Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134372e302f32342d3332203d3e20313336373837.roa
File: 38322e3138302e3134372e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: tAdQsmStNs49nvNG7E5RCOrF62yLcP3r9v2lP5mWI+I=
Subject key identifier: 58:5C:F0:8F:F8:21:41:CF:29:41:16:B0:4B:54:3C:8A:B5:B5:B5:AC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 67FB5A69EF03E686B3A886A0C9326E8E98235602
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134372e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:31 +0000
ROA not before: Mon 26 Feb 2024 08:48:31 +0000
ROA not after: Mon 24 Feb 2025 08:53:31 +0000
asID: 136787
IP address blocks: 82.180.147.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 04 Apr 2024 20:39:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:fb:5a:69:ef:03:e6:86:b3:a8:86:a0:c9:32:6e:8e:98:23:56:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:31 2024 GMT
Not After : Feb 24 08:53:31 2025 GMT
Subject: CN=585CF08FF82141CF294116B04B543C8AB5B5B5AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:8a:fe:63:f2:59:74:6c:03:c4:07:b9:56:
65:98:ce:0c:f0:1c:fe:df:26:75:f8:47:ae:a7:ea:
45:ee:de:6f:70:26:e5:d7:31:a2:84:c5:9c:cf:33:
44:7e:74:0c:80:50:c1:3c:71:df:e7:ad:bd:1b:63:
dd:c5:1b:65:72:21:48:82:f1:e3:cf:3c:f1:ea:b3:
b5:e5:fe:c7:d8:a7:a4:ea:bb:d2:5f:ab:e1:fa:0f:
17:44:32:3e:80:ca:69:cc:57:71:d9:eb:d0:da:88:
5f:87:72:8e:22:63:6d:d3:74:9c:3f:23:78:2f:99:
30:65:79:c0:0f:c5:e4:33:5d:22:a1:72:d3:02:52:
4b:b6:e7:74:1b:d4:be:1c:bb:31:d4:f8:4a:6b:63:
13:dd:19:8e:13:73:e6:1c:d8:5c:19:b1:c7:33:7d:
20:1d:22:5a:a0:a5:f1:f3:57:a4:45:d6:1f:5d:a6:
e3:f6:bb:29:b6:18:1f:a4:72:29:3d:a7:ac:4e:3d:
5a:4c:da:c5:4a:ce:65:d2:fc:4b:2d:90:e7:5c:c9:
43:2e:c7:fd:46:16:b9:bc:7d:63:a9:25:ba:aa:e2:
99:ba:52:59:9c:47:43:72:17:78:18:d9:f1:8f:17:
58:5e:cb:48:e0:81:c5:71:79:b9:a9:54:1e:ba:7a:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5C:F0:8F:F8:21:41:CF:29:41:16:B0:4B:54:3C:8A:B5:B5:B5:AC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134372e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.147.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a4:87:d2:71:f1:ab:82:f3:7e:78:d7:f2:bb:c0:d8:3a:8e:
58:55:69:79:f0:5e:ea:b0:5d:5c:f5:e8:dc:8a:a0:70:88:1f:
49:41:d2:5e:97:73:20:e2:80:38:42:76:82:3d:ee:65:a3:28:
10:33:91:c7:69:5a:c3:c7:68:f9:4a:be:6d:4f:6f:24:26:6b:
0d:32:19:73:d9:46:97:8d:14:f5:53:c9:56:36:7d:2f:9c:ff:
af:83:bd:27:32:c9:20:4b:f5:f4:38:ba:95:b2:5c:f5:a4:b5:
6b:75:b7:d1:35:fc:06:93:12:ca:ad:66:78:72:54:c2:84:cf:
5b:ba:a3:11:d2:ed:55:8d:8e:ef:53:c0:d9:cf:a8:27:2d:d4:
ce:78:a9:1e:dc:a9:d6:87:26:9d:7c:9d:50:91:85:55:2c:88:
ad:6a:83:a1:66:58:25:92:ec:67:6b:f3:8c:6e:49:b1:10:55:
de:9c:42:4d:1a:77:88:94:9d:c5:df:9d:55:83:1c:f5:a7:d7:
7c:ca:da:e6:8e:cf:5e:0b:86:77:b6:90:55:a0:90:4f:cb:b5:
81:79:bc:da:00:62:fd:cb:c8:86:a6:31:78:58:58:cb:8d:a9:
2e:08:5c:02:30:d3:64:87:b8:63:4e:46:dd:89:41:85:ce:da:
31:d8:7e:4a
-----BEGIN CERTIFICATE-----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Generated at Fri Apr 5 00:26:55 2024 by rpki-client on console-ams.rpki-client.org