Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233372e302f32342d3234203d3e20313336373837.roa
File: 3138352e3230322e3233372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 4f18uaaZgz9e6VXO/0bzErVJNkjJf7pcGlExDgXcIFU=
Subject key identifier: EE:D2:D9:96:FD:AC:43:93:6C:02:65:77:28:D1:70:31:1E:0B:72:C8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 109970025DA0B6E2E29B6926490C3457B0136A6C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Oct 2023 13:41:55 +0000
ROA not before: Fri 20 Oct 2023 13:36:55 +0000
ROA not after: Fri 18 Oct 2024 13:41:55 +0000
asID: 136787
IP address blocks: 185.202.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 09:28:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:99:70:02:5d:a0:b6:e2:e2:9b:69:26:49:0c:34:57:b0:13:6a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:55 2023 GMT
Not After : Oct 18 13:41:55 2024 GMT
Subject: CN=EED2D996FDAC43936C02657728D170311E0B72C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:a8:5e:63:77:00:fb:ac:65:89:29:c4:ab:
0d:2b:d5:fb:23:3e:6b:86:8c:48:16:2c:06:8d:5b:
74:d0:e9:69:cb:1b:d7:c1:2f:b9:3f:4e:3b:79:f4:
22:54:24:bc:e3:97:31:9a:cd:d5:2c:df:95:5d:5b:
bc:e1:31:e4:1e:fc:95:b4:93:1d:38:b3:30:8b:1f:
0a:b0:a0:4f:09:33:6a:d6:38:8e:aa:c3:de:d2:e9:
33:84:59:d6:ed:cf:ee:0e:fa:0b:fe:ef:fb:78:7b:
d5:67:65:14:10:cc:fb:7d:0c:f2:2b:e6:8b:49:fc:
f3:96:f8:f7:92:ae:78:39:de:04:ca:ee:7c:92:ea:
2f:18:99:4e:98:81:2f:42:84:5e:85:6d:7e:78:d0:
72:69:15:7e:c2:d0:42:c1:e4:c2:7b:88:9c:96:c6:
74:00:87:fb:5f:0d:fe:dc:73:c4:90:40:7b:f3:3f:
f0:b1:a0:86:7f:15:49:64:81:46:59:ef:0f:83:01:
44:ae:2f:d6:12:b3:3c:c5:25:5e:04:8b:32:ff:5d:
9f:27:28:17:cf:b8:6f:42:37:c6:3f:02:2d:91:9d:
c2:6b:7c:5e:3c:6b:39:cd:5c:92:b1:f9:5c:d0:8e:
2b:0e:69:d9:90:8c:13:21:0a:41:7c:71:c8:d7:15:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D2:D9:96:FD:AC:43:93:6C:02:65:77:28:D1:70:31:1E:0B:72:C8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f2:b4:37:df:da:22:82:21:2d:62:5c:80:b0:ce:77:59:27:
68:42:ac:26:3e:ec:5e:be:56:c5:14:a5:3c:60:40:55:0c:5f:
aa:b3:38:4d:3c:50:51:58:ff:ed:a5:fc:47:a6:10:d0:ba:16:
54:e2:58:a1:bd:08:a7:ba:02:65:63:50:f2:04:8a:94:dd:8d:
69:59:4b:b2:68:2e:6d:4e:41:30:5d:f4:b4:fe:95:5f:c4:36:
23:4b:52:bc:3c:7e:42:c3:dc:b2:15:13:f2:2d:e5:61:ae:f7:
07:96:fd:90:61:fd:d0:ba:56:e1:60:49:a8:e0:e6:77:35:9c:
23:e0:94:a6:5c:be:a9:0b:d1:6f:69:b7:00:4a:09:d1:17:e6:
80:f8:78:72:f0:9b:de:89:56:67:1d:9a:d9:17:61:c7:a6:72:
46:53:c9:fe:44:b0:bd:e5:06:83:8a:86:e5:42:be:b0:0f:8c:
f6:11:8d:3d:f2:3f:af:95:f6:47:50:db:0f:e5:7b:42:f3:59:
c4:d4:d1:00:1f:bc:1f:a3:d0:6a:db:3a:74:8d:8a:6e:b4:02:
6f:93:8d:af:51:b7:af:ec:80:97:09:53:7e:15:1e:42:8c:fb:
35:d2:66:90:52:03:24:4e:99:37:86:7c:a3:3d:81:be:71:74:
57:b3:f5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 12:18:12 2024 by rpki-client on console-ams.rpki-client.org