Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3233352e302f32342d3332203d3e20313336373837.roa
File: 3138352e3232352e3233352e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: lmW1tr+oXnU3FWuvNVpctlE2WDpK8jK26elvRnWz1O4=
Subject key identifier: 17:66:65:A0:63:A1:8D:02:D2:AE:A4:39:5D:4A:BF:74:BD:74:0D:64
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 773A185F77F6C52CCCB42D24345EEE10C4E71A40
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3233352e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 20 Oct 2023 13:41:49 +0000
ROA not before: Fri 20 Oct 2023 13:36:49 +0000
ROA not after: Fri 18 Oct 2024 13:41:49 +0000
asID: 136787
IP address blocks: 185.225.235.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 26 Jan 2024 18:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:3a:18:5f:77:f6:c5:2c:cc:b4:2d:24:34:5e:ee:10:c4:e7:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:49 2023 GMT
Not After : Oct 18 13:41:49 2024 GMT
Subject: CN=176665A063A18D02D2AEA4395D4ABF74BD740D64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:eb:69:92:30:6c:6c:4c:42:d0:9a:56:ea:
bf:80:37:dc:9a:c0:46:e5:fd:b0:1f:a1:98:fd:03:
1f:ce:0e:4b:54:fb:39:29:13:90:8d:4d:fd:53:a2:
89:45:58:82:ad:f6:08:a1:8e:69:21:84:2c:fd:75:
64:39:12:bc:0a:cb:f4:56:36:0c:5b:2a:10:ef:98:
bb:fa:55:18:29:0a:97:0d:74:9c:17:d7:14:24:79:
ca:d1:fe:dd:4a:41:d3:1e:4a:f6:8f:fe:75:f8:3d:
ac:d1:c1:59:06:02:b0:b9:ad:4e:77:ae:23:e1:a4:
f7:4f:ef:42:d8:f2:ab:a3:73:9b:f4:d0:46:6b:84:
4f:0e:fe:3c:05:93:50:d9:9d:c8:5a:76:a7:d9:2f:
5b:36:5a:be:97:29:c5:35:cd:5a:56:d9:bd:97:29:
26:40:0f:47:e8:24:f6:8c:ee:33:a5:16:89:79:1c:
37:11:cd:5e:e1:ba:04:59:52:f2:ac:62:64:5d:d8:
20:b0:20:d0:01:3a:39:66:cc:eb:da:df:87:38:c0:
4f:f7:74:d7:98:06:9a:2f:a6:1f:6e:41:2b:fd:16:
76:c6:29:b1:4f:b7:1b:01:c0:c6:01:28:23:4a:27:
24:1d:85:ee:66:2f:b9:ac:82:ab:da:b3:7d:0a:dc:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:66:65:A0:63:A1:8D:02:D2:AE:A4:39:5D:4A:BF:74:BD:74:0D:64
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3233352e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.235.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a6:98:5d:14:a1:56:94:fb:0f:ea:1d:d8:3c:82:2b:34:c1:
b2:dc:41:98:c0:33:87:01:d6:97:5a:ed:f2:d4:b1:df:7b:f2:
74:b9:10:25:f2:41:6c:94:4b:e8:3e:eb:95:3f:ba:15:d2:21:
07:2f:75:33:d8:82:d4:1f:cb:55:42:4f:33:90:ac:ba:69:e3:
95:9e:84:7b:5d:46:e3:07:7f:26:0a:80:61:ad:2d:cf:a4:f1:
2e:6d:bf:9c:5c:13:cf:c4:69:1f:0a:01:39:fb:55:ee:31:7c:
9f:90:50:b6:56:eb:d2:f4:d4:1d:a7:5b:59:25:c8:1e:d8:1f:
54:1c:1c:95:c6:01:f6:5a:ba:23:7b:15:ec:ec:26:d8:a2:66:
1a:6b:7d:74:be:ec:12:9f:70:5d:c0:1b:8a:ff:4e:31:e7:b5:
9f:3b:66:41:6a:66:03:78:64:c7:45:79:c0:5e:4a:a2:d6:46:
e5:fd:ed:3a:7b:b7:e5:65:e7:06:5b:e7:4e:0e:8a:7f:68:07:
f5:9a:40:2c:d9:07:83:65:80:ea:14:7f:6c:78:ad:99:86:55:
f4:78:3f:17:79:71:25:a5:cf:fe:1b:22:13:1b:69:92:a9:e5:
53:fb:38:df:83:38:0d:6e:95:0e:b7:d2:28:4c:f5:98:de:b6:
05:fd:04:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org