Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138312e302f32342d3234203d3e20323133303336.roa
File: 3138352e3234352e3138312e302f32342d3234203d3e20323133303336.roa (raw, json)
Hash identifier: xu7x3Zlo8K+DG4sBvzsLSRjUdDXPmMKS5gI0VzOiDt0=
Subject key identifier: 9F:F9:6D:F6:76:A4:C4:F3:FD:29:38:D7:AD:93:02:FB:50:1B:96:9A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 196EBF14AB68D3C81A6E8E8D9DB2684FAC6750C2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138312e302f32342d3234203d3e20323133303336.roa
Signing time: Fri 20 Oct 2023 13:41:58 +0000
ROA not before: Fri 20 Oct 2023 13:36:58 +0000
ROA not after: Fri 18 Oct 2024 13:41:58 +0000
asID: 213036
IP address blocks: 185.245.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 16:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:6e:bf:14:ab:68:d3:c8:1a:6e:8e:8d:9d:b2:68:4f:ac:67:50:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:58 2023 GMT
Not After : Oct 18 13:41:58 2024 GMT
Subject: CN=9FF96DF676A4C4F3FD2938D7AD9302FB501B969A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:e9:e0:9c:e4:f5:dc:e7:4e:9a:c2:d9:5b:
af:d3:bd:b8:da:35:74:08:4f:a6:03:1f:a0:42:84:
59:da:b9:3e:15:fb:f4:b0:00:36:01:4e:24:ae:39:
5c:fc:72:8b:c0:ee:b7:d4:15:1f:35:0b:33:e4:93:
de:08:ef:fb:2d:60:5e:64:fb:e7:95:17:47:68:1f:
18:45:33:e5:f7:eb:f3:de:d0:73:91:f2:84:81:3b:
62:5f:90:72:1c:38:62:4a:d7:35:9e:98:07:19:12:
74:f8:00:f8:19:90:c1:3a:1a:ac:75:fd:78:88:94:
9e:20:a6:9b:65:d6:e5:b5:1e:b5:52:ac:4e:68:fe:
63:8e:7a:9c:91:92:a3:ee:da:6c:52:ad:a4:3f:a8:
8b:c8:87:82:d7:37:c9:56:59:7b:b4:3b:4f:98:0d:
41:a9:cb:96:d2:5b:62:56:74:1f:dd:16:24:12:70:
ee:3c:1f:7d:0a:3b:b4:41:a9:9f:5f:cc:0f:36:07:
99:8b:6a:35:69:28:05:37:2e:db:fe:9d:9d:14:95:
7c:c3:e3:e1:64:2a:16:da:4c:0c:78:69:74:bf:f6:
a9:bd:e9:a4:ca:88:21:a8:2f:a5:f8:b3:fc:5c:4f:
a7:5a:07:fa:ca:e9:65:b7:aa:24:36:5d:9e:b2:a3:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F9:6D:F6:76:A4:C4:F3:FD:29:38:D7:AD:93:02:FB:50:1B:96:9A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138312e302f32342d3234203d3e20323133303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.181.0/24
Signature Algorithm: sha256WithRSAEncryption
65:9a:59:ac:b7:c9:88:35:45:e6:7a:1f:ff:9d:e8:34:f0:c1:
f3:c9:e2:6a:66:97:9c:f3:e0:5d:2b:41:88:95:a0:66:5a:ef:
13:70:08:e9:3f:ea:46:ec:88:c7:89:88:70:a5:d3:3d:69:c5:
61:8b:b0:5d:73:6a:62:db:d9:62:af:03:79:c9:ff:78:04:2c:
bf:22:a6:f7:ed:f5:48:4b:6a:e2:75:2b:7c:ef:72:a9:33:96:
c9:65:53:11:0c:49:51:44:b3:5a:31:ab:92:33:1d:d2:55:39:
24:7e:3a:68:63:29:58:ab:6a:f6:b8:98:cb:c2:6e:86:21:bd:
99:b9:61:31:75:c5:fc:f6:0e:f0:16:a5:89:8b:19:c7:03:2d:
cb:42:40:52:4a:0e:b3:74:7a:78:67:0a:79:86:74:35:29:c6:
cf:5a:e2:4f:91:82:74:6e:14:97:e1:92:b4:6e:ac:5a:3e:f0:
cf:59:1f:18:ba:05:d4:3b:30:68:fc:85:18:9e:87:c2:11:23:
1c:12:e7:2e:e0:fc:4c:08:95:71:db:cc:8d:12:0e:92:b5:b6:
0f:58:2e:c8:01:0c:d2:3f:e2:a3:b4:3b:49:af:35:34:17:11:
a1:26:78:8c:ef:bf:f6:fa:7e:8c:f4:62:f1:c6:db:7a:65:44:
00:ea:63:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 19:23:50 2024 by rpki-client on console-fra.rpki-client.org