Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3138302e3134392e302f32342d3234203d3e203330383233.roa
File: 352e3138302e3134392e302f32342d3234203d3e203330383233.roa (raw, json)
Hash identifier: 3Dhk2J7LZwwXyQpd+aePT17z7ca2QwMPhGIUivriWR8=
Subject key identifier: F8:A7:42:04:15:8B:8D:0F:FE:A5:3B:C1:48:05:2D:90:13:46:FD:DC
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 13C8CF87F68E311C9A335E9BBCC170103115EBF6
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3138302e3134392e302f32342d3234203d3e203330383233.roa
Signing time: Mon 26 Feb 2024 08:52:58 +0000
ROA not before: Mon 26 Feb 2024 08:47:58 +0000
ROA not after: Mon 24 Feb 2025 08:52:58 +0000
asID: 30823
IP address blocks: 5.180.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 05:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c8:cf:87:f6:8e:31:1c:9a:33:5e:9b:bc:c1:70:10:31:15:eb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 26 08:47:58 2024 GMT
Not After : Feb 24 08:52:58 2025 GMT
Subject: CN=F8A74204158B8D0FFEA53BC148052D901346FDDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ed:0c:aa:b1:71:a2:ee:ce:f8:b1:f6:b9:f2:
4a:50:0a:ac:d5:cd:22:8f:e6:69:7e:d7:63:44:e7:
19:0d:cd:de:46:d5:3d:ec:a5:bf:29:69:30:15:a7:
ea:7c:6a:84:0f:73:88:67:ed:2f:b0:1a:3f:d4:f7:
b8:a2:14:f6:88:c4:18:ff:99:8a:88:f7:b1:8d:61:
9c:f6:4f:15:4d:e0:16:68:d0:ec:48:04:e6:97:e9:
45:df:1c:c6:6a:06:c0:bb:10:3a:8e:08:d4:de:ac:
f6:ff:d7:bc:c2:f6:f7:08:81:70:5b:d7:dc:69:2e:
50:a6:33:b7:0c:e4:7c:f0:cf:60:01:d2:8f:52:12:
fc:e6:fd:35:f7:cc:fd:82:75:67:cd:fc:44:77:60:
cf:b1:34:7e:5c:94:b2:c3:b2:37:55:a0:84:8e:7a:
44:aa:9d:73:a7:50:a2:bf:a6:2c:be:af:27:48:de:
ed:bb:fe:cb:cf:be:85:2f:19:8c:27:ab:fd:8e:bd:
6e:12:c8:10:32:97:2f:48:d5:1f:03:67:31:49:ab:
9f:c4:1f:ca:b5:f3:d7:d8:7e:2d:83:43:a4:3c:1c:
3d:e2:9c:d1:ab:3b:b3:76:4b:9d:f5:05:be:be:06:
86:76:97:64:d0:48:d1:e3:1d:8e:00:7a:a8:bf:0d:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A7:42:04:15:8B:8D:0F:FE:A5:3B:C1:48:05:2D:90:13:46:FD:DC
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3138302e3134392e302f32342d3234203d3e203330383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.149.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:90:e3:bd:b5:55:5a:a5:7e:ee:24:4d:42:e0:fe:e8:45:62:
6f:c9:49:24:23:fd:ca:fc:fa:86:89:f6:80:a1:49:14:3c:40:
3b:bf:17:be:d0:14:b0:13:7e:08:8e:38:21:ab:df:a7:37:07:
39:16:2c:ad:1e:1b:70:68:ec:77:2d:bc:67:22:21:b3:74:4c:
45:e4:9d:e5:b6:80:fc:b0:b9:1c:d1:5f:5b:1f:e4:5e:14:db:
c6:ac:ae:f9:c0:6e:1a:6c:62:60:9c:e1:ba:32:49:c5:21:16:
72:86:74:35:57:bd:80:af:e9:a6:b0:e5:98:b1:26:96:4f:27:
7c:c9:af:33:aa:20:56:db:80:e6:91:20:90:40:5e:38:08:59:
62:36:0e:7d:85:ce:93:09:08:30:46:27:d1:78:d9:5c:f1:bb:
52:11:bd:38:10:fc:60:91:3c:c6:a5:4e:7d:64:73:52:6d:8c:
90:c1:47:cf:cb:60:32:7c:ea:8b:2b:f6:7a:2d:f0:c1:1c:ed:
85:2a:81:20:07:a9:03:df:ea:6a:77:26:69:9d:57:57:2d:93:
fa:a8:01:1f:b3:6e:95:5c:d4:6a:f6:dd:40:49:9f:d0:1f:97:
4a:ce:d3:9b:a6:56:c6:47:4c:ec:83:5b:2b:97:a5:74:fa:9f:
00:49:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org