Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138312e302f32342d3234203d3e203630373231.roa
File: 3138352e3234352e3138312e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: w0df8/ZuNE44OY39EOeTCYLIEGSQgTW69B/vHU4rVSY=
Subject key identifier: ED:69:FE:5D:9F:02:CE:45:B1:79:3F:9E:4F:1D:6A:5D:9C:BE:EE:BF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 69F1075B82FB8ECA1BA48D4D9F641636E762A181
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138312e302f32342d3234203d3e203630373231.roa
Signing time: Fri 20 Oct 2023 13:41:50 +0000
ROA not before: Fri 20 Oct 2023 13:36:50 +0000
ROA not after: Fri 18 Oct 2024 13:41:50 +0000
asID: 60721
IP address blocks: 185.245.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 16:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f1:07:5b:82:fb:8e:ca:1b:a4:8d:4d:9f:64:16:36:e7:62:a1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:50 2023 GMT
Not After : Oct 18 13:41:50 2024 GMT
Subject: CN=ED69FE5D9F02CE45B1793F9E4F1D6A5D9CBEEEBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0e:50:61:49:cc:5b:63:bd:31:dd:ca:7d:82:
d9:c3:a5:61:e0:e1:41:da:d0:d3:6d:56:ab:5d:62:
db:02:36:e9:19:8f:a9:54:6d:6c:8a:68:e1:da:26:
7d:74:f4:be:16:e0:88:c9:77:69:b9:9f:58:ad:8e:
c5:9e:05:c5:2f:e8:ec:4b:ce:63:21:f0:55:8a:de:
19:66:7d:cc:b3:d7:c6:9e:66:8b:f0:1e:6d:dd:83:
95:6b:dd:3b:c7:46:6d:f3:d2:f9:51:c4:90:e5:a2:
65:cb:44:83:43:d2:cf:ce:48:85:4b:38:bb:22:5f:
43:0a:ad:90:3b:f0:90:44:32:fe:7f:b3:41:e8:38:
6c:5f:72:56:2d:d2:ac:65:84:59:c0:99:f8:b6:b7:
f3:60:af:05:4e:7b:1d:ae:eb:36:95:29:5a:d9:44:
91:65:90:60:e8:c4:b3:13:b7:2f:b3:fa:97:22:d0:
83:14:6f:66:dc:4e:17:71:22:ba:ae:73:58:bc:f5:
be:37:02:e4:1c:ec:c0:51:23:2a:1b:1d:ee:87:4e:
20:0a:fe:9b:59:2b:07:76:f7:d8:7f:4c:ee:0a:be:
d7:e8:16:18:2c:5f:07:ec:d3:ef:83:f5:fe:c0:8b:
df:ff:9d:1b:b1:2a:de:e5:b6:4b:fb:02:c5:08:08:
09:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:69:FE:5D:9F:02:CE:45:B1:79:3F:9E:4F:1D:6A:5D:9C:BE:EE:BF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138312e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.181.0/24
Signature Algorithm: sha256WithRSAEncryption
18:31:5b:ca:c3:0a:55:95:23:c0:70:51:7b:2d:bd:7e:d6:b0:
71:a1:3b:fa:7c:9b:22:1e:02:5d:00:53:ef:4b:dc:c7:57:f5:
84:f6:0a:d0:72:c7:b5:ad:ba:ae:7b:f4:fa:3f:36:1b:d1:3d:
c9:1d:61:35:0c:79:de:13:e3:4b:91:61:7a:cd:f4:5c:1e:1d:
54:53:82:05:a6:dd:5b:8c:e6:63:c0:9d:26:25:7a:d8:aa:5d:
70:e9:22:cf:ec:7e:da:69:5c:c4:16:80:ff:41:ed:64:da:0a:
3b:b1:1c:a5:f8:2b:82:b5:e3:44:a9:ee:6f:bd:68:8c:0e:44:
d5:4a:bf:12:09:24:be:eb:5d:ea:a6:b4:9f:95:dc:f6:e3:05:
5d:68:5a:74:cd:d9:52:bf:f9:d9:ad:23:7f:7c:c2:44:d3:21:
fe:72:b1:d3:82:14:cf:3d:a0:46:02:15:07:e4:22:f8:0a:d8:
b3:11:cf:9a:06:de:9b:a1:3c:0b:75:e3:5c:3e:26:c8:f1:3b:
e0:e8:b6:a9:d2:27:96:0b:bd:93:54:75:7f:da:78:c4:b4:1c:
dc:1f:aa:88:27:f1:1e:fe:a4:e0:6d:60:4d:35:a7:e1:8a:0f:
3b:b7:18:70:02:60:8f:16:56:cd:04:16:dd:65:26:61:25:c0:
c4:bb:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 19:29:19 2024 by rpki-client on console-ams.rpki-client.org