Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233342e37302e302f32332d3234203d3e20313336373837.roa
File: 3138352e3233342e37302e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: eOL7p89IFrwg+MuYokb9HJTjM/tvyXcKAdfa0dX9b4I=
Subject key identifier: 20:0C:08:F1:2A:58:3A:CC:E1:A4:53:61:7F:7A:C6:6B:A1:86:9D:F5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 67A486D42B644B0328C0074A132D81F33825EC41
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233342e37302e302f32332d3234203d3e20313336373837.roa
Signing time: Fri 20 Oct 2023 13:41:44 +0000
ROA not before: Fri 20 Oct 2023 13:36:44 +0000
ROA not after: Fri 18 Oct 2024 13:41:44 +0000
asID: 136787
IP address blocks: 185.234.70.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 18:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a4:86:d4:2b:64:4b:03:28:c0:07:4a:13:2d:81:f3:38:25:ec:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:44 2023 GMT
Not After : Oct 18 13:41:44 2024 GMT
Subject: CN=200C08F12A583ACCE1A453617F7AC66BA1869DF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:cd:37:79:86:1b:5e:0d:23:a2:b7:3e:9f:
d6:9e:ce:a5:fc:92:09:b1:a7:49:75:a1:e4:fa:75:
8e:30:0c:e7:61:fa:49:d4:75:45:6b:22:f8:9b:d7:
9d:b2:09:08:1c:98:8c:10:a7:ca:eb:f3:ca:4f:a4:
fa:57:e1:91:2c:57:4c:2f:76:3c:94:e0:5d:0e:0a:
46:c9:1a:cb:35:28:a4:a6:20:b0:35:cd:8c:67:cb:
cc:fa:59:5d:9f:eb:f2:f3:85:a7:e2:fb:ce:f9:ad:
95:ca:ac:46:f4:f9:56:b2:62:55:89:ec:5b:66:b9:
5f:59:eb:1b:32:b4:d2:6b:c3:dc:86:34:6b:ef:03:
56:46:a6:e7:e0:cb:c8:9b:9a:5f:bd:61:60:f6:05:
c0:d1:c7:1a:c1:60:72:7d:d3:b9:b9:22:e1:a0:9e:
55:47:7c:3f:77:fb:0e:a8:45:6a:be:3e:b7:68:4c:
6e:de:36:77:76:78:52:f6:16:fa:db:2d:a6:a3:e9:
e5:0e:38:57:1a:a5:7b:a7:07:9b:f8:01:70:72:0c:
25:ac:0c:1b:95:a6:8c:ec:da:57:37:cc:91:9b:08:
fc:0f:18:87:61:c7:ce:ce:59:27:b0:ed:72:6e:8f:
10:bd:f6:f1:1f:89:27:4d:87:6a:42:dd:bc:2b:78:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0C:08:F1:2A:58:3A:CC:E1:A4:53:61:7F:7A:C6:6B:A1:86:9D:F5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233342e37302e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.70.0/23
Signature Algorithm: sha256WithRSAEncryption
54:49:9a:24:b1:c1:c6:5c:78:92:83:95:7d:5a:2f:af:f3:9b:
54:55:45:d1:0e:01:66:a3:98:71:e3:61:49:29:a4:2a:ab:75:
8e:2c:0a:34:46:85:cd:0a:59:21:06:4f:50:e3:3b:95:37:ab:
80:f6:6d:8c:20:2e:25:b8:12:36:6a:1c:51:74:2b:c1:8f:83:
9b:01:d7:f8:a5:8c:13:6a:ac:a1:70:11:8e:e7:e1:3b:40:7c:
fc:b5:fb:17:7b:12:5f:fb:dc:59:65:4f:ab:1d:1a:27:48:73:
62:d7:ac:5b:8d:d2:eb:98:c5:2b:81:69:a8:f3:83:99:72:b6:
5e:5c:23:f2:1f:53:28:4c:38:25:c6:b6:ca:f9:8d:82:0f:5e:
56:63:b7:96:63:36:83:d9:ba:c4:77:3f:a6:ce:4e:f5:fb:66:
41:5a:b2:c4:76:2a:ef:f0:98:b4:f7:c0:77:2e:36:8b:a1:d8:
a1:7d:0f:f9:ad:9b:c0:ba:80:26:42:fd:4e:5c:c6:76:ed:16:
df:ae:c0:f6:63:3f:44:44:f4:c1:ac:3e:16:1d:96:36:32:f4:
be:dc:3c:6b:d3:97:35:31:ca:f1:e5:fc:74:af:77:e7:6f:de:
6f:30:82:26:e5:97:7f:de:99:33:fb:ca:46:a9:fe:d8:c1:4c:
d9:9e:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org