Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3231312e33332e302f32342d3234203d3e203631333137.roa
File: 3138352e3231312e33332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: Y/SI6IpCk9hYCUDcstxVPDbyoTxTnhIfz4ybN5EGU4k=
Subject key identifier: 9A:8A:25:55:BA:82:52:76:C0:46:D9:92:14:16:4A:1E:42:EC:B8:F8
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 787D294B75FBCE91D4C5FB915656B8D7671077E6
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3231312e33332e302f32342d3234203d3e203631333137.roa
Signing time: Mon 27 Mar 2023 08:27:39 +0000
ROA not before: Mon 27 Mar 2023 08:22:39 +0000
ROA not after: Mon 25 Mar 2024 08:27:39 +0000
asID: 61317
IP address blocks: 185.211.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 12:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:7d:29:4b:75:fb:ce:91:d4:c5:fb:91:56:56:b8:d7:67:10:77:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Mar 27 08:22:39 2023 GMT
Not After : Mar 25 08:27:39 2024 GMT
Subject: CN=9A8A2555BA825276C046D99214164A1E42ECB8F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:df:ea:62:76:63:52:2a:d1:3b:d6:1a:3a:
04:52:6e:c5:6a:ae:e8:eb:07:b6:8a:bf:23:8b:b0:
c2:57:17:86:66:2d:29:86:31:fa:6b:4c:cb:03:7e:
55:d9:35:84:87:93:68:f7:95:43:84:21:3d:98:c1:
a7:47:e7:35:cd:ea:1a:c6:30:49:8f:91:46:62:70:
20:7b:d3:17:9b:5b:58:87:2b:1d:df:63:9e:a4:c5:
07:9b:f2:99:d7:8a:bc:f0:3f:6d:6d:7e:8b:57:03:
59:79:82:ee:76:a2:2c:f0:b0:fc:a5:e5:33:42:13:
f7:0c:06:2f:06:7c:de:79:90:67:1e:91:1d:bb:0f:
fa:0c:24:ca:b3:97:41:a3:8b:b1:9f:55:6c:c0:de:
7c:7f:ab:96:fb:5a:a2:7d:e0:19:48:fc:2e:f9:0c:
9c:1f:25:a0:69:e0:80:19:62:8c:38:16:c1:c9:c2:
26:be:13:8b:85:e5:21:74:27:6a:c0:83:36:dd:f7:
14:6b:ea:19:ca:2c:33:5b:d6:3e:bf:e0:11:e8:fd:
6e:f8:89:c8:67:db:5a:73:3b:4c:a7:d5:16:6c:b0:
19:6d:ec:8d:4c:b6:65:6a:08:7a:6c:f1:a1:4b:17:
1a:35:e9:0f:2c:dd:f1:97:c3:15:13:1e:ce:b3:27:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8A:25:55:BA:82:52:76:C0:46:D9:92:14:16:4A:1E:42:EC:B8:F8
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3231312e33332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.33.0/24
Signature Algorithm: sha256WithRSAEncryption
47:93:e5:85:c2:cd:7e:7e:90:5a:2d:62:91:d4:43:e2:f7:cf:
00:c3:8b:bb:ef:0a:4d:ec:be:d2:2b:56:f8:b4:f4:88:82:70:
b2:ff:5f:ac:e7:ab:a8:57:28:99:e4:1d:92:9c:56:ce:8b:31:
83:d6:e9:34:d7:de:71:94:73:71:a5:eb:d2:fc:d7:20:2e:69:
f0:20:9c:40:6c:37:2c:ca:1b:66:c7:7e:2f:57:95:25:31:8b:
bd:c8:33:44:a0:8d:cc:43:67:3d:97:93:dc:0e:bc:00:0a:b2:
3b:47:ce:7e:49:db:09:0d:97:d1:a5:4d:88:ea:ad:a1:7d:ce:
e2:f7:a8:51:f5:b5:cf:4c:e0:6e:84:b5:1f:84:ab:24:7f:f9:
ca:b8:5c:1d:b5:a3:12:15:4d:58:ee:99:9b:74:5f:6b:ba:6a:
da:36:c4:92:49:e5:ab:ea:47:35:70:9a:ca:e3:f1:a9:11:d9:
51:eb:f6:82:70:c0:5b:89:ee:c7:08:76:da:56:0f:87:7e:63:
af:64:50:7d:b6:9b:9f:60:a1:c9:7e:6f:b7:0e:f5:99:a4:46:
0d:23:ab:d8:6f:25:eb:74:d4:f6:91:07:0a:c4:4d:d7:59:99:
cf:1f:9d:89:4e:5b:6a:cd:b5:29:63:ed:05:0d:d6:ee:ae:42:
89:fb:17:06
-----BEGIN CERTIFICATE-----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Generated at Fri Feb 2 14:46:22 2024 by rpki-client on console-fra.rpki-client.org