Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233302e3133372e302f32342d3234203d3e20383334.roa
File: 3138352e3233302e3133372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: A/dvenaqqBO/rM1k7nfO4KHixj3lfzbZ/TBjbQMaFDE=
Subject key identifier: 1A:36:FC:69:DA:10:3A:E6:8B:E1:8D:87:D4:22:EE:A4:B9:50:EB:FC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 73A188E2877CF148F34EB687EADC1E97EC929E4F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233302e3133372e302f32342d3234203d3e20383334.roa
Signing time: Mon 12 Jun 2023 07:17:20 +0000
ROA not before: Mon 12 Jun 2023 07:12:20 +0000
ROA not after: Mon 10 Jun 2024 07:17:20 +0000
asID: 834
IP address blocks: 185.230.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 16:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:a1:88:e2:87:7c:f1:48:f3:4e:b6:87:ea:dc:1e:97:ec:92:9e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 12 07:12:20 2023 GMT
Not After : Jun 10 07:17:20 2024 GMT
Subject: CN=1A36FC69DA103AE68BE18D87D422EEA4B950EBFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:0e:17:6c:14:f2:82:ae:01:4e:d0:30:7f:
fb:b9:b7:76:84:c6:67:ea:62:7d:a3:17:00:58:1a:
89:3a:dd:20:f2:71:e5:61:3f:7a:68:34:c9:80:18:
53:b9:b3:34:cb:7d:bf:6d:ec:7c:69:95:a8:54:80:
59:7d:69:8b:8c:f7:3b:86:d4:6d:7a:5d:b3:f1:10:
02:ab:af:5e:ad:ce:f5:78:cc:86:34:88:4d:f6:b2:
72:16:e5:66:cd:ca:23:f3:d7:90:ab:3e:b7:47:c9:
c9:36:33:2a:92:37:72:79:f7:0f:38:77:02:be:ac:
69:a7:0e:50:d8:aa:00:79:13:b5:71:e7:7e:80:c9:
b1:4e:f1:4f:e6:6f:d0:a1:cb:11:00:b3:73:1c:0d:
9c:51:59:63:d2:9f:e8:da:7d:8b:75:59:0c:04:02:
3d:c0:e4:c1:91:f1:dd:8d:a5:a5:12:dc:6f:bc:bc:
d2:04:c9:a9:a9:b6:da:0b:1f:1c:8b:20:16:89:8b:
23:ac:69:0c:fa:1c:e1:a2:b2:94:0e:10:99:19:10:
c9:d5:77:df:68:e9:58:99:bb:cc:68:6d:ea:c0:d2:
0f:2b:ce:f8:4f:7e:8e:c9:c1:4a:74:e7:fb:07:eb:
09:50:38:f5:ea:40:2d:7d:e9:6a:2b:a1:14:ee:e5:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:36:FC:69:DA:10:3A:E6:8B:E1:8D:87:D4:22:EE:A4:B9:50:EB:FC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233302e3133372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.137.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:df:6a:89:ba:ff:82:43:bb:e8:a3:b2:c5:71:99:c4:84:8e:
c4:20:dd:03:04:09:26:be:60:37:21:5e:7c:be:a4:a1:c2:5d:
17:bb:da:db:4f:00:f0:4f:2f:ad:63:9b:54:19:e1:db:fd:8a:
18:14:6b:a2:9e:bd:49:18:43:de:f4:3b:c5:4f:1f:6c:0d:6b:
db:ac:d8:f4:85:c1:91:88:72:d8:4a:35:9e:90:53:bb:85:18:
63:1a:41:60:4f:f8:28:19:aa:7f:4a:f9:c8:85:53:64:69:c9:
43:ff:36:f2:b5:1e:74:08:a5:ef:99:d6:3e:8d:8f:0a:ff:9a:
a4:b9:d0:88:28:d3:fc:2c:c8:c9:c1:7e:3b:52:73:01:42:82:
c8:9d:b1:2b:da:da:f2:16:dd:ae:b3:f0:d0:cb:19:89:25:75:
83:d4:da:df:4e:e2:7a:d6:5b:24:d8:73:d7:55:63:44:21:7e:
94:8b:9a:46:70:3c:0c:32:f7:9e:67:94:8f:68:0a:61:6a:bb:
03:dd:5d:71:25:cd:96:b2:d2:fb:ce:d4:b7:91:d5:1e:71:81:
fa:8c:dd:be:77:9a:fd:c8:5e:ba:25:79:8d:4f:40:60:a2:ce:
69:cc:d2:4c:7c:38:60:e3:22:f0:61:e0:60:22:03:fe:a4:e0:
e4:08:d9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 19:23:50 2024 by rpki-client on console-fra.rpki-client.org