Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134352e302f32342d3332203d3e20313336373837.roa
File: 38322e3138302e3134352e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: qA2qCv4cMDEO3ScwcxRH/5lvXgpFLLhytmUJQP09F9E=
Subject key identifier: DD:60:E1:33:FF:C6:88:9B:8B:82:BC:A4:3C:28:B0:E5:58:DF:7C:82
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 633925F5B1BDB36C0E280B4BBE09B865DC8F3CB3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134352e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:00 +0000
ROA not before: Mon 26 Feb 2024 08:48:00 +0000
ROA not after: Mon 24 Feb 2025 08:53:00 +0000
asID: 136787
IP address blocks: 82.180.145.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 04 Apr 2024 20:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:39:25:f5:b1:bd:b3:6c:0e:28:0b:4b:be:09:b8:65:dc:8f:3c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:00 2024 GMT
Not After : Feb 24 08:53:00 2025 GMT
Subject: CN=DD60E133FFC6889B8B82BCA43C28B0E558DF7C82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:df:33:4b:e8:f2:8b:92:12:e9:b1:68:88:
41:68:7d:43:b9:bd:1f:15:e4:78:64:f7:32:00:8e:
59:9f:a4:b8:f1:79:bf:02:7d:b8:4e:28:5b:4f:8a:
a4:12:11:c8:c5:b6:f9:ad:0e:ed:da:16:b4:e8:55:
57:cb:61:10:35:6d:9d:fe:97:bc:2d:3d:0e:ab:98:
cb:90:40:cc:3c:40:9f:bb:a8:7e:7a:ab:3b:bd:32:
f9:c2:67:40:94:1e:23:49:dd:d3:92:c0:70:3f:4c:
20:1b:1a:83:0f:3b:11:3a:38:78:09:40:33:54:99:
a9:c8:26:d0:ec:b7:01:bb:55:35:8a:04:03:22:fd:
38:1c:52:e9:48:b5:b7:b8:06:15:e1:90:65:63:35:
57:d1:91:6a:b8:e8:8f:56:ad:12:d3:ba:a0:0e:b8:
70:a4:4e:12:ad:3b:76:b9:98:a0:3a:b1:7c:cc:98:
38:ce:56:0d:1a:f1:c7:4d:40:12:c7:9d:6d:c7:40:
d1:a4:1d:fc:d9:f2:1c:cf:e7:4b:54:9a:6c:f8:24:
fc:cd:6a:8b:f1:48:62:7a:50:61:ab:c9:b0:fb:f9:
40:c9:93:00:b3:14:fd:8e:67:9f:06:fa:2f:d7:b8:
e1:4c:49:1c:d5:74:42:9a:b8:9b:01:3c:76:0b:98:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:60:E1:33:FF:C6:88:9B:8B:82:BC:A4:3C:28:B0:E5:58:DF:7C:82
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134352e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.145.0/24
Signature Algorithm: sha256WithRSAEncryption
24:06:f0:fd:4d:71:de:35:d6:d2:7d:21:55:f4:06:a8:6a:ab:
f9:6c:00:fd:ce:91:54:d5:52:c3:a2:61:0a:da:ce:11:19:bb:
8d:b0:6b:e0:4b:d2:2d:b3:ce:cb:88:4a:bc:6a:d7:54:41:71:
4e:ce:6c:2d:cc:2a:d7:f9:32:04:a6:c1:fd:84:52:58:48:66:
16:23:31:bc:e5:00:47:04:22:08:a5:a9:68:95:b8:30:b2:b9:
da:2d:1b:38:50:99:da:f8:80:91:71:ae:0e:57:85:c7:2e:3e:
f1:2d:04:54:ba:d6:48:8f:3d:38:88:c6:05:01:0b:0d:41:95:
31:68:5c:6f:5e:54:e9:fd:71:06:fc:dd:1f:2d:f4:91:08:81:
2c:2f:42:d3:bf:68:7e:39:9d:69:9d:dc:4a:af:b0:ad:34:17:
fa:2b:d5:49:e7:1d:b6:df:c9:c8:3a:a5:7c:13:7a:df:70:5d:
85:ea:74:bf:53:29:a9:2d:42:c7:a7:6b:b3:b5:78:bd:09:e5:
b9:30:76:b6:6a:ed:7d:83:64:1f:8a:e5:c3:8a:ea:5d:20:15:
b0:1f:41:38:5a:70:97:21:36:70:7b:55:28:fd:af:d1:45:7f:
65:4b:8a:57:e4:9e:d5:ea:f5:04:49:e7:f3:e8:dd:db:50:93:
d5:55:3b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 00:21:41 2024 by rpki-client on console-fra.rpki-client.org