Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33392e302f32342d3234203d3e203631333137.roa
File: 3138352e3235302e33392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: bJFsqe4JA6O8uhcQmxbOXdCI9tDvgsYp8ZqoXUAbChs=
Subject key identifier: A4:C5:71:2C:F0:9E:65:7A:98:31:7A:AD:84:41:DC:0E:B1:38:24:64
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 17D3F8B4D06F88D72A837A457ECB2F9D1ECEACCF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33392e302f32342d3234203d3e203631333137.roa
Signing time: Fri 20 Sep 2024 14:04:50 +0000
ROA not before: Fri 20 Sep 2024 13:59:50 +0000
ROA not after: Fri 19 Sep 2025 14:04:50 +0000
asID: 61317
IP address blocks: 185.250.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 08:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d3:f8:b4:d0:6f:88:d7:2a:83:7a:45:7e:cb:2f:9d:1e:ce:ac:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:50 2024 GMT
Not After : Sep 19 14:04:50 2025 GMT
Subject: CN=A4C5712CF09E657A98317AAD8441DC0EB1382464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:79:3e:db:05:b5:4e:a8:57:1f:cc:51:30:a0:
de:8b:db:83:a3:5c:b9:e5:8c:8c:d5:f8:86:1b:08:
18:46:73:3e:3e:4f:23:76:45:1e:a7:01:ea:f4:80:
b7:db:af:13:c1:95:09:e6:b9:85:9c:b9:0b:06:e0:
4c:4c:3b:e4:3d:aa:98:bd:8a:b2:5e:26:04:c8:71:
21:a5:b8:14:65:b7:51:7a:6e:62:5d:51:3a:19:bb:
b2:59:eb:a3:48:c7:81:ef:ad:fa:eb:b5:a2:c6:8f:
10:1c:c5:47:87:48:29:14:cf:83:ab:2c:49:1f:d8:
34:92:92:6e:dd:72:40:8f:a8:56:85:64:0b:6b:1c:
2e:b4:c4:05:73:d7:cd:11:47:23:e2:f2:3b:e4:4d:
d5:14:bb:58:a9:06:69:51:2e:83:d6:7a:db:89:f6:
c7:0e:ca:19:97:40:21:42:b2:21:bc:62:03:5c:b8:
ef:c4:86:64:14:1e:8d:1b:c0:39:af:51:ba:ad:4b:
c0:d4:d4:f2:98:3e:34:b3:c5:f0:1e:0d:a5:21:e8:
1f:95:6d:b1:d8:8f:0a:8a:0f:fc:ed:92:d9:1d:70:
71:b0:5e:5a:1e:45:cd:ae:7e:74:36:a7:00:56:1b:
b7:94:e6:ab:90:e4:1b:14:76:4f:e5:6f:33:54:d2:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C5:71:2C:F0:9E:65:7A:98:31:7A:AD:84:41:DC:0E:B1:38:24:64
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33392e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.39.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a7:c0:fb:79:95:f3:ac:1e:49:89:5b:9f:c5:16:49:8f:f5:
29:8b:18:e9:52:84:7e:b7:73:3d:50:42:1e:ca:9f:58:3f:52:
84:f4:9f:c1:dd:f4:c6:62:cd:2f:80:11:c1:5c:67:4b:64:5a:
76:06:c8:ef:41:60:57:8f:ca:5e:87:49:d9:bd:1b:33:d2:99:
e0:1d:50:98:94:30:19:f6:f1:d8:d0:2b:f9:e2:ca:99:e1:b6:
be:2c:33:12:c0:43:fb:15:ac:b9:4f:c5:96:ab:66:1c:15:31:
27:a5:a8:8e:0c:c9:88:87:7b:98:fe:2c:ad:c9:bd:c1:65:d9:
9f:2e:d3:5c:d9:c7:56:c8:fb:33:63:aa:21:2e:98:13:72:93:
08:f8:25:83:fc:82:9c:c1:14:cb:39:d5:2d:c1:aa:30:85:a2:
65:1a:52:99:a1:f4:7c:e0:88:af:54:64:21:3c:da:c6:94:5c:
4f:e2:f9:b6:ac:96:ac:35:e4:1a:4a:91:89:f7:4c:6e:45:d2:
8e:b5:89:18:ba:db:d9:68:b1:99:64:1a:00:b1:45:04:17:b1:
77:d4:8a:40:b5:52:91:b7:86:a9:90:ee:9c:10:15:93:90:b8:
f8:68:20:83:9a:f6:f4:45:9b:dd:51:c9:59:ed:83:40:02:ec:
6f:81:07:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:11 2025 by rpki-client