d:8a:39:15:c3:e9:41:cf:26:6e:b5:e8:64:46:
4f:4b:24:78:fb:4a:66:52:f8:36:f6:ba:c3:8f:2a:
17:e2:7f:0b:c4:36:fd:91:81:1b:62:fc:2c:82:f1:
63:8c:77:03:73:16:27:4f:c5:89:2b:ac:0a:ae:c3:
35:a3:eb:c6:2c:e8:14:d7:e1:4f:92:05:0c:b7:0a:
70:e0:81:46:86:88:91:56:44:95:a4:1b:a1:a7:b9:
3f:0c:18:bb:37:a3:a0:11:1f:1e:13:82:42:05:2c:
01:7a:99:e5:38:50:df:0a:58:2c:51:a7:1d:34:87:
d2:23:a6:67:c2:b9:ca:9b:9f:e4:ac:fd:81:d3:a8:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7A:A5:AD:EC:AA:39:D2:E6:90:12:9D:61:95:F3:4C:71:75:7E:F4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136342e3130382e302f32332d3233203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.108.0/23
Signature Algorithm: sha256WithRSAEncryption
83:f5:b7:d6:7a:9d:df:c6:33:22:99:6f:b5:be:52:3e:e6:46:
25:21:bf:8c:55:85:14:ea:04:00:0b:46:02:80:81:05:2e:e9:
e0:2d:16:5e:3d:eb:38:94:28:32:15:d4:64:0b:06:79:51:92:
76:d9:1e:e0:41:a6:0a:6f:42:0c:7d:33:4c:96:ef:e6:06:82:
3d:e7:81:10:7d:a8:ef:12:5d:28:2a:18:b3:b1:77:8d:93:b2:
09:40:b2:c9:4c:c4:7a:e9:80:fd:70:9b:2d:82:09:f8:d1:0d:
bd:7e:c7:86:8e:4e:b2:1f:ba:f3:67:63:60:4d:75:00:4e:a1:
51:eb:9e:a8:2d:ab:3f:6c:c0:39:f1:b0:c5:74:1f:17:0f:cb:
cc:b8:26:fe:af:e3:37:cf:fd:df:4e:27:24:a2:6c:e4:80:60:
61:32:ae:e0:77:ff:21:06:31:98:f9:cd:b8:7d:44:5f:84:8b:
3d:d4:7d:af:39:41:39:0e:aa:1c:18:9c:2a:26:e1:b2:16:76:
fa:19:60:ee:7a:d3:0b:8c:f1:05:a4:a5:11:72:77:49:5f:72:
c7:0d:72:91:92:74:9b:d9:18:db:55:91:0b:f9:d3:ce:85:fb:
af:24:a6:10:23:fc:36:ac:cb:9e:61:0d:16:12:6f:e6:9b:68:
b1:11:27:69
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgITJYcuVHva7JGiMQwjG9Mq3TT/FzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygwOTdhMjhmNzdlYjBhNGFjMzU0YThhYzI4NzU0YjJhM2Ji
ZTNhOTU5MB4XDTI0MDUyMzEzNDY0NloXDTI1MDUyMjEzNTE0NlowMzExMC8GA1UE
AxMoRTM3QUE1QURFQ0FBMzlEMkU2OTAxMjlENjE5NUYzNEM3MTc1N0VGNDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALBIxtRD/llx/DWeFbvm4Wx6YAgm
rh2PLOj39a5ShgwNyG/kscm/5Dn8phxoLeM/x53i1H4wVvtu3HzZds+tfu5qUBhH
PomFzgNzq6UyIL1x2z5WH4ey74jtrbiz7f+kGWYHFlTKo4iStkhgZ14D9E8i1Rnf
d6hls52KORXD6UHPJm616GRGT0skePtKZlL4Nva6w48qF+J/C8Q2/ZGBG2L8LILx
Y4x3A3MWJ0/FiSusCq7DNaPrxizoFNfhT5IFDLcKcOCBRoaIkVZElaQboae5PwwY
uzejoBEfHhOCQgUsAXqZ5ThQ3wpYLFGnHTSH0iOmZ8K5ypuf5Kz9gdOoXw0CAwEA
AaOCAkQwggJAMB0GA1UdDgQWBBTjeqWt7Ko50uaQEp1hlfNMcXV+9DAfBgNVHSME
GDAWgBQJeij3frCkrDVKisKHVLKju+OpWTAOBgNVHQ8BAf8EBAMCB4AwgZgGA1Ud
HwSBkDCBjTCBiqCBh6CBhIaBgXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzE3Ny8wOTdBMjhGNzdFQjBBNEFDMzU0QThBQzI4NzU0QjJBM0JCRTNBOTU5
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ1hvbzkzNndwS3cxU29yQ2gxU3lv
N3ZqcVZrLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUFBzALhoGRcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mZTM3MDhh
MC02N2Q1LTRhYzItYWJjNC1hMzMyNTkwYjk5YWYvMTc3LzMxMzgzNTJlMzEzNjM0
MmUzMTMwMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM3MzUzODMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBuaRsMA0GCSqGSIb3DQEBCwUAA4IBAQCD9bfWep3fxjMimW+1vlI+5kYl
Ib+MVYUU6gQAC0YCgIEFLungLRZePes4lCgyFdRkCwZ5UZJ22R7gQaYKb0IMfTNM
lu/mBoI954EQfajvEl0oKhizsXeNk7IJQLLJTMR66YD9cJstggn40Q29fseGjk6y
H7rzZ2NgTXUATqFR656oLas/bMA58bDFdB8XD8vMuCb+r+M3z/3fTickomzkgGBh
Mq7gd/8hBjGY+c24fURfhIs91H2vOUE5DqocGJwqJuGyFnb6GWDuetMLjPEFpKUR
cndJX3LHDXKRknSb2RjbVZEL+dPOhfuvJKYQI/w2rMueYQ0WEm/mm2ixESdp
-----END CERTIFICATE-----
Generated at Thu Jun 13 14:15:32 2024 by rpki-client on console-fra.rpki-client.org