Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3136392e302f32342d3234203d3e20323132363334.roa
File: 3138352e3231372e3136392e302f32342d3234203d3e20323132363334.roa (raw, json)
Hash identifier: ZdYaN2U7aBARSkZqTx9eu4lYzz17sWxUcWFQ3g50p1E=
Subject key identifier: 9A:0C:78:7F:D1:2C:3C:5D:62:36:40:84:51:6D:EA:89:75:23:1A:BB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 064DE560432AADF43716DC327F91D19A3303939A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3136392e302f32342d3234203d3e20323132363334.roa
Signing time: Mon 27 Mar 2023 08:28:57 +0000
ROA not before: Mon 27 Mar 2023 08:23:57 +0000
ROA not after: Mon 25 Mar 2024 08:28:57 +0000
asID: 212634
IP address blocks: 185.217.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:4d:e5:60:43:2a:ad:f4:37:16:dc:32:7f:91:d1:9a:33:03:93:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 08:23:57 2023 GMT
Not After : Mar 25 08:28:57 2024 GMT
Subject: CN=9A0C787FD12C3C5D62364084516DEA8975231ABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a1:89:7a:26:e6:16:4f:14:69:fb:0b:60:dd:
6c:5c:dc:2b:0b:76:c2:b7:82:d4:5f:8b:70:68:08:
fb:6b:94:6d:14:dd:93:87:3a:6b:92:63:1b:f0:e1:
a1:2d:8f:37:d4:56:22:a6:c9:80:c7:4c:07:ef:19:
5e:5f:24:c8:d7:dc:98:52:7e:c8:f6:c3:d6:a1:27:
a5:ae:63:f9:94:34:f8:6b:17:c2:d4:87:58:9f:af:
30:e0:ff:86:60:23:37:05:bd:58:57:f8:69:62:29:
be:1d:7b:3a:66:7d:53:17:41:5c:c0:5c:b8:98:60:
9d:8a:1a:90:d9:fe:6f:35:7f:7e:04:9b:7b:0a:ba:
5f:2d:e6:3e:5e:c3:4d:b6:1e:f6:97:47:99:4c:7e:
82:0a:11:cb:e1:fc:20:18:4a:ce:5c:5a:43:12:74:
4a:5c:2c:4a:38:95:34:8f:ec:cd:47:1d:f8:ab:14:
cd:c0:86:66:0d:a5:dd:20:4d:ed:a5:19:9a:43:fd:
fb:3d:3b:fa:96:70:86:92:39:24:af:34:10:51:48:
cc:36:b8:a8:b9:48:b2:a6:01:5f:7b:fa:8c:75:b8:
4c:09:0e:0a:9e:66:09:5c:b0:44:bd:60:5c:5c:c6:
87:81:60:c4:10:3d:33:b2:cc:b1:2d:72:2f:58:45:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0C:78:7F:D1:2C:3C:5D:62:36:40:84:51:6D:EA:89:75:23:1A:BB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3136392e302f32342d3234203d3e20323132363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.169.0/24
Signature Algorithm: sha256WithRSAEncryption
35:cd:c4:c0:f6:a0:dc:6f:89:99:37:db:40:f5:10:42:33:df:
5f:cb:30:fb:88:06:ae:bb:a7:60:7f:0f:42:dd:f3:b2:84:5f:
ec:f0:5a:9a:56:5e:c1:58:88:c1:ba:49:f4:76:6d:5b:3b:cc:
ed:33:5c:e1:b5:79:f5:2a:9e:84:9a:6b:89:e6:ad:aa:a9:4e:
f0:fc:87:2a:80:12:08:c6:f8:45:9c:9e:89:31:b3:9c:89:8e:
32:92:92:60:22:cf:34:73:23:9f:06:c4:2d:a7:fc:c6:50:76:
68:be:b9:73:91:e7:72:5e:74:46:0f:ce:48:ee:d0:c4:35:8e:
93:c6:fd:1a:4f:b0:fc:82:7a:af:6e:9f:9e:a8:0a:aa:74:b7:
3c:5c:65:e0:8b:1c:67:c2:7b:ae:68:80:e9:69:d8:ac:8e:73:
7f:68:c7:c6:59:14:88:65:55:4c:ec:bc:1d:24:61:d0:fa:0b:
d9:78:99:a3:3a:fb:08:55:c2:07:cd:15:16:69:7b:d4:87:72:
cb:e1:2a:b5:b6:2d:82:1c:24:93:e9:f6:bd:9c:7c:95:ce:a6:
a5:27:d6:fa:32:71:a8:55:4c:9a:63:84:d8:cf:04:c3:37:b0:
29:7c:d7:23:6d:ee:45:a5:4e:6e:f1:ee:51:4d:2a:16:7d:55:
28:45:a9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 08:05:13 2023 by rpki-client on console-ams.rpki-client.org