Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e20323638353831.roa
File: 3138352e3138372e3233322e302f32342d3234203d3e20323638353831.roa (raw, json)
Hash identifier: GXVJTyz8VUZaK4GHrPwR8eZ8hS64gZZoItVB3kyEwCU=
Subject key identifier: 31:5F:51:1D:44:EF:84:C9:9D:7A:F8:08:F7:56:40:45:AE:1D:36:A6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 187D08230F6ED802255A248ADAC4D70124E489FD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e20323638353831.roa
Signing time: Wed 27 Dec 2023 09:47:52 +0000
ROA not before: Wed 27 Dec 2023 09:42:52 +0000
ROA not after: Wed 25 Dec 2024 09:47:52 +0000
asID: 268581
IP address blocks: 185.187.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 20:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:7d:08:23:0f:6e:d8:02:25:5a:24:8a:da:c4:d7:01:24:e4:89:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 09:42:52 2023 GMT
Not After : Dec 25 09:47:52 2024 GMT
Subject: CN=315F511D44EF84C99D7AF808F7564045AE1D36A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:05:27:0c:e6:bc:dd:f8:42:c7:2f:74:cb:0b:
24:03:17:cf:79:a8:23:39:33:e0:0d:31:36:13:f5:
b1:a8:4e:46:65:1d:66:62:f6:3e:7e:f3:f4:30:ba:
3d:8f:b1:d8:98:b2:d8:b7:96:7e:c1:5e:dd:be:cb:
b6:d7:95:01:30:41:25:19:74:c6:92:47:bc:1f:82:
e0:86:77:ea:53:61:be:60:29:bd:15:c1:b2:ab:64:
7f:51:25:ba:ee:a8:f5:02:8f:23:ab:42:9a:4c:9d:
81:36:f9:54:3f:64:64:7e:6b:c3:57:25:62:bd:2a:
ee:35:e9:f9:c8:93:f7:29:a9:3b:f2:54:de:3d:26:
eb:61:e3:bc:1e:eb:d2:f3:ee:fb:84:bf:ab:54:e1:
c5:b7:0a:45:d4:05:fb:5b:45:db:43:07:a1:45:09:
5e:fe:a4:44:81:08:b2:7c:1a:07:e2:ee:b1:a0:eb:
d0:23:cc:93:09:34:22:18:bf:25:18:ae:57:0b:36:
a0:05:ab:33:ae:85:e5:db:e6:2c:ad:99:70:57:62:
f4:97:21:2a:6c:9a:db:28:23:6a:9b:66:c5:01:fb:
1e:0e:40:ba:06:26:93:dc:61:d1:52:29:02:2f:4b:
02:3e:6a:6e:6f:5e:5e:7f:6c:7a:9c:2e:b3:a8:32:
ed:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5F:51:1D:44:EF:84:C9:9D:7A:F8:08:F7:56:40:45:AE:1D:36:A6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e20323638353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.232.0/24
Signature Algorithm: sha256WithRSAEncryption
42:30:68:f5:f4:4e:f8:85:6f:81:f4:ea:66:11:d3:99:9d:0d:
51:aa:42:54:42:11:c3:98:40:fb:75:dc:6f:b7:13:91:19:ba:
be:4d:a4:b6:6c:61:41:88:63:f8:86:81:71:fa:d0:a2:55:10:
f4:95:ae:13:f6:19:23:a9:de:35:c2:a1:88:e8:84:c7:39:a7:
80:d8:bf:65:95:ab:d3:b1:e3:4d:20:8e:37:ee:9a:3f:83:7f:
c4:30:0b:21:54:97:60:d3:c6:cb:3f:82:23:3c:5a:44:0d:1c:
9b:21:29:35:2f:42:bb:2a:9d:db:f4:81:5f:8d:81:4f:94:cf:
86:f6:2b:1e:06:28:81:c4:80:c6:29:9a:3c:3b:bb:2c:c5:d0:
5e:3b:80:73:fc:e8:06:0a:54:48:38:72:8b:3f:df:c0:84:72:
4f:2c:46:63:e5:0d:10:65:7e:89:8f:f3:7c:54:ed:9b:67:97:
17:8c:e7:2f:51:3b:c0:70:82:df:e3:82:d6:53:7a:18:50:b7:
40:aa:56:67:96:bb:0b:02:bc:e6:11:18:8c:c9:9a:c9:d5:d7:
d6:1b:48:54:8f:3a:75:b5:9a:cc:04:ce:02:f3:f4:ef:39:f6:
fb:dd:e4:8f:ca:f3:7f:fe:36:a0:2a:a8:7e:2c:5e:e5:06:15:
e6:54:87:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 00:01:49 2024 by rpki-client on console-ams.rpki-client.org