Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e20323632323837.roa
File: 3138352e3138372e3233322e302f32342d3234203d3e20323632323837.roa (raw, json)
Hash identifier: HLmgtMtPEqQhgsCT0pJlWXgGKgQL+ixGeaqwNA9rchs=
Subject key identifier: 5C:62:2E:DD:DA:E5:F7:83:EA:74:04:78:5D:EA:B0:C6:72:13:EF:B2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7A877CC182F1855BD0F6808FD7FDB4A09E629E07
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e20323632323837.roa
Signing time: Wed 20 Dec 2023 19:18:39 +0000
ROA not before: Wed 20 Dec 2023 19:13:39 +0000
ROA not after: Wed 18 Dec 2024 19:18:39 +0000
asID: 262287
IP address blocks: 185.187.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:87:7c:c1:82:f1:85:5b:d0:f6:80:8f:d7:fd:b4:a0:9e:62:9e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 20 19:13:39 2023 GMT
Not After : Dec 18 19:18:39 2024 GMT
Subject: CN=5C622EDDDAE5F783EA7404785DEAB0C67213EFB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:54:d5:0e:fa:ad:04:4a:d1:af:ae:b0:a9:01:
30:ec:66:df:66:15:1a:25:e5:b9:01:39:b7:c4:0f:
23:55:f8:6b:a2:a5:7d:fd:fd:b9:4f:f5:4f:45:e2:
09:18:06:27:ad:30:2b:bf:75:49:70:4c:84:8c:91:
61:3d:22:f5:5a:a1:7d:30:66:21:79:8c:90:a0:e7:
95:97:ec:25:38:6d:dd:f7:6a:28:89:cd:c9:30:cc:
5f:9e:bb:1d:44:d2:00:cb:39:61:4b:b4:f7:e6:66:
8f:f2:12:9a:f3:8f:9a:cd:32:4a:ff:58:1a:d9:12:
b0:53:5d:5f:f2:d3:0a:bb:1e:98:be:71:51:97:c7:
63:8c:77:4a:32:d1:76:3d:10:d2:c1:2f:e5:b7:9e:
82:c2:60:54:ee:32:ec:5e:e8:09:f5:07:4c:85:8b:
21:24:57:73:4c:27:1d:6c:35:f7:4c:ae:23:cd:37:
5a:a1:70:a4:38:49:1c:bd:bd:d4:43:d5:c1:63:8d:
f1:aa:c3:67:5b:58:52:29:a7:b0:6c:8b:7d:e0:35:
55:b5:7b:cc:3f:18:31:94:b8:64:95:87:54:5d:7d:
ad:75:66:56:a0:5d:52:db:1a:ce:d2:e4:29:a3:03:
6c:80:cd:df:7f:a7:42:21:41:a9:63:54:5b:59:ed:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:62:2E:DD:DA:E5:F7:83:EA:74:04:78:5D:EA:B0:C6:72:13:EF:B2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e20323632323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.232.0/24
Signature Algorithm: sha256WithRSAEncryption
49:25:41:73:2f:9b:a8:40:8f:d8:ca:f7:93:77:c4:2f:e2:11:
79:db:b0:d4:9a:f3:f6:44:1a:ef:36:06:76:4a:e3:27:a1:09:
5b:2f:ea:7f:73:99:6e:2f:1b:fa:f1:d5:f4:2d:73:17:ea:98:
52:1a:4a:30:ff:26:58:95:1f:ff:cc:b7:54:d8:c9:cd:b4:08:
6d:1b:46:db:e7:af:27:fd:ce:37:0f:e7:e2:70:e7:2d:df:7f:
99:26:ae:98:f3:2c:d6:7a:4c:35:4d:8d:8d:4e:a9:21:c1:b0:
9f:a3:78:fc:d5:66:5e:48:26:1a:3f:0a:9a:77:eb:37:7a:b5:
82:fa:a7:b7:20:15:fc:e6:a2:d0:f4:bc:06:74:29:fd:24:7c:
42:b9:93:c5:d2:d4:39:1d:d3:9f:aa:1e:c9:a2:d1:51:87:62:
8e:e3:0c:ea:3c:d0:6d:27:5d:f4:9d:61:d5:a0:74:be:93:5c:
fa:20:96:e6:d4:02:94:b7:1a:4a:6c:b9:e5:2b:1d:f5:19:4d:
27:6a:4a:a5:fa:fc:39:70:05:71:3e:ab:82:86:54:f8:44:f1:
b9:5e:6f:a3:59:b1:cb:7e:d7:44:d6:cc:f2:08:fc:98:f1:77:
c0:66:b2:65:9c:92:47:d0:eb:da:28:a1:21:af:52:5f:30:c8:
2d:30:34:e3
-----BEGIN CERTIFICATE-----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Generated at Sat Dec 23 10:19:03 2023 by rpki-client on console-fra.rpki-client.org