Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137302e3139362e302f32332d3233203d3e203437353833.roa
File: 3138352e3137302e3139362e302f32332d3233203d3e203437353833.roa (raw, json)
Hash identifier: QCi31POdshO6sOujFdHD/08p3tcbYN0T47kHn+uvUik=
Subject key identifier: A5:7B:D2:6B:BA:A8:AC:5A:63:8A:06:7C:13:8B:F5:2D:53:8A:54:81
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6961A37A8E998822A4FA3F4C6E65C3CCB5CA424F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137302e3139362e302f32332d3233203d3e203437353833.roa
Signing time: Thu 23 May 2024 13:52:11 +0000
ROA not before: Thu 23 May 2024 13:47:11 +0000
ROA not after: Thu 22 May 2025 13:52:11 +0000
asID: 47583
IP address blocks: 185.170.196.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 11 Jun 2024 23:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:61:a3:7a:8e:99:88:22:a4:fa:3f:4c:6e:65:c3:cc:b5:ca:42:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 23 13:47:11 2024 GMT
Not After : May 22 13:52:11 2025 GMT
Subject: CN=A57BD26BBAA8AC5A638A067C138BF52D538A5481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:ec:4b:39:dd:38:06:60:85:2f:fe:1c:18:
31:29:6f:47:7d:6e:b6:a2:4e:b2:a6:b2:9e:a6:60:
68:62:89:59:07:ae:aa:5e:87:a9:80:ea:ef:8a:df:
9e:94:40:3b:66:10:c4:44:0c:13:94:9d:cf:7f:a8:
a7:92:23:d3:15:66:e4:ef:92:0f:b0:f0:f9:64:ad:
7c:18:84:90:ee:0a:e3:80:db:c6:06:f5:b6:bf:b8:
2f:d8:52:d1:10:35:71:de:d2:67:ce:96:ac:c0:74:
02:0f:c0:a2:99:9e:ce:7f:ef:4f:c2:9b:e6:08:52:
40:da:74:ec:31:e8:5d:aa:bb:5c:98:ca:68:eb:45:
e6:b7:80:06:47:3f:db:35:6a:e2:a2:f4:d9:25:bd:
8f:24:f0:ef:f7:15:d6:2b:63:7e:28:72:ff:32:e9:
59:e3:51:1e:89:49:76:1b:4e:8f:90:d6:1c:a4:c4:
f6:c0:17:98:06:d7:b0:59:bb:42:a1:e2:ed:10:00:
59:f3:98:7b:42:d9:bd:21:f4:dd:ca:f2:47:f5:c9:
8d:dd:6b:81:a6:b1:6b:15:59:27:da:33:1e:1d:81:
86:18:5c:a9:74:7f:e3:2e:95:fc:00:02:1a:d1:e8:
14:17:4f:a4:b3:e2:4a:41:27:12:fc:27:24:31:7e:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7B:D2:6B:BA:A8:AC:5A:63:8A:06:7C:13:8B:F5:2D:53:8A:54:81
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137302e3139362e302f32332d3233203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.196.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:6a:c4:60:e4:01:b8:0c:5a:a3:35:21:ac:3b:20:35:dd:5f:
83:4b:63:fc:7c:1a:d1:5c:94:10:18:21:6a:b2:f3:7c:ac:13:
6c:df:9c:f7:e0:b8:89:c6:dd:e2:84:9f:ff:a0:50:a0:21:cc:
12:2a:48:e8:71:f9:31:f4:97:79:88:d4:b3:10:4b:cf:0d:d3:
15:79:ca:74:92:6a:18:61:f1:9f:0f:97:7f:3e:c5:59:91:b2:
fb:32:a3:d9:09:12:ed:96:9c:49:d0:9d:ed:5b:9e:7d:c6:3e:
44:b1:5e:f3:57:2d:ff:a4:6e:18:23:55:9d:86:9b:bf:71:cb:
c7:8f:1e:55:ec:7d:83:25:36:50:e5:8c:fb:b7:0b:c2:45:41:
8c:f3:15:11:6d:3f:43:60:83:11:4e:12:a5:4c:b6:c9:a7:79:
d3:bc:c2:5f:e4:6e:76:b9:24:3f:4b:db:68:e4:08:a2:6d:98:
78:c6:bb:ea:1e:e3:ab:63:a3:f9:3b:5d:63:d3:7d:1f:2f:4d:
97:e4:94:4a:d8:08:98:08:8e:f4:60:17:66:a2:ae:8f:77:71:
94:f0:68:21:e4:e6:d5:0f:2b:a3:8c:b7:7a:f5:8a:d5:87:d9:
3e:ad:85:27:f6:ad:2b:e5:9e:6c:f7:4a:d8:61:73:c8:ee:9c:
3e:47:51:a2
-----BEGIN CERTIFICATE-----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==
Generated at Wed Jun 12 00:16:50 2024 by rpki-client on console-fra.rpki-client.org